$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db25c874-3597-38cf-af31-32cb1667e1d3.roa File: db25c874-3597-38cf-af31-32cb1667e1d3.roa (raw, json) Hash identifier: bX+R9kTN8UrhLS/h+aq3B2PhvyHPqzCPXt1RrGbM0PQ= Subject key identifier: 61:3F:56:54:CE:6E:A8:6B:BC:64:66:1E:D4:27:C7:1A:30:30:71:8A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327E2533E6CC5D91C54DC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db25c874-3597-38cf-af31-32cb1667e1d3.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7e:25:33:e6:cc:5d:91:c5:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f1558206-6376-4590-ac52-92c75c0eda4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:ef:5d:62:67:bf:43:2d:26:38:5e:1a:e6: ed:e2:8b:48:17:35:1a:2c:4e:e9:35:ad:6c:38:70: 3e:49:e4:fd:12:b9:97:0c:52:45:7a:1b:52:30:9f: 78:6c:52:00:3a:6d:21:8f:43:c2:7f:00:1e:6a:75: a1:76:82:67:06:3b:b8:5e:93:8f:7a:72:0c:8f:18: cf:33:2d:65:83:c2:7b:f9:9a:7e:7d:db:ee:fb:be: af:23:d8:6e:cf:8d:5c:23:2a:36:76:cd:b1:41:ff: e4:ab:8f:6c:fd:57:77:1c:d2:c9:9b:42:36:b3:5d: 7d:44:61:fb:56:d6:a6:39:cf:23:e5:f3:fb:3d:8f: 24:6b:52:ce:aa:b4:22:b9:1e:dc:a7:bc:53:66:61: 5a:49:fe:f3:18:c6:97:58:70:ea:05:0e:15:6e:23: 83:b3:3b:03:df:7e:f1:b3:c4:70:14:22:d8:f2:48: 96:36:a9:e9:cd:9a:a1:3f:94:40:99:c5:e9:33:1e: ac:81:0c:ce:d0:a0:df:82:63:76:fa:bd:bb:f8:83: 76:55:f9:8b:68:6d:57:57:c4:cf:ef:03:72:17:85: 54:34:44:c2:2a:76:26:6b:f3:36:2e:4b:28:69:c9: 81:f3:d0:02:0a:09:81:9e:92:74:c3:77:e8:3f:78: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3F:56:54:CE:6E:A8:6B:BC:64:66:1E:D4:27:C7:1A:30:30:71:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db25c874-3597-38cf-af31-32cb1667e1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d9:26:1d:2d:25:02:3e:1a:21:ce:d9:4c:12:d4:59:f1:97: c0:73:64:6c:86:59:8d:c6:1a:13:a0:e4:3e:ee:e9:f3:7a:b0: f6:f9:ec:73:7f:f8:36:30:66:ee:15:6a:32:62:23:cd:75:dd: 4a:3a:e5:91:d2:63:8d:f1:57:7c:80:de:89:bc:01:fc:26:19: ef:6c:1e:78:41:92:66:40:00:66:1d:98:3e:ce:5a:b2:fc:22: 9c:6c:31:f4:d7:b1:2f:d0:b6:76:b1:65:31:75:b5:fe:b8:63: d9:81:0d:20:a8:2d:7a:2b:48:43:4c:52:7c:b3:93:ee:d6:4e: 0a:8f:0a:4a:90:2d:9d:0c:48:b0:65:84:09:b3:bb:f0:fa:55: 76:be:99:dc:29:60:1b:2e:16:f1:25:86:89:01:2c:a8:76:1a: 07:56:58:23:cf:1a:c6:14:ed:a3:86:36:58:e9:86:eb:f2:d4: 47:bd:d6:5f:5b:de:6c:6d:16:94:f4:2b:c3:0a:74:56:72:08: 2e:dd:3f:c8:63:de:b4:e5:f3:e1:ac:19:46:52:df:c5:ae:bb: 32:90:e6:a4:64:0f:0c:bb:6b:d9:66:2a:d2:45:9d:3a:67:c3: 0d:e2:9e:dd:6b:8b:40:78:ad:71:21:7b:c3:f7:a0:f1:60:7e: ba:99:29:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn4lM+bMXZHFTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjE1NTgyMDYtNjM3Ni00NTkwLWFjNTItOTJjNzVjMGVkYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrPvXWJnv0MtJjheGubt4otIFzUaLE7pNa1s OHA+SeT9ErmXDFJFehtSMJ94bFIAOm0hj0PCfwAeanWhdoJnBju4XpOPenIMjxjP My1lg8J7+Zp+fdvu+76vI9huz41cIyo2ds2xQf/kq49s/Vd3HNLJm0I2s119RGH7 VtamOc8j5fP7PY8ka1LOqrQiuR7cp7xTZmFaSf7zGMaXWHDqBQ4VbiODszsD337x s8RwFCLY8kiWNqnpzZqhP5RAmcXpMx6sgQzO0KDfgmN2+r27+IN2VfmLaG1XV8TP 7wNyF4VUNETCKnYma/M2LksoacmB89ACCgmBnpJ0w3foP3hKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE/VlTObqhrvGRmHtQnxxowMHGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGIyNWM4NzQtMzU5Ny0z OGNmLWFmMzEtMzJjYjE2NjdlMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPZJh0tJQI+GiHO2UwS1Fnxl8BzZGyGWY3GGhOg5D7u6fN6sPb57HN/ +DYwZu4VajJiI8113Uo65ZHSY43xV3yA3om8AfwmGe9sHnhBkmZAAGYdmD7OWrL8 IpxsMfTXsS/QtnaxZTF1tf64Y9mBDSCoLXorSENMUnyzk+7WTgqPCkqQLZ0MSLBl hAmzu/D6VXa+mdwpYBsuFvElhokBLKh2GgdWWCPPGsYU7aOGNljphuvy1Ee91l9b 3mxtFpT0K8MKdFZyCC7dP8hj3rTl8+GsGUZS38WuuzKQ5qRkDwy7a9lmKtJFnTpn ww3int1ri0B4rXEhe8P3oPFgfrqZKTM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:32 2025 by rpki-client