$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ddf4a4b9-bd9d-3d8f-beff-3121162dffcc.roa File: ddf4a4b9-bd9d-3d8f-beff-3121162dffcc.roa (raw, json) Hash identifier: jGsK45Jxhxre4/o6or9N6uTrM8bbXNRFyfinDaNzlBs= Subject key identifier: 18:4D:9B:DF:E2:11:67:A9:60:63:E8:7B:5F:FB:95:76:8C:7F:73:19 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B9E79331ED7C5850EAD7DBB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ddf4a4b9-bd9d-3d8f-beff-3121162dffcc.roa Signing time: Thu 23 Oct 2025 16:49:37 +0000 ROA not before: Thu 23 Oct 2025 16:49:37 +0000 ROA not after: Wed 21 Jan 2026 17:49:37 +0000 asID: 395747 IP address blocks: 172.64.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:79:33:1e:d7:c5:85:0e:ad:7d:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 23 16:49:37 2025 GMT Not After : Jan 21 17:49:37 2026 GMT Subject: CN=53265e7e-2bfb-4941-9893-b1ee68225533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:32:55:46:e8:84:0f:55:92:24:2f:97:9d: ba:5b:c5:d6:93:d1:8b:dc:69:19:28:3a:6d:be:3d: 33:96:bb:60:ae:ca:dd:df:44:44:0e:aa:93:fd:9a: 55:19:ec:f1:56:88:2c:20:ba:42:99:52:cd:b7:19: c0:e9:1b:c1:8c:00:c8:ab:6e:9b:30:18:38:9c:fd: 50:0b:5d:76:28:6a:87:2e:1e:66:f1:c8:f2:34:4b: 13:92:0f:e1:46:c8:2b:c6:b1:86:2d:91:e4:3c:74: 76:75:06:2d:ac:e4:6b:52:d0:eb:61:d7:79:24:a9: 92:15:bb:43:71:1c:d0:a4:bd:79:9e:93:75:24:d7: a0:fe:d2:d7:18:02:f5:2e:bf:ed:05:58:ab:cf:6f: 8c:b3:a9:a1:4e:c1:9a:96:fa:82:bd:81:de:a5:4b: a5:fc:b3:ee:46:b1:80:b8:fc:0c:fe:e1:9e:dd:69: ae:00:b2:bb:6b:d7:6a:07:60:d7:eb:c2:cd:26:0c: 96:13:ac:14:80:25:db:56:cc:fa:fb:06:15:78:7d: 4f:0c:49:a0:b1:de:99:da:92:17:79:1a:7b:7c:88: 9b:88:58:b6:d7:e9:6f:06:71:50:94:b7:75:5b:7a: f7:6b:7d:9e:85:63:cb:87:58:e4:d2:8f:86:e3:42: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4D:9B:DF:E2:11:67:A9:60:63:E8:7B:5F:FB:95:76:8C:7F:73:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ddf4a4b9-bd9d-3d8f-beff-3121162dffcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:fd:b7:53:8f:cd:f7:1d:7c:f4:26:58:6c:a9:18:3c:8f:5f: 9e:f1:96:ef:93:85:90:a3:fe:a4:33:63:25:4f:c8:88:0e:dd: 38:7b:31:3e:62:06:f8:60:8b:a6:1f:eb:9f:79:53:23:6f:4f: d4:75:be:ae:5a:f4:db:d0:1d:c0:b9:2e:3f:2a:45:0b:b9:39: 6e:27:92:91:f8:2c:97:d5:be:93:a5:2e:40:16:0a:c7:11:7c: 7c:ba:c6:6c:00:c3:4a:c5:d3:ad:79:c8:13:a9:7c:e4:70:2a: c3:78:17:be:81:2b:1f:78:d3:ff:c3:9b:a5:1e:24:21:a2:36: 19:c8:96:49:cd:48:0f:00:fc:04:8b:56:20:9d:30:d1:c7:33: d2:1f:1d:38:ac:54:29:89:bc:27:ac:3a:98:ba:97:db:ff:3c: 13:f6:d8:a4:1f:b8:1a:d0:fa:45:3e:fc:ef:a7:4f:48:18:20: 6c:00:ea:e6:af:60:97:b9:d7:c3:17:a3:ce:f2:85:78:07:71: a3:9e:0f:16:2f:70:01:88:36:22:c8:f3:ac:b0:05:e7:ea:46: 3e:30:48:9e:d6:c6:b3:e1:e7:a7:8d:2b:d9:65:eb:27:e1:fb: 65:ee:ff:46:d7:e9:8d:73:a9:d2:ab:73:ed:ac:43:e5:0b:ef: c1:b4:b3:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueeTMe18WFDq19uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyMzE2NDkzN1oXDTI2MDEyMTE3NDkzN1owLzEtMCsGA1UEAxMk NTMyNjVlN2UtMmJmYi00OTQxLTk4OTMtYjFlZTY4MjI1NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiUyVUbohA9VkiQvl526W8XWk9GL3GkZKDpt vj0zlrtgrsrd30REDqqT/ZpVGezxVogsILpCmVLNtxnA6RvBjADIq26bMBg4nP1Q C112KGqHLh5m8cjyNEsTkg/hRsgrxrGGLZHkPHR2dQYtrORrUtDrYdd5JKmSFbtD cRzQpL15npN1JNeg/tLXGAL1Lr/tBVirz2+Ms6mhTsGalvqCvYHepUul/LPuRrGA uPwM/uGe3WmuALK7a9dqB2DX68LNJgyWE6wUgCXbVsz6+wYVeH1PDEmgsd6Z2pIX eRp7fIibiFi21+lvBnFQlLd1W3r3a32ehWPLh1jk0o+G40L8ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhNm9/iEWepYGPoe1/7lXaMf3MZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGRmNGE0YjktYmQ5ZC0z ZDhmLWJlZmYtMzEyMTE2MmRmZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALT9t1OPzfcdfPQmWGypGDyPX57xlu+ThZCj/qQzYyVPyIgO3Th7MT5i Bvhgi6Yf6595UyNvT9R1vq5a9NvQHcC5Lj8qRQu5OW4nkpH4LJfVvpOlLkAWCscR fHy6xmwAw0rF0615yBOpfORwKsN4F76BKx940//Dm6UeJCGiNhnIlknNSA8A/ASL ViCdMNHHM9IfHTisVCmJvCesOpi6l9v/PBP22KQfuBrQ+kU+/O+nT0gYIGwA6uav YJe518MXo87yhXgHcaOeDxYvcAGINiLI86ywBefqRj4wSJ7WxrPh56eNK9ll6yfh +2Xu/0bX6Y1zqdKrc+2sQ+UL78G0s9I= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:50 2025 by rpki-client