$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3dd17e1-81f5-3d63-9bfb-4206188095ae.roa File: e3dd17e1-81f5-3d63-9bfb-4206188095ae.roa (raw, json) Hash identifier: nxrcxucPHgY1LZPEUkpsV36Bj3wMxL8ifZ2pFTCGs+8= Subject key identifier: CC:84:90:CC:E3:E5:A8:63:64:D9:2B:B1:A6:0E:46:1E:7E:32:82:31 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328DE80A1D06D3BD31E060 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3dd17e1-81f5-3d63-9bfb-4206188095ae.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.67.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8d:e8:0a:1d:06:d3:bd:31:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f54d7a45-4bfa-43b8-87f9-49f00b1c732f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:d3:4b:9a:d8:cf:8e:80:1e:c8:ec:2b:34: c6:fc:eb:34:88:74:8f:a7:51:36:41:83:b9:1d:a4: 9b:71:34:42:bf:9d:c7:ce:9d:92:10:0b:c7:97:33: 54:68:e4:ad:a1:b9:32:e6:fd:fa:21:ac:44:f8:86: 0b:79:36:a9:b1:f7:c8:65:33:17:d5:24:07:6d:a0: e6:33:ac:d9:9a:23:c5:b6:f3:5a:c1:3e:39:7d:6c: 9b:ed:97:42:2c:76:26:53:02:e5:5f:71:5f:55:4c: a5:67:f6:24:24:de:80:a5:c0:3f:60:ed:f2:d2:f0: c8:48:eb:b9:b3:39:d0:a1:6c:73:d2:a5:d4:54:93: 8a:18:3d:ad:7f:43:30:e8:ad:6f:53:dc:be:bd:2c: 4c:f8:4a:82:e7:ca:76:9e:5d:db:f7:c6:32:81:89: 2a:46:44:48:a2:ec:01:d4:c1:0b:cd:63:07:ca:d5: ea:59:bb:f6:9b:5d:64:fe:35:dd:0c:7d:0e:67:59: ec:c4:cb:56:7d:dd:db:22:fa:1f:51:96:17:da:17: 8f:81:6e:29:d2:d5:a4:a4:99:35:99:69:ea:5c:68: 52:68:30:83:d2:1a:fe:94:5c:a6:ad:d6:f7:be:35: 26:46:8b:c4:92:af:80:cd:97:90:d9:05:6b:04:f6: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:84:90:CC:E3:E5:A8:63:64:D9:2B:B1:A6:0E:46:1E:7E:32:82:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3dd17e1-81f5-3d63-9bfb-4206188095ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:cd:db:02:82:85:cd:69:32:a6:ae:e8:5e:a0:3e:c7:81:d9: 62:17:b1:3a:d2:ff:03:38:ff:ef:3a:01:e9:a9:a2:80:79:c3: 62:6b:5e:73:2a:32:9c:58:ce:7a:85:3b:c4:89:ec:36:a3:e4: cd:bc:3e:11:d0:c3:57:f6:32:c9:48:70:64:c7:29:6d:d6:88: 29:5e:0a:ce:22:97:32:84:5b:c1:d7:10:d7:e7:6e:37:70:37: b2:86:6f:9b:d0:4f:21:d2:04:c1:2b:86:89:b9:1a:94:99:f5: 90:32:b8:24:d0:80:87:25:9c:1e:76:d2:e1:ca:63:57:df:68: aa:58:ee:a5:e7:1b:1a:35:2e:b0:26:9b:bb:2b:8c:eb:e3:e6: c1:e5:52:17:ba:67:2d:17:35:5c:64:60:b7:05:0f:d7:64:1d: a7:42:ce:7b:5c:0b:9d:37:b2:a5:b6:1f:47:bf:aa:26:3f:f2: 82:14:e4:65:19:55:46:78:ba:9a:34:bc:9b:24:24:57:90:50: 0e:db:86:df:c3:0b:83:96:a4:01:25:d0:19:a1:3a:e4:9b:27: cc:c9:e6:8d:3e:63:9b:6e:e8:ec:1d:24:6d:69:83:fb:6f:ae: 3e:1a:e8:22:1a:da:d9:81:38:bb:31:1e:83:9f:cd:e2:31:e2: ff:8b:85:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo3oCh0G070x4GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjU0ZDdhNDUtNGJmYS00M2I4LTg3ZjktNDlmMDBiMWM3MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQTTS5rYz46AHsjsKzTG/Os0iHSPp1E2QYO5 HaSbcTRCv53Hzp2SEAvHlzNUaOStobky5v36IaxE+IYLeTapsffIZTMX1SQHbaDm M6zZmiPFtvNawT45fWyb7ZdCLHYmUwLlX3FfVUylZ/YkJN6ApcA/YO3y0vDISOu5 sznQoWxz0qXUVJOKGD2tf0Mw6K1vU9y+vSxM+EqC58p2nl3b98YygYkqRkRIouwB 1MELzWMHytXqWbv2m11k/jXdDH0OZ1nsxMtWfd3bIvofUZYX2hePgW4p0tWkpJk1 mWnqXGhSaDCD0hr+lFymrdb3vjUmRovEkq+AzZeQ2QVrBPb8QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyEkMzj5ahjZNkrsaYORh5+MoIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTNkZDE3ZTEtODFmNS0z ZDYzLTliZmItNDIwNjE4ODA5NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErENwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDN2wKChc1pMqau6F6gPseB2WIXsTrS/wM4/+86AempooB5w2JrXnMq MpxYznqFO8SJ7Daj5M28PhHQw1f2MslIcGTHKW3WiCleCs4ilzKEW8HXENfnbjdw N7KGb5vQTyHSBMErhom5GpSZ9ZAyuCTQgIclnB520uHKY1ffaKpY7qXnGxo1LrAm m7srjOvj5sHlUhe6Zy0XNVxkYLcFD9dkHadCzntcC503sqW2H0e/qiY/8oIU5GUZ VUZ4upo0vJskJFeQUA7bht/DC4OWpAEl0BmhOuSbJ8zJ5o0+Y5tu6OwdJG1pg/tv rj4a6CIa2tmBOLsxHoOfzeIx4v+LhYE= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:45 2025 by rpki-client