$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eaf9bdd8-6880-34c2-812c-61e474dc7e7f.roa File: eaf9bdd8-6880-34c2-812c-61e474dc7e7f.roa (raw, json) Hash identifier: X/oILGHsIt3wgcyFf6NlTxryNZ1jtRcJ6vuD8eK43gM= Subject key identifier: 15:30:65:A9:C5:C7:C6:79:73:AB:6B:81:3C:50:17:DE:D6:E3:23:56 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93281843E1F02EB4176AA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eaf9bdd8-6880-34c2-812c-61e474dc7e7f.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:81:84:3e:1f:02:eb:41:76:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=553dfae3-2acb-413d-9106-cbb3544721db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d7:bf:ca:58:f9:ed:9e:18:67:d2:61:bb:1e: 09:22:3e:cc:8a:35:01:71:05:3d:fa:bc:f5:9c:9f: ae:0f:57:1e:37:19:59:5b:91:e5:2b:19:bf:38:be: fb:ba:2b:5a:46:92:be:90:43:b9:aa:88:83:47:e5: a4:34:35:04:d8:7b:cd:dc:ed:f5:d2:48:d4:7c:9c: 27:b8:d7:59:d0:c8:6a:cb:85:eb:c8:ec:72:7d:3e: a2:e0:69:d3:d0:e8:b1:8b:8d:bf:52:bb:c1:8b:89: a4:26:41:ae:af:41:b1:f6:e8:a1:94:d4:19:60:08: 43:ad:43:c9:50:7e:c2:24:13:73:6b:28:1f:fd:b3: 7c:31:26:5c:f0:a3:1f:5c:f6:91:3a:ea:27:0e:75: 6a:3a:79:33:63:95:43:07:72:29:25:22:2a:a9:fc: 97:96:d3:93:39:91:84:6e:40:4e:6a:59:20:12:7c: 30:6e:5e:73:20:a9:28:f5:ae:59:92:0b:19:55:46: f8:19:e6:65:92:a8:f2:a5:fc:68:ad:c0:0f:ed:a5: 00:ac:75:a0:40:4b:49:de:ad:e6:7e:a9:6e:e4:29: 81:9a:d6:0a:88:1a:63:75:c7:53:c5:fd:ed:0f:03: 75:56:17:21:70:ad:45:da:8d:46:3e:c6:b1:08:8e: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:30:65:A9:C5:C7:C6:79:73:AB:6B:81:3C:50:17:DE:D6:E3:23:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eaf9bdd8-6880-34c2-812c-61e474dc7e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8e:30:22:ac:e3:05:ae:b5:51:ff:e0:ad:7e:c4:66:c2:88: f7:48:22:01:6c:ea:22:c3:69:7c:c3:c5:bc:f0:d0:20:38:fc: 90:5f:b8:59:26:a8:bb:f9:56:94:ed:89:bf:bf:a5:8a:c7:98: b3:71:08:e7:99:b1:cf:c2:26:69:45:c6:32:dc:9f:6a:e5:96: 81:20:bc:e9:92:3d:30:e3:c4:f3:13:89:d9:c4:a1:92:de:48: 9b:7c:a6:8d:12:0a:ec:28:91:3f:7a:4f:44:94:cb:b8:60:27: c7:9d:2a:a2:28:a8:cc:a4:b8:67:aa:2a:e0:bc:b9:a2:ce:bf: d4:39:f2:f5:23:71:c2:0b:06:36:0c:77:29:5b:fa:b0:e2:46: 9c:d1:33:ef:13:0b:2a:42:93:9e:14:8b:a8:e4:e6:77:04:14: 64:23:8e:a5:5e:e5:33:39:82:9a:5e:5a:8a:b5:0c:34:16:48: 08:88:f0:f7:e2:d6:8e:7f:1b:2e:8b:fc:10:e5:18:ec:88:9e: c2:31:73:42:d1:55:16:79:19:a1:24:d8:a9:4a:7e:2b:bf:e7: 86:23:f1:de:5d:49:12:be:f4:bd:37:b3:02:fe:99:00:a4:22: c1:04:db:7c:1e:37:09:b8:83:76:0e:ab:7b:d7:cb:f7:37:46: 36:db:47:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoGEPh8C60F2qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NTUzZGZhZTMtMmFjYi00MTNkLTkxMDYtY2JiMzU0NDcyMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAide/ylj57Z4YZ9Jhux4JIj7MijUBcQU9+rz1 nJ+uD1ceNxlZW5HlKxm/OL77uitaRpK+kEO5qoiDR+WkNDUE2HvN3O310kjUfJwn uNdZ0Mhqy4XryOxyfT6i4GnT0Oixi42/UrvBi4mkJkGur0Gx9uihlNQZYAhDrUPJ UH7CJBNzaygf/bN8MSZc8KMfXPaROuonDnVqOnkzY5VDB3IpJSIqqfyXltOTOZGE bkBOalkgEnwwbl5zIKko9a5ZkgsZVUb4GeZlkqjypfxorcAP7aUArHWgQEtJ3q3m fqlu5CmBmtYKiBpjdcdTxf3tDwN1VhchcK1F2o1GPsaxCI6lGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUwZanFx8Z5c6trgTxQF97W4yNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWFmOWJkZDgtNjg4MC0z NGMyLTgxMmMtNjFlNDc0ZGM3ZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiOMCKs4wWutVH/4K1+xGbCiPdIIgFs6iLDaXzDxbzw0CA4/JBfuFkm qLv5VpTtib+/pYrHmLNxCOeZsc/CJmlFxjLcn2rlloEgvOmSPTDjxPMTidnEoZLe SJt8po0SCuwokT96T0SUy7hgJ8edKqIoqMykuGeqKuC8uaLOv9Q58vUjccILBjYM dylb+rDiRpzRM+8TCypCk54Ui6jk5ncEFGQjjqVe5TM5gppeWoq1DDQWSAiI8Pfi 1o5/Gy6L/BDlGOyInsIxc0LRVRZ5GaEk2KlKfiu/54Yj8d5dSRK+9L03swL+mQCk IsEE23weNwm4g3YOq3vXy/c3RjbbR44= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:17 2025 by rpki-client