$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f54f091f-4ed8-3d12-83a0-bb249b2b8e0f.roa File: f54f091f-4ed8-3d12-83a0-bb249b2b8e0f.roa (raw, json) Hash identifier: RJJFSYbpajf0DkhOzs0Doz/VhI2df2Jdmw8P3nenGp8= Subject key identifier: 6A:85:F9:84:80:A8:7D:1F:1F:DE:56:4E:F8:D1:FD:26:37:BE:8C:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD3479FC6C0AFC49A07B40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f54f091f-4ed8-3d12-83a0-bb249b2b8e0f.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.69.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:34:79:fc:6c:0a:fc:49:a0:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=d2e6c0b2-83a2-4b89-8d54-5b669cdd4882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:67:dd:2a:30:d4:1f:77:70:40:10:0a:d1: 80:f2:fe:20:6a:30:da:d3:7d:44:d4:80:82:90:4b: c4:e0:7f:13:2e:80:1f:60:e8:81:4e:1d:d2:39:5d: b5:ce:3c:71:37:95:c2:c6:22:e8:c6:e5:6c:f5:01: 55:a2:7b:37:2b:a0:e3:ec:1a:32:bb:d3:08:19:b6: 52:5f:bc:fa:3e:51:dc:76:6b:33:ce:92:fb:9c:b5: 32:ab:65:6e:d4:fa:c6:ec:87:f8:41:e1:6f:d6:1d: e8:1e:ae:be:6b:61:24:d0:ef:a3:8d:38:dd:7b:35: 98:37:95:56:95:12:6b:50:2c:f4:31:56:e5:8b:bf: 89:1d:2e:92:5f:f6:27:08:3d:7c:cd:e3:f6:37:6b: 84:c4:8c:df:52:7f:96:13:0a:cf:35:16:f7:cc:c5: d4:19:61:8c:0e:11:d1:39:be:a3:6d:b3:74:68:ef: 7f:99:a5:31:0e:78:16:92:8a:c5:a3:5b:67:2c:ac: d9:8f:96:a1:13:c5:21:b5:1f:d1:59:ed:a4:94:15: e0:71:7e:34:e4:5a:9f:1d:bb:0f:bf:35:50:94:68: 64:a0:79:5d:40:56:81:94:e5:b8:59:60:2b:0c:a5: 83:80:91:98:f7:26:e2:a3:15:46:7c:d4:b3:cd:bf: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:85:F9:84:80:A8:7D:1F:1F:DE:56:4E:F8:D1:FD:26:37:BE:8C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f54f091f-4ed8-3d12-83a0-bb249b2b8e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:96:ea:4b:e1:1e:41:52:25:0a:b9:46:e2:d5:e3:7d:56:2d: fd:d3:21:53:c0:af:23:32:e3:3e:6e:ab:d3:a5:3e:d1:4d:9e: 1a:40:93:ec:39:8d:f6:ab:66:8f:57:48:9c:a8:73:60:08:8d: 28:4a:17:ff:09:60:a2:36:e9:ee:7c:56:42:6a:54:bb:f1:01: dc:d6:e6:8d:97:1e:69:3a:81:6f:52:19:53:4f:5a:1f:0b:d0: 18:e5:93:fe:fc:f7:3d:8e:3a:e8:60:63:a4:93:d9:79:18:69: dc:ea:34:27:db:75:a9:37:c2:51:b1:49:3f:c1:4f:6b:00:b9: be:9b:8d:fa:25:2c:6f:01:df:03:c6:bb:5c:6c:fe:b1:8c:83: a9:39:13:c1:49:4c:57:03:39:03:47:71:d4:bc:90:00:4e:38: 08:d7:af:c2:2e:83:aa:97:fb:28:c0:a8:40:ac:89:08:26:a7: fa:32:ee:13:aa:89:7b:cc:5e:de:97:45:39:e1:78:8b:ee:34: 17:10:f2:3f:74:f7:8c:d6:c3:07:2a:91:8d:1d:3c:2b:e2:04: 67:bd:9d:47:09:be:22:7e:c4:e2:93:9e:c1:16:c5:7e:78:2a: 98:2f:74:c7:b1:4e:8b:11:26:77:bd:d1:88:c1:92:9d:9b:ca: 58:8c:e3:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TR5/GwK/Emge0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZDJlNmMwYjItODNhMi00Yjg5LThkNTQtNWI2NjljZGQ0ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5dn3Sow1B93cEAQCtGA8v4gajDa031E1ICC kEvE4H8TLoAfYOiBTh3SOV21zjxxN5XCxiLoxuVs9QFVons3K6Dj7Boyu9MIGbZS X7z6PlHcdmszzpL7nLUyq2Vu1PrG7If4QeFv1h3oHq6+a2Ek0O+jjTjdezWYN5VW lRJrUCz0MVbli7+JHS6SX/YnCD18zeP2N2uExIzfUn+WEwrPNRb3zMXUGWGMDhHR Ob6jbbN0aO9/maUxDngWkorFo1tnLKzZj5ahE8UhtR/RWe2klBXgcX405FqfHbsP vzVQlGhkoHldQFaBlOW4WWArDKWDgJGY9ybioxVGfNSzzb/GVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqF+YSAqH0fH95WTvjR/SY3vox3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjU0ZjA5MWYtNGVkOC0z ZDEyLTgzYTAtYmIyNDliMmI4ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6W6kvhHkFSJQq5RuLV431WLf3TIVPAryMy4z5uq9OlPtFNnhpAk+w5 jfarZo9XSJyoc2AIjShKF/8JYKI26e58VkJqVLvxAdzW5o2XHmk6gW9SGVNPWh8L 0Bjlk/789z2OOuhgY6ST2XkYadzqNCfbdak3wlGxST/BT2sAub6bjfolLG8B3wPG u1xs/rGMg6k5E8FJTFcDOQNHcdS8kABOOAjXr8Iug6qX+yjAqECsiQgmp/oy7hOq iXvMXt6XRTnheIvuNBcQ8j9094zWwwcqkY0dPCviBGe9nUcJviJ+xOKTnsEWxX54 KpgvdMexTosRJne90YjBkp2byliM44Q= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:04 2025 by rpki-client