$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b869e47-e643-3c42-a312-ea107bdf8b56.roa File: 6b869e47-e643-3c42-a312-ea107bdf8b56.roa (raw, json) Hash identifier: PhL/ellit0AJnhCoXOisMXRkSP6znPWczuHIUJ161hA= Subject key identifier: AD:6C:BB:06:10:CA:65:38:3F:82:BB:11:98:87:01:4F:5E:77:01:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B9E07CED8923BB7CBD381DFC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b869e47-e643-3c42-a312-ea107bdf8b56.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ce:d8:92:3b:b7:cb:d3:81:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=ab6a4c23-b777-4064-8e6a-5720e465d3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:04:b8:cc:f2:93:b4:1b:26:2b:79:b0:dd: 78:55:1b:e6:e2:44:3c:3a:21:19:18:8e:e1:d0:3d: 6e:98:81:3f:ce:87:f7:36:d2:c1:54:06:50:eb:81: 1a:a9:bd:99:9d:3c:49:42:8e:f3:55:2e:9c:64:29: bc:d5:b4:ee:78:57:86:45:d7:97:6a:d7:1a:9f:ed: f3:f7:54:e8:5d:8f:bf:2b:b8:73:05:43:85:ef:ae: a6:df:40:a7:df:51:10:c8:d9:e0:5a:8e:db:6b:dd: a8:a1:5e:4e:da:57:f1:2e:5a:b5:64:1c:37:32:6c: 8a:5c:b5:37:80:2b:ab:b5:55:9d:1c:cd:45:1f:35: b7:97:45:98:7e:96:6c:6f:a4:c0:7c:4c:97:70:69: e2:26:29:d0:2a:c1:32:fe:6d:2d:46:7f:d7:d4:1c: 3c:01:fd:77:29:35:ba:88:2d:ad:89:f7:6e:03:54: 99:71:46:e6:f1:80:49:11:7f:f4:3f:a3:a3:0e:5e: f6:58:44:a0:1c:31:33:a8:57:c7:25:e8:ee:28:d6: f3:ac:c5:a1:f1:4a:e7:98:92:00:1a:ae:31:08:31: 33:e5:89:b5:0c:d6:a3:46:48:9e:89:2b:cf:e6:c6: 60:40:81:d5:30:14:e6:3a:0b:58:4c:ae:1c:58:00: 23:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6C:BB:06:10:CA:65:38:3F:82:BB:11:98:87:01:4F:5E:77:01:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b869e47-e643-3c42-a312-ea107bdf8b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:76:7b:9c:d4:33:27:4c:3d:e5:ee:c5:ed:c4:de:7f:f2:bb: 58:bf:4a:b6:11:df:b6:79:04:00:88:89:7d:12:9b:3b:e3:f4: 1b:aa:08:96:09:ca:e1:c1:81:52:7e:c4:54:d5:95:2a:c1:fb: 3a:5d:b3:38:45:b6:76:6a:e9:6c:d2:18:3f:b0:42:6e:dc:d5: cb:c5:88:b5:cb:cb:a2:f7:e1:ce:05:e5:51:40:30:e1:44:6b: 10:a1:7b:4d:3c:79:ff:ed:45:d9:0a:b1:ab:fb:17:63:4f:a5: c4:57:17:af:97:cd:b9:4c:4d:06:f7:ef:2f:95:1c:e9:47:97: cf:cb:58:c9:ff:0f:fe:3f:fa:5b:34:79:7d:3c:28:87:93:3d: 31:d0:a5:ed:57:db:ee:6e:b5:86:77:8c:b8:a4:08:ef:22:35: 48:57:a1:17:a8:17:9d:dc:cb:17:1f:86:f5:6c:2c:da:62:ac: 76:d2:cf:08:0f:5b:19:36:05:a4:a5:7f:1b:d0:c6:11:53:f7: 7b:4e:85:a8:35:da:70:8f:99:bc:89:f1:59:1f:e4:2f:3c:8a: 34:2e:4f:20:af:e3:3d:18:62:d3:9a:76:dc:da:e0:b3:78:6c: 5a:0c:35:ba:3b:61:7c:4b:ee:85:2b:e6:4d:1b:d5:59:a1:db: 4b:b6:5e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB87Ykju3y9OB38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YWI2YTRjMjMtYjc3Ny00MDY0LThlNmEtNTcyMGU0NjVkM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63UEuMzyk7QbJit5sN14VRvm4kQ8OiEZGI7h 0D1umIE/zof3NtLBVAZQ64Eaqb2ZnTxJQo7zVS6cZCm81bTueFeGRdeXatcan+3z 91ToXY+/K7hzBUOF766m30Cn31EQyNngWo7ba92ooV5O2lfxLlq1ZBw3MmyKXLU3 gCurtVWdHM1FHzW3l0WYfpZsb6TAfEyXcGniJinQKsEy/m0tRn/X1Bw8Af13KTW6 iC2tifduA1SZcUbm8YBJEX/0P6OjDl72WESgHDEzqFfHJejuKNbzrMWh8UrnmJIA Gq4xCDEz5Ym1DNajRkieiSvP5sZgQIHVMBTmOgtYTK4cWAAjUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1suwYQymU4P4K7EZiHAU9edwHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmI4NjllNDctZTY0My0z YzQyLWEzMTItZWExMDdiZGY4YjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR2e5zUMydMPeXuxe3E3n/yu1i/SrYR37Z5BACIiX0Smzvj9BuqCJYJ yuHBgVJ+xFTVlSrB+zpdszhFtnZq6WzSGD+wQm7c1cvFiLXLy6L34c4F5VFAMOFE axChe008ef/tRdkKsav7F2NPpcRXF6+XzblMTQb37y+VHOlHl8/LWMn/D/4/+ls0 eX08KIeTPTHQpe1X2+5utYZ3jLikCO8iNUhXoReoF53cyxcfhvVsLNpirHbSzwgP Wxk2BaSlfxvQxhFT93tOhag12nCPmbyJ8Vkf5C88ijQuTyCv4z0YYtOadtza4LN4 bFoMNbo7YXxL7oUr5k0b1Vmh20u2Xkc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:39:11 2025 by rpki-client