$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da62c422-da26-3214-ac5c-94122420dfd7.roa File: da62c422-da26-3214-ac5c-94122420dfd7.roa (raw, json) Hash identifier: OIS06f+ceM6zf/3GdsN9Awi6yondNp4tjv1yLTWy0RI= Subject key identifier: BA:5D:53:95:3F:A8:F8:6F:E9:C6:95:37:EE:D7:C5:9A:86:7F:A1:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1D063B76135B7D2B7C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da62c422-da26-3214-ac5c-94122420dfd7.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1d:06:3b:76:13:5b:7d:2b:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=7eaecb77-9151-4eb7-85af-16b031c2bc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:66:55:43:ca:f4:60:03:5d:9e:df:c7:dc: e9:f4:2c:ae:be:63:76:d0:b4:4c:d1:35:49:32:81: dd:5c:93:4e:b2:4c:71:b3:c2:b8:f5:ef:b7:35:58: 2a:fc:18:cb:aa:e5:93:f5:4f:02:cc:df:34:f6:7d: 61:02:fb:48:84:2e:fe:2f:c4:da:91:71:2b:f4:96: c7:c8:2c:88:c6:16:6d:7e:67:ee:11:54:ba:22:a1: 01:ca:ca:02:0a:72:13:95:3f:0d:dd:95:1e:ad:31: 42:6c:a8:04:45:06:b9:75:0f:67:22:30:77:4a:20: 05:4d:ff:68:b3:f3:2c:a5:9b:8c:bb:aa:18:4c:fe: 73:01:36:31:91:ed:4d:0b:51:cc:83:c7:16:ce:15: a5:30:b1:5f:b6:04:48:3e:02:18:87:68:1f:73:97: d6:a7:7f:e0:cf:c6:fd:43:7e:6b:da:bf:91:14:70: bd:c6:14:ec:d4:e5:36:f8:ec:b1:d1:49:4c:9d:6a: d4:7e:b2:3c:a9:bc:f9:2a:0c:f3:08:a0:c4:ae:01: 9b:07:7d:e1:00:91:59:e8:13:e2:23:83:ca:32:55: 87:5e:8a:80:d7:39:10:84:08:15:61:33:10:d8:16: e9:64:17:56:e2:eb:f6:b9:46:d9:fd:72:49:d6:f0: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5D:53:95:3F:A8:F8:6F:E9:C6:95:37:EE:D7:C5:9A:86:7F:A1:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da62c422-da26-3214-ac5c-94122420dfd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:21:d8:14:d9:20:17:f9:54:cb:81:bf:bb:cc:2a:9a:13:8f: b3:6f:8e:55:b1:2f:4c:72:c0:56:2b:8d:5d:3f:0e:19:18:1e: 27:ae:b7:8c:58:bf:ab:46:5b:ce:26:46:6b:8c:42:ae:ec:ed: 97:85:59:92:91:fc:e8:c8:c8:23:0f:c9:f6:f9:c4:fe:97:3b: 5c:3b:b3:e0:b8:28:d4:1c:32:20:f6:a4:89:47:36:cf:11:4e: 99:db:3c:b4:84:1f:f8:de:ff:99:8f:0e:36:d5:fb:e2:fb:05: 06:9d:f1:4e:3f:62:b2:f6:37:40:b8:ca:50:95:3a:92:0d:a8: c4:d4:44:dc:50:15:92:e3:d0:c7:87:83:8e:a1:ff:e7:29:fa: f7:11:19:1f:2b:12:e2:25:4e:c2:84:70:05:02:88:4e:90:e0: d7:fc:71:12:bc:da:c5:23:08:26:ab:8b:1d:72:2b:bd:36:88: 8b:9d:4e:da:69:23:c8:35:b2:94:45:ea:f9:22:fd:05:41:27: 04:c2:50:2d:f1:b5:0a:e6:33:fe:48:0e:78:f0:71:6f:39:1d: 54:e0:f1:f7:99:9a:da:67:e9:2b:a8:89:dd:5b:29:18:f8:f2: 64:eb:49:df:f8:82:54:46:e5:80:1f:09:f7:8e:2d:3a:e0:87: 87:f9:bc:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/R0GO3YTW30rfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk N2VhZWNiNzctOTE1MS00ZWI3LTg1YWYtMTZiMDMxYzJiYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhflmVUPK9GADXZ7fx9zp9CyuvmN20LRM0TVJ MoHdXJNOskxxs8K49e+3NVgq/BjLquWT9U8CzN809n1hAvtIhC7+L8TakXEr9JbH yCyIxhZtfmfuEVS6IqEBysoCCnITlT8N3ZUerTFCbKgERQa5dQ9nIjB3SiAFTf9o s/MspZuMu6oYTP5zATYxke1NC1HMg8cWzhWlMLFftgRIPgIYh2gfc5fWp3/gz8b9 Q35r2r+RFHC9xhTs1OU2+Oyx0UlMnWrUfrI8qbz5KgzzCKDErgGbB33hAJFZ6BPi I4PKMlWHXoqA1zkQhAgVYTMQ2BbpZBdW4uv2uUbZ/XJJ1vAe5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpdU5U/qPhv6caVN+7XxZqGf6G2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE2MmM0MjItZGEyNi0z MjE0LWFjNWMtOTQxMjI0MjBkZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAh2BTZIBf5VMuBv7vMKpoTj7NvjlWxL0xywFYrjV0/DhkYHieut4xY v6tGW84mRmuMQq7s7ZeFWZKR/OjIyCMPyfb5xP6XO1w7s+C4KNQcMiD2pIlHNs8R TpnbPLSEH/je/5mPDjbV++L7BQad8U4/YrL2N0C4ylCVOpINqMTURNxQFZLj0MeH g46h/+cp+vcRGR8rEuIlTsKEcAUCiE6Q4Nf8cRK82sUjCCarix1yK702iIudTtpp I8g1spRF6vki/QVBJwTCUC3xtQrmM/5IDnjwcW85HVTg8feZmtpn6Suoid1bKRj4 8mTrSd/4glRG5YAfCfeOLTrgh4f5vAE= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:35 2025 by rpki-client