$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e74883a6-f1c5-310a-bf33-adc88b0a7c90.roa File: e74883a6-f1c5-310a-bf33-adc88b0a7c90.roa (raw, json) Hash identifier: RQNrgZCJy3RUfwFNK1AfGFESJl/+CW3WAvEv9PK9WiQ= Subject key identifier: 8D:03:EA:07:08:FB:08:17:E4:D2:EF:AD:CE:01:26:4A:AC:8C:61:3C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD207248D6B26E6AAC2900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e74883a6-f1c5-310a-bf33-adc88b0a7c90.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:20:72:48:d6:b2:6e:6a:ac:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=26ba22dc-a4f0-48d4-b127-c361ef2e2244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:12:4d:8b:c7:fa:cb:9a:13:0c:a1:e8:4b:89: 49:10:26:fd:a8:66:4d:f9:5e:ba:c6:3a:74:db:77: 58:4b:70:17:fc:c3:37:6e:c6:ee:a5:c2:31:5d:07: 06:28:24:76:5a:e9:2b:8d:5d:73:bd:2f:9b:ca:dd: 69:00:d1:f2:6d:08:a4:61:4b:21:5c:d4:80:a8:2a: 96:c2:6c:18:97:ed:de:23:8b:97:11:d4:b5:09:a1: 97:37:68:53:62:89:8a:af:11:aa:e8:1a:6f:d8:20: 0b:e5:81:5a:d1:16:f7:25:9d:a6:dc:3e:39:0b:2e: bf:b2:05:8b:e4:fc:92:70:50:aa:ac:20:b8:21:8b: 18:81:4e:2e:b9:ff:21:20:87:1c:1b:a3:1d:7b:90: d8:4a:48:0b:da:ca:c5:4a:01:c4:11:90:ea:04:dc: de:fe:69:72:7c:52:95:c7:c0:14:45:78:dd:b6:0b: 1d:9e:54:1e:e7:1b:b5:65:bb:c9:30:a1:2f:9b:d1: ed:a4:58:d0:09:81:27:7e:6e:86:63:19:b2:f7:f8: ba:36:08:a2:74:1b:81:6f:d3:9e:8b:e9:af:5c:9f: a4:26:0f:74:01:ae:a8:89:b6:c3:e2:da:79:4e:c4: 7b:95:40:2a:a6:5e:38:7c:27:2c:85:88:f4:f4:bc: ef:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:03:EA:07:08:FB:08:17:E4:D2:EF:AD:CE:01:26:4A:AC:8C:61:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e74883a6-f1c5-310a-bf33-adc88b0a7c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:be:c9:13:65:31:20:56:48:83:03:11:21:b0:6e:05:fb:4c: fa:96:df:46:bf:04:04:8c:f9:fd:7b:e8:d8:b0:f7:94:d5:6b: 60:01:71:e1:fb:7d:4c:86:dd:11:12:19:fd:5a:00:d7:1c:8b: 79:15:5f:72:ee:77:53:ac:37:5c:5b:9c:bd:c9:5f:c1:a5:8d: b0:4c:13:15:eb:df:2a:46:9c:38:1f:5c:6f:15:15:44:a9:83: 1f:ec:52:fc:00:8a:ac:7d:9c:a3:44:51:77:03:61:15:cb:88: 0b:8d:53:05:8c:db:6c:62:5c:d8:f5:bb:4a:72:50:3b:29:55: fb:31:a8:ef:39:79:fa:06:4b:f5:c3:f0:78:af:7e:6a:2d:a2: 10:a3:ef:29:40:c6:4f:a9:86:cb:a4:b1:ab:b5:b3:67:99:4e: 0e:3a:d4:de:8c:18:4c:b0:31:75:df:2b:9a:90:5e:c6:21:8c: af:52:7f:74:3d:08:49:8b:69:4c:eb:2d:b7:eb:8c:2b:a7:39: e2:d6:6c:a9:13:e4:2a:d3:51:e1:d0:68:1f:08:cf:27:05:a6: 36:ed:d9:e1:23:de:31:0d:66:00:13:1f:ba:f9:ca:05:25:80: a6:8d:ff:09:89:4c:ca:85:ae:a1:7a:63:f2:87:52:2c:47:73: be:2d:30:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SBySNaybmqsKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MjZiYTIyZGMtYTRmMC00OGQ0LWIxMjctYzM2MWVmMmUyMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hJNi8f6y5oTDKHoS4lJECb9qGZN+V66xjp0 23dYS3AX/MM3bsbupcIxXQcGKCR2WukrjV1zvS+byt1pANHybQikYUshXNSAqCqW wmwYl+3eI4uXEdS1CaGXN2hTYomKrxGq6Bpv2CAL5YFa0Rb3JZ2m3D45Cy6/sgWL 5PyScFCqrCC4IYsYgU4uuf8hIIccG6Mde5DYSkgL2srFSgHEEZDqBNze/mlyfFKV x8AURXjdtgsdnlQe5xu1ZbvJMKEvm9HtpFjQCYEnfm6GYxmy9/i6NgiidBuBb9Oe i+mvXJ+kJg90Aa6oibbD4tp5TsR7lUAqpl44fCcshYj09Lzv4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0D6gcI+wgX5NLvrc4BJkqsjGE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTc0ODgzYTYtZjFjNS0z MTBhLWJmMzMtYWRjODhiMGE3YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy+yRNlMSBWSIMDESGwbgX7TPqW30a/BASM+f176Niw95TVa2ABceH7 fUyG3RESGf1aANcci3kVX3Lud1OsN1xbnL3JX8GljbBMExXr3ypGnDgfXG8VFUSp gx/sUvwAiqx9nKNEUXcDYRXLiAuNUwWM22xiXNj1u0pyUDspVfsxqO85efoGS/XD 8HivfmotohCj7ylAxk+phsuksau1s2eZTg461N6MGEywMXXfK5qQXsYhjK9Sf3Q9 CEmLaUzrLbfrjCunOeLWbKkT5CrTUeHQaB8IzycFpjbt2eEj3jENZgATH7r5ygUl gKaN/wmJTMqFrqF6Y/KHUixHc74tMIg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:06 2025 by rpki-client