$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa File: de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa (raw, json) Hash identifier: /YPSfDtwmm6y/bWYRLIGJmfzftlAt4BIajmpGHa3A/g= Subject key identifier: 14:48:45:9D:E0:5C:DC:1B:FF:EB:C6:9F:E4:D9:90:FF:55:63:A3:7B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0D706C30274D65E78F60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.69.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0d:70:6c:30:27:4d:65:e7:8f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=70ae2c9e-26a4-457c-abc5-1f6fd4efdf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:1b:7d:b8:29:18:f9:34:37:26:e5:f0:6e: 69:22:db:e9:75:b2:dc:21:7e:ec:f6:80:ae:25:f5: 86:e0:e2:d6:b6:76:71:4b:fc:25:8b:10:ec:9a:f2: 4a:fa:59:e6:c0:1e:33:d9:8f:eb:33:56:b0:5a:d6: d4:db:49:c5:02:f2:b5:27:38:2c:bf:53:66:d1:d5: 90:17:1e:86:d8:34:aa:e2:60:e8:b0:3b:7f:b7:99: 8b:3c:fb:d9:99:86:6a:d9:7e:89:db:8d:0c:eb:1e: ce:89:38:af:e2:6a:df:b2:a5:07:10:3c:2c:d9:1a: 2a:b4:88:5f:a6:b6:08:ab:b4:33:36:b7:dd:c2:f3: bf:7a:8b:f3:5c:2e:8d:b9:a5:5b:c2:24:e1:95:ba: 22:ce:54:05:9f:23:b4:55:5e:21:3b:ec:1b:d4:b8: b8:ab:69:d3:73:d6:08:20:7c:b8:63:2c:ab:82:c9: e1:6a:a1:bc:e5:d0:f0:ce:8a:1c:dd:06:32:2c:99: ca:5b:cb:f1:a0:b9:ae:e6:74:40:58:5a:73:4f:a0: fc:f9:7e:63:80:d2:f8:9a:05:83:02:b0:e2:52:a4: d0:9a:67:8e:c7:aa:4c:ee:16:cc:7b:38:42:e1:ca: 57:4b:81:0e:ba:9f:b5:c7:c7:ce:ea:0e:e6:f6:77: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:45:9D:E0:5C:DC:1B:FF:EB:C6:9F:E4:D9:90:FF:55:63:A3:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8d:87:5a:7e:ab:39:8d:b1:f7:6a:36:54:0f:a6:a1:b3:d5: 2b:4f:29:42:dc:e8:68:79:32:c2:27:49:23:c8:ed:a0:47:fd: 20:b6:34:f5:66:2e:ae:3d:8c:c4:e5:5f:21:61:8b:21:c6:91: 78:e7:a7:67:2a:6a:41:fe:20:05:15:e9:05:00:2a:b2:04:e4: f0:33:3a:6e:ec:a9:03:bf:88:8f:0e:79:a3:75:14:e4:16:d8: 83:a8:2e:09:dd:8c:d4:ec:97:62:a3:74:2a:ae:68:cf:31:88: ab:7d:a0:70:a2:b7:db:32:ff:2e:25:02:54:6e:10:86:0f:6f: 7c:bf:2a:71:c7:47:81:82:e1:96:51:31:df:d5:a2:f6:a5:92: 1e:99:5a:6b:36:9e:56:74:47:1a:01:01:91:c2:c6:06:2b:1d: 08:c8:d5:29:0d:8c:a4:44:af:f3:80:10:e0:32:22:f6:9a:38: c4:7b:7b:c1:0d:cb:d2:7b:4b:cb:73:a4:e2:f2:a9:9d:77:8b: 6f:99:d6:a2:96:73:14:60:b7:dc:e5:13:3a:13:57:4a:b5:02: e3:a8:2a:90:e8:15:d2:a9:9f:47:ac:14:a5:5c:4c:5f:b9:b5: f6:ac:c8:72:6c:77:d6:93:01:de:35:d9:15:93:f6:4c:b0:26: ef:27:0f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ1wbDAnTWXnj2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NzBhZTJjOWUtMjZhNC00NTdjLWFiYzUtMWY2ZmQ0ZWZkZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkobfbgpGPk0Nybl8G5pItvpdbLcIX7s9oCu JfWG4OLWtnZxS/wlixDsmvJK+lnmwB4z2Y/rM1awWtbU20nFAvK1Jzgsv1Nm0dWQ Fx6G2DSq4mDosDt/t5mLPPvZmYZq2X6J240M6x7OiTiv4mrfsqUHEDws2RoqtIhf prYIq7QzNrfdwvO/eovzXC6NuaVbwiThlboizlQFnyO0VV4hO+wb1Li4q2nTc9YI IHy4YyyrgsnhaqG85dDwzooc3QYyLJnKW8vxoLmu5nRAWFpzT6D8+X5jgNL4mgWD ArDiUqTQmmeOx6pM7hbMezhC4cpXS4EOup+1x8fO6g7m9nd5iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRIRZ3gXNwb/+vGn+TZkP9VY6N7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU0ZjVlNDktNWUzMy0z M2EyLTgxZWEtYjc5N2YyZjdiY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECNh1p+qzmNsfdqNlQPpqGz1StPKULc6Gh5MsInSSPI7aBH/SC2NPVm Lq49jMTlXyFhiyHGkXjnp2cqakH+IAUV6QUAKrIE5PAzOm7sqQO/iI8OeaN1FOQW 2IOoLgndjNTsl2KjdCquaM8xiKt9oHCit9sy/y4lAlRuEIYPb3y/KnHHR4GC4ZZR Md/Vovalkh6ZWms2nlZ0RxoBAZHCxgYrHQjI1SkNjKREr/OAEOAyIvaaOMR7e8EN y9J7S8tzpOLyqZ13i2+Z1qKWcxRgt9zlEzoTV0q1AuOoKpDoFdKpn0esFKVcTF+5 tfasyHJsd9aTAd412RWT9kywJu8nD/0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:37 2025 by rpki-client