$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea2ecc68-3952-3483-9d3d-1b2cd52a0ab4.roa File: ea2ecc68-3952-3483-9d3d-1b2cd52a0ab4.roa (raw, json) Hash identifier: SaZ1OEpZqqk0N+AIn8skPCYf3TV+ni6Zfmq0NcTpvzI= Subject key identifier: 8E:C2:83:EF:4B:D3:40:B9:17:9F:92:E7:0B:2D:B7:04:91:5F:89:07 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93283392DB928D91E32F000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea2ecc68-3952-3483-9d3d-1b2cd52a0ab4.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:83:39:2d:b9:28:d9:1e:32:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=964d9649-e7f4-4385-8bfc-a169538af696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:f8:6e:7d:db:ab:76:d5:e0:a1:f2:e6:e0: 52:c0:d9:9e:9b:b6:a5:31:0e:1a:d3:cc:6c:1b:da: 39:fb:75:3e:da:04:54:69:73:20:d6:c4:37:2c:02: 10:6d:79:72:24:32:0b:2a:84:4b:38:07:d3:8a:fc: 4e:c2:27:1b:28:ea:2b:97:a5:a8:70:b9:c7:40:e9: 98:84:d7:dc:19:71:24:94:9f:19:a4:23:bf:07:e5: 8d:df:83:76:dc:65:00:73:82:3b:46:82:f3:e6:6a: 6a:1e:41:bb:d7:db:e6:f2:55:7d:5e:39:c5:71:35: d7:ed:21:37:f8:4f:64:19:e7:47:e7:eb:52:9a:36: 8f:4d:64:6a:57:4d:b1:ab:bb:61:87:5a:6c:82:39: 06:6b:32:d3:94:0e:58:3c:82:d5:9f:18:50:ee:af: 05:f6:88:53:03:b4:5d:07:0a:ab:bb:66:ef:be:c3: d2:7c:d6:1a:59:28:a4:d3:63:45:e4:57:a4:61:a4: f5:eb:e9:4e:49:a7:87:e2:54:82:ca:7d:da:5e:bf: 57:0c:e0:9f:58:d6:7a:62:81:31:75:45:c9:46:90: 81:6a:75:1c:16:33:d7:c3:f8:0d:68:98:be:fe:57: 67:d1:df:35:66:d8:d1:e5:ce:9e:d0:79:83:9f:ee: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C2:83:EF:4B:D3:40:B9:17:9F:92:E7:0B:2D:B7:04:91:5F:89:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea2ecc68-3952-3483-9d3d-1b2cd52a0ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:6f:91:45:f2:58:66:66:3c:c7:f3:f4:dd:e3:62:b9:6d:57: 68:18:7e:33:04:50:78:08:ca:b4:1a:ae:98:0a:fa:69:c8:79: b5:43:68:fb:5e:7a:fb:2b:c4:1c:7b:a9:ac:95:81:54:e8:56: 09:a0:d5:35:25:9f:98:3f:62:d4:f9:eb:00:f6:a1:2f:9a:e0: 2b:9b:3c:05:a0:d8:ff:c5:b2:5b:05:04:53:bc:0d:8e:f9:2f: 2f:1a:88:ec:73:be:22:a5:56:85:64:d6:ca:e1:99:e1:70:34: f7:7d:ff:cb:f0:16:59:54:30:70:63:3d:b3:48:ef:69:4c:dc: 06:05:6e:08:3d:21:b0:98:08:5c:bc:d6:c3:43:e9:c9:66:8b: 33:26:1f:59:1f:c7:96:67:96:f3:b5:bb:8f:fb:54:53:18:dc: 81:3e:ac:13:e1:41:d4:dc:14:04:c6:13:fd:4f:67:43:9d:5f: 4b:9e:b7:89:43:d2:77:eb:72:50:92:5f:f8:7c:a1:d4:67:4b: 83:4a:ae:9d:2f:69:df:88:11:ee:04:e6:87:f8:1d:04:84:94: 7b:fb:a7:7b:90:75:0a:df:3a:d9:ca:86:e2:2a:01:10:16:cb: 2a:32:16:2a:e2:14:a6:9d:a2:bf:1c:18:f4:17:e9:fb:b6:13: 5f:c6:b6:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoM5Lbko2R4y8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OTY0ZDk2NDktZTdmNC00Mzg1LThiZmMtYTE2OTUzOGFmNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH34bn3bq3bV4KHy5uBSwNmem7alMQ4a08xs G9o5+3U+2gRUaXMg1sQ3LAIQbXlyJDILKoRLOAfTivxOwicbKOorl6WocLnHQOmY hNfcGXEklJ8ZpCO/B+WN34N23GUAc4I7RoLz5mpqHkG719vm8lV9XjnFcTXX7SE3 +E9kGedH5+tSmjaPTWRqV02xq7thh1psgjkGazLTlA5YPILVnxhQ7q8F9ohTA7Rd Bwqru2bvvsPSfNYaWSik02NF5FekYaT16+lOSaeH4lSCyn3aXr9XDOCfWNZ6YoEx dUXJRpCBanUcFjPXw/gNaJi+/ldn0d81ZtjR5c6e0HmDn+7yUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7Cg+9L00C5F5+S5wsttwSRX4kHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWEyZWNjNjgtMzk1Mi0z NDgzLTlkM2QtMWIyY2Q1MmEwYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEU+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJvkUXyWGZmPMfz9N3jYrltV2gYfjMEUHgIyrQarpgK+mnIebVDaPte evsrxBx7qayVgVToVgmg1TUln5g/YtT56wD2oS+a4CubPAWg2P/FslsFBFO8DY75 Ly8aiOxzviKlVoVk1srhmeFwNPd9/8vwFllUMHBjPbNI72lM3AYFbgg9IbCYCFy8 1sND6clmizMmH1kfx5ZnlvO1u4/7VFMY3IE+rBPhQdTcFATGE/1PZ0OdX0uet4lD 0nfrclCSX/h8odRnS4NKrp0vad+IEe4E5of4HQSElHv7p3uQdQrfOtnKhuIqARAW yyoyFiriFKador8cGPQX6fu2E1/GtiE= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:58 2025 by rpki-client