$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ecdf7ca2-41ff-3bd1-b671-71cf35d3c9c8.roa File: ecdf7ca2-41ff-3bd1-b671-71cf35d3c9c8.roa (raw, json) Hash identifier: mjzKie8RBxjcx9yGxhi97zd9UGzxlHgN9nhEkZhBzsY= Subject key identifier: FE:D3:2E:06:91:66:CE:26:CD:BC:2B:3F:5C:55:7E:2D:18:CC:2A:AA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328E092563CE909C83DF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ecdf7ca2-41ff-3bd1-b671-71cf35d3c9c8.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.67.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8e:09:25:63:ce:90:9c:83:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ba660076-396d-43dc-af67-1b98ec81812c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1f:39:83:84:5f:27:bc:d9:a5:4d:f2:8c:65: e7:0f:27:99:f5:9f:68:0b:dd:82:76:f5:d6:27:d2: ec:9e:61:07:f7:81:59:f4:a7:06:c9:c4:b0:88:c9: a6:45:ff:34:6b:31:7d:1c:a2:85:b0:7a:16:5b:34: 37:8c:20:87:8c:bb:4e:8f:a6:f7:99:2e:65:30:55: 77:d5:27:6b:cf:b7:42:21:41:9d:dd:7e:fd:66:86: 65:bb:d5:bd:c7:1c:a0:da:98:db:ed:86:5e:3e:34: ea:4a:9d:84:e0:26:35:ba:a8:fb:85:d8:ea:e2:c6: 74:4a:08:7f:b8:fa:62:9c:54:f1:9d:83:4e:81:56: 96:71:e1:e5:ea:3d:e7:3f:7c:e6:b6:91:fb:dc:6f: 4f:8e:81:d1:8d:98:95:cd:49:34:1e:4e:f0:ad:f8: 30:99:96:8b:c2:7f:ee:39:17:b8:59:02:ba:06:8d: 54:e4:cf:97:d4:25:3a:49:7c:a4:6c:ba:ce:eb:5d: a1:14:44:b5:17:a0:9a:75:f5:d7:00:87:e4:be:32: 58:0e:4b:70:eb:7c:c8:17:44:26:9a:94:c3:44:64: 57:52:04:32:7f:37:a0:48:0e:c6:ba:be:c9:27:56: ae:99:11:9e:8c:8e:6e:2e:e4:d1:18:67:33:f3:39: 83:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D3:2E:06:91:66:CE:26:CD:BC:2B:3F:5C:55:7E:2D:18:CC:2A:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ecdf7ca2-41ff-3bd1-b671-71cf35d3c9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f1:3c:f9:34:7c:46:bb:29:c2:49:8b:bc:97:6a:be:ca:98: 20:24:fc:e6:5f:3f:16:bd:47:e2:c2:31:dd:f3:06:25:60:c1: 46:1a:80:89:96:04:b5:db:1d:51:23:60:ee:68:60:9e:e3:57: bc:0f:c8:c1:89:c4:ea:84:15:74:93:2b:ef:14:3b:72:67:0e: fb:e7:02:d8:53:0c:e2:2c:c0:bc:d8:be:a9:95:63:14:5a:c7: 5d:4a:41:6f:ac:59:d8:61:0f:d1:70:6b:43:bc:3a:0f:6d:e6: 47:b2:ad:1b:d5:7a:96:bd:7e:02:dc:07:72:35:6a:a3:21:3a: 43:d3:ef:03:44:d0:80:97:c8:70:b4:19:b2:e3:39:7e:73:f4: 54:35:df:c4:36:ae:9e:7f:8b:b6:4d:52:32:e7:32:2f:80:82: 7d:dd:cf:c2:d4:ea:92:01:b3:65:09:78:30:ff:f9:36:53:78: 75:24:f1:f6:b4:3b:00:c6:9d:10:b8:53:d3:b8:83:74:bf:fe: 1b:8f:5c:84:43:2f:52:32:09:62:91:69:d6:81:9e:62:18:f8: 12:74:94:04:64:73:59:b1:08:95:c3:b8:f5:b0:56:5d:7a:fe: e0:20:49:c8:75:f3:dd:7f:83:e1:23:a1:33:d5:8e:8f:7a:3c: 8c:5e:83:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo4JJWPOkJyD3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YmE2NjAwNzYtMzk2ZC00M2RjLWFmNjctMWI5OGVjODE4MTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih85g4RfJ7zZpU3yjGXnDyeZ9Z9oC92CdvXW J9LsnmEH94FZ9KcGycSwiMmmRf80azF9HKKFsHoWWzQ3jCCHjLtOj6b3mS5lMFV3 1Sdrz7dCIUGd3X79ZoZlu9W9xxyg2pjb7YZePjTqSp2E4CY1uqj7hdjq4sZ0Sgh/ uPpinFTxnYNOgVaWceHl6j3nP3zmtpH73G9PjoHRjZiVzUk0Hk7wrfgwmZaLwn/u ORe4WQK6Bo1U5M+X1CU6SXykbLrO612hFES1F6CadfXXAIfkvjJYDktw63zIF0Qm mpTDRGRXUgQyfzegSA7Gur7JJ1aumRGejI5uLuTRGGcz8zmDMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7TLgaRZs4mzbwrP1xVfi0YzCqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWNkZjdjYTItNDFmZi0z YmQxLWI2NzEtNzFjZjM1ZDNjOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPxPPk0fEa7KcJJi7yXar7KmCAk/OZfPxa9R+LCMd3zBiVgwUYagImW BLXbHVEjYO5oYJ7jV7wPyMGJxOqEFXSTK+8UO3JnDvvnAthTDOIswLzYvqmVYxRa x11KQW+sWdhhD9Fwa0O8Og9t5keyrRvVepa9fgLcB3I1aqMhOkPT7wNE0ICXyHC0 GbLjOX5z9FQ138Q2rp5/i7ZNUjLnMi+Agn3dz8LU6pIBs2UJeDD/+TZTeHUk8fa0 OwDGnRC4U9O4g3S//huPXIRDL1IyCWKRadaBnmIY+BJ0lARkc1mxCJXDuPWwVl16 /uAgSch1891/g+EjoTPVjo96PIxeg6M= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:15 2025 by rpki-client