$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8671393-394e-3846-b473-dd02157d2c89.roa File: d8671393-394e-3846-b473-dd02157d2c89.roa (raw, json) Hash identifier: wKCwgqp/KVKhFqLGnD4mmCPUzs/1alK9OS08cRsLIPU= Subject key identifier: 8E:DA:BB:2F:35:50:43:BD:59:92:4E:FE:E0:77:BC:A2:F4:D2:3F:56 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0EBC10EFB4A2469D7B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8671393-394e-3846-b473-dd02157d2c89.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.69.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0e:bc:10:ef:b4:a2:46:9d:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=01241810-6716-4b88-a88d-4c0e6c680d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:08:0e:e1:cb:da:e0:f2:df:08:fa:b1:e6: 1a:95:52:84:59:fd:8c:e2:08:b0:d4:e1:9b:77:5f: 06:06:78:39:96:44:2d:27:ec:9f:18:38:41:c3:bb: 2f:19:44:4b:79:90:31:a9:d6:2d:2b:ca:6c:ac:30: cb:dc:27:19:44:66:b7:4d:b7:98:a2:f1:f3:14:c2: 3e:78:8a:11:cb:6a:88:f7:a8:5e:5d:da:5e:b4:aa: c4:31:6c:23:55:bd:db:b6:a1:e0:36:1b:83:46:d9: 32:65:de:24:f6:50:92:2b:56:79:48:b6:b0:bd:bc: e6:a5:83:54:6d:04:5d:62:8c:67:df:da:57:39:37: 7f:44:9a:16:b5:0a:80:04:97:0e:8a:d1:18:05:2c: 56:8c:96:a5:98:33:b1:21:55:f2:e5:26:a3:8c:54: 87:4c:fd:09:01:62:25:bc:08:a6:fe:0b:c0:d1:76: 0b:13:b9:de:b4:57:74:a6:7f:29:e8:75:cb:f0:b3: f3:35:b3:f2:ff:5f:8c:41:d5:91:cf:b9:a1:2b:75: 5a:ce:4f:88:73:5b:95:97:50:26:d9:c7:e0:15:af: 55:3e:ad:77:57:07:72:f2:1a:47:01:11:7e:1c:47: e4:b6:33:aa:da:ad:91:34:ed:12:0a:5c:7f:e8:41: ec:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DA:BB:2F:35:50:43:BD:59:92:4E:FE:E0:77:BC:A2:F4:D2:3F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8671393-394e-3846-b473-dd02157d2c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:46:de:ce:16:e9:a2:e9:47:8c:f9:be:ad:e1:f0:81:ca:c8: 7e:22:4e:fb:73:db:e0:63:21:f4:e2:d7:ac:7f:0c:c8:cc:3f: 41:3c:85:b0:e2:ed:2a:66:13:cf:05:57:8b:a9:ef:5b:a4:26: 8f:a8:ac:91:b1:82:36:fc:d6:05:44:26:77:f9:b4:31:e3:da: cd:ba:ad:d1:f5:73:48:ff:c5:45:a4:6e:82:92:94:53:e3:a8: 75:a7:6d:87:9c:d1:09:3f:94:f4:1d:8d:82:db:52:f0:8d:1d: 46:8e:a2:23:db:bd:68:8f:51:93:4d:00:5f:27:58:54:b4:15: 2c:d0:06:03:06:21:b9:6c:21:c7:34:73:24:c2:4a:66:67:9b: 36:4c:a1:33:94:b3:b7:6d:45:95:d0:f1:a7:58:43:51:ed:46: a5:a5:0c:e0:ae:13:31:2c:3a:a2:69:7f:0c:31:6c:9e:08:46: d4:c3:2c:98:7f:d9:f9:5a:63:cc:e8:1d:71:16:20:66:3a:c6: cb:69:6d:66:d0:a9:7b:3e:22:1f:1e:71:32:55:e6:16:02:30: ee:9a:41:4b:ed:52:a5:41:1d:ce:75:0d:bd:7c:87:e5:f9:78: 2f:ee:6e:ea:a5:29:97:5a:84:c1:c6:98:d5:1d:40:4e:7c:73: d2:34:97:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQ68EO+0okade4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MDEyNDE4MTAtNjcxNi00Yjg4LWE4OGQtNGMwZTZjNjgwZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVkIDuHL2uDy3wj6seYalVKEWf2M4giw1OGb d18GBng5lkQtJ+yfGDhBw7svGURLeZAxqdYtK8psrDDL3CcZRGa3TbeYovHzFMI+ eIoRy2qI96heXdpetKrEMWwjVb3btqHgNhuDRtkyZd4k9lCSK1Z5SLawvbzmpYNU bQRdYoxn39pXOTd/RJoWtQqABJcOitEYBSxWjJalmDOxIVXy5SajjFSHTP0JAWIl vAim/gvA0XYLE7netFd0pn8p6HXL8LPzNbPy/1+MQdWRz7mhK3Vazk+Ic1uVl1Am 2cfgFa9VPq13Vwdy8hpHARF+HEfktjOq2q2RNO0SClx/6EHsHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7auy81UEO9WZJO/uB3vKL00j9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDg2NzEzOTMtMzk0ZS0z ODQ2LWI0NzMtZGQwMjE1N2QyYzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1G3s4W6aLpR4z5vq3h8IHKyH4iTvtz2+BjIfTi16x/DMjMP0E8hbDi 7SpmE88FV4up71ukJo+orJGxgjb81gVEJnf5tDHj2s26rdH1c0j/xUWkboKSlFPj qHWnbYec0Qk/lPQdjYLbUvCNHUaOoiPbvWiPUZNNAF8nWFS0FSzQBgMGIblsIcc0 cyTCSmZnmzZMoTOUs7dtRZXQ8adYQ1HtRqWlDOCuEzEsOqJpfwwxbJ4IRtTDLJh/ 2flaY8zoHXEWIGY6xstpbWbQqXs+Ih8ecTJV5hYCMO6aQUvtUqVBHc51Db18h+X5 eC/ubuqlKZdahMHGmNUdQE58c9I0l9E= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:33 2025 by rpki-client