$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f591edab-34ef-3518-a353-bd64d1c1d2f9.roa File: f591edab-34ef-3518-a353-bd64d1c1d2f9.roa (raw, json) Hash identifier: AAhBfxspsaXQqhPRvGfr1dgoAwAUyuAsDbzgvXyAHC0= Subject key identifier: 69:A2:7B:2E:7E:4D:FE:14:2C:D4:2C:6C:C3:D5:74:B6:87:12:23:BC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFB9AB91AFA1BB7E44580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f591edab-34ef-3518-a353-bd64d1c1d2f9.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.69.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fb:9a:b9:1a:fa:1b:b7:e4:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=befd0465-0fc8-4e32-b31d-9a1c8b8da0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:6c:8b:81:e0:eb:72:f2:37:aa:37:6e:d2: cd:a0:35:de:08:00:2c:29:f8:d8:8b:96:46:a5:dc: ba:3e:1d:bb:15:c2:a0:24:ea:6b:d8:42:80:2a:ec: 0f:db:b1:68:c8:36:ce:d8:dd:92:8b:76:c9:ef:b1: ba:7d:e4:f9:d6:2e:d3:18:af:92:82:df:1d:3d:e9: 3a:f7:61:1c:0f:fb:bb:30:52:83:a8:75:99:b4:04: 27:30:04:7a:31:b0:3e:fc:b8:8f:e3:dc:6a:30:ca: 5d:ce:d1:be:d2:d9:18:5b:1a:48:0e:5b:45:7e:96: 10:af:07:c5:ff:3a:2f:55:9d:e9:c6:e9:93:bf:ac: 28:08:c7:8b:95:fd:92:94:9d:82:a0:27:66:a3:c3: 60:89:87:c9:49:6d:d2:72:30:1f:19:11:8e:b8:cd: 8e:67:67:5e:6f:44:55:72:1f:13:c0:35:d7:80:9b: 96:80:38:e1:df:ba:2f:3b:c3:42:3b:c7:c1:df:ce: 73:9f:02:16:fa:ff:00:3e:35:19:cc:8c:41:ca:46: 23:3f:af:ed:24:07:0a:57:30:b2:c5:48:1c:d5:54: 45:3e:d4:61:ab:07:6e:3a:c2:85:f3:c5:80:8b:22: 77:77:d1:26:f1:b2:c9:79:6b:d7:bd:f3:30:dd:0f: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A2:7B:2E:7E:4D:FE:14:2C:D4:2C:6C:C3:D5:74:B6:87:12:23:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f591edab-34ef-3518-a353-bd64d1c1d2f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1d:6a:b6:e6:99:f2:f0:fb:9f:34:b2:3c:9a:ce:49:ac:7c: 15:2c:2e:3e:ed:aa:46:29:16:21:ce:2d:f0:b3:34:0b:6b:fd: ef:a3:1e:6c:8e:cf:db:33:4f:c4:39:34:3b:68:ba:49:96:74: cb:a8:91:b6:92:f8:47:31:b1:ab:7c:75:40:79:dc:1c:00:db: 1c:aa:73:d5:fe:f2:1f:c4:f3:04:2a:49:91:29:f3:7d:c5:23: e1:35:0f:ba:ab:2c:58:6e:04:fa:66:49:cf:33:7a:4a:a4:89: e4:43:3a:97:f0:84:b3:85:3f:65:eb:f7:ae:42:2b:c7:d8:30: ab:f3:93:ee:f7:c4:c7:96:16:df:5e:86:1b:6d:34:cf:52:35: 8a:59:dc:0b:30:8e:bc:39:84:99:0b:a6:de:43:7a:d8:b0:d1: 35:da:a8:b5:89:af:9e:10:99:eb:f2:7d:fe:18:25:c8:b0:29: 10:34:98:35:37:c0:06:82:be:54:1f:17:fe:77:ec:ae:ca:47: 5b:1d:77:33:b2:88:0d:4f:7f:87:4d:37:d7:4b:91:fe:d3:49: 45:07:22:b8:24:38:20:59:65:44:14:06:bf:7e:3d:e0:d9:54: f3:4e:6f:c9:f4:52:b1:bf:00:3d:a6:1a:41:76:72:67:45:aa: 16:ed:c4:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPuauRr6G7fkRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YmVmZDA0NjUtMGZjOC00ZTMyLWIzMWQtOWExYzhiOGRhMGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWVsi4Hg63LyN6o3btLNoDXeCAAsKfjYi5ZG pdy6Ph27FcKgJOpr2EKAKuwP27FoyDbO2N2Si3bJ77G6feT51i7TGK+Sgt8dPek6 92EcD/u7MFKDqHWZtAQnMAR6MbA+/LiP49xqMMpdztG+0tkYWxpIDltFfpYQrwfF /zovVZ3pxumTv6woCMeLlf2SlJ2CoCdmo8NgiYfJSW3ScjAfGRGOuM2OZ2deb0RV ch8TwDXXgJuWgDjh37ovO8NCO8fB385znwIW+v8APjUZzIxBykYjP6/tJAcKVzCy xUgc1VRFPtRhqwduOsKF88WAiyJ3d9Em8bLJeWvXvfMw3Q/m+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmiey5+Tf4ULNQsbMPVdLaHEiO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjU5MWVkYWItMzRlZi0z NTE4LWEzNTMtYmQ2NGQxYzFkMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0darbmmfLw+580sjyazkmsfBUsLj7tqkYpFiHOLfCzNAtr/e+jHmyO z9szT8Q5NDtoukmWdMuokbaS+Ecxsat8dUB53BwA2xyqc9X+8h/E8wQqSZEp833F I+E1D7qrLFhuBPpmSc8zekqkieRDOpfwhLOFP2Xr965CK8fYMKvzk+73xMeWFt9e hhttNM9SNYpZ3Aswjrw5hJkLpt5Detiw0TXaqLWJr54Qmevyff4YJciwKRA0mDU3 wAaCvlQfF/537K7KR1sddzOyiA1Pf4dNN9dLkf7TSUUHIrgkOCBZZUQUBr9+PeDZ VPNOb8n0UrG/AD2mGkF2cmdFqhbtxPw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:53 2025 by rpki-client