$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa File: dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa (raw, json) Hash identifier: zLN340mhszZ1qO0hsDMbmLsLXZSUSxXwIvMimwAsA6Y= Subject key identifier: F8:39:57:D8:93:42:CB:92:D3:89:CB:F1:11:E3:1A:0D:E1:6A:B9:E9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD35E1F9417C4BAC910F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:35:e1:f9:41:7c:4b:ac:91:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=d434d9cc-47fb-410b-b7ae-9c55024e84d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e5:d7:8c:ba:ad:b8:bb:a9:7c:ae:b9:5e:33: 97:bb:ac:91:60:5d:c1:73:8b:fe:44:29:c6:d5:a9: e4:97:60:f1:09:2c:3b:d0:39:ed:15:2e:f4:24:28: 58:66:07:25:e7:27:c2:08:d3:ac:ae:88:67:a4:21: 5a:0e:8a:9a:f4:08:a5:b7:99:ba:e7:79:58:f0:1f: b1:7b:83:5e:30:e3:33:d5:78:1e:8f:e5:e3:33:64: e4:0c:75:25:a4:f9:28:e2:1b:a3:c3:a8:49:2c:69: 69:7a:68:22:a4:24:d8:0d:4a:1c:ee:f1:fd:45:cd: 27:93:08:39:00:3d:d2:1d:45:7b:b7:e9:a5:c7:d9: 8e:c2:44:8a:7d:b7:fc:27:55:ee:8d:c4:2a:83:31: 98:d1:7a:cd:84:74:60:fc:57:15:37:5f:81:be:ac: 60:3b:14:61:c2:e0:db:56:4e:ff:a0:5f:73:42:ce: 7b:73:b1:f0:a3:89:cf:4f:28:58:ba:5f:ce:78:df: 7f:94:6c:a9:2a:71:5f:37:46:8f:7d:90:d1:92:68: 5b:84:ed:ca:19:87:b9:f4:36:00:ad:42:d5:68:0d: 9c:aa:2d:78:1b:e8:34:51:45:80:ef:b1:df:c6:cf: bd:cc:0b:5e:92:0b:b2:fc:9b:49:ec:74:6b:45:44: 43:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:39:57:D8:93:42:CB:92:D3:89:CB:F1:11:E3:1A:0D:E1:6A:B9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:04:7d:c4:f2:ab:9a:41:b5:72:6a:16:47:38:e4:bf:93:4c: 00:92:2a:3c:19:ba:f5:4e:30:e6:3e:f3:2f:dc:f5:7b:ac:c5: a2:aa:25:1d:f8:10:e9:2c:07:66:4e:91:ee:e3:95:04:ce:05: 12:8a:a5:6a:4c:01:07:30:ce:84:33:ac:e3:86:89:8b:94:a0: b5:90:55:e4:34:e4:97:31:cd:c2:d7:3a:80:b3:a8:6e:08:72: c1:6c:eb:99:cb:f0:41:6c:be:80:3b:65:e1:21:f6:44:79:ea: 5a:56:5f:bd:fe:9a:89:38:43:20:31:64:ee:8f:96:80:30:da: c5:3c:c9:99:7c:e9:9f:03:f4:b0:cb:4a:4c:30:d7:e0:3a:f0: dc:1c:e3:0f:5c:e8:6f:bb:d3:2f:15:58:4e:5f:7d:4d:96:e1: 80:8e:96:c0:56:a8:d9:20:ba:d4:58:7f:28:02:ca:9b:4b:70: cf:09:26:5f:4e:62:e3:38:30:b8:4a:38:b8:02:a2:68:bb:64: 30:9f:04:45:b2:af:9a:69:5e:21:b9:0f:49:a3:c5:e9:0c:8a: 11:67:e1:8d:49:f7:01:ea:96:19:6b:24:68:0c:18:7c:c3:db: 50:be:5d:c3:46:d1:e6:0b:ba:39:e3:5c:3f:c9:e7:1e:ca:49: c0:a9:db:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TXh+UF8S6yRD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZDQzNGQ5Y2MtNDdmYi00MTBiLWI3YWUtOWM1NTAyNGU4NGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+XXjLqtuLupfK65XjOXu6yRYF3Bc4v+RCnG 1ankl2DxCSw70DntFS70JChYZgcl5yfCCNOsrohnpCFaDoqa9Ailt5m653lY8B+x e4NeMOMz1Xgej+XjM2TkDHUlpPko4hujw6hJLGlpemgipCTYDUoc7vH9Rc0nkwg5 AD3SHUV7t+mlx9mOwkSKfbf8J1XujcQqgzGY0XrNhHRg/FcVN1+BvqxgOxRhwuDb Vk7/oF9zQs57c7Hwo4nPTyhYul/OeN9/lGypKnFfN0aPfZDRkmhbhO3KGYe59DYA rULVaA2cqi14G+g0UUWA77Hfxs+9zAtekguy/JtJ7HRrRURDJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg5V9iTQsuS04nL8RHjGg3harnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGJlNmFmMDgtZGMwOS0z NjA4LWE4NGQtZDgzZmZhOWUyZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQEfcTyq5pBtXJqFkc45L+TTACSKjwZuvVOMOY+8y/c9XusxaKqJR34 EOksB2ZOke7jlQTOBRKKpWpMAQcwzoQzrOOGiYuUoLWQVeQ05JcxzcLXOoCzqG4I csFs65nL8EFsvoA7ZeEh9kR56lpWX73+mok4QyAxZO6PloAw2sU8yZl86Z8D9LDL Skww1+A68Nwc4w9c6G+70y8VWE5ffU2W4YCOlsBWqNkgutRYfygCyptLcM8JJl9O YuM4MLhKOLgComi7ZDCfBEWyr5ppXiG5D0mjxekMihFn4Y1J9wHqlhlrJGgMGHzD 21C+XcNG0eYLujnjXD/J5x7KScCp26A= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:42 2025 by rpki-client