$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa File: f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa (raw, json) Hash identifier: D4HnHNSF3AlmaDioCMI+/n2hZI2EN8atmP3fbrl6AXo= Subject key identifier: 71:46:D9:AF:67:66:22:42:19:AF:FD:D8:58:11:F4:69:24:2F:0D:37 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327FD6E6F00407CEC86F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.65.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7f:d6:e6:f0:04:07:ce:c8:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=24999a6b-2071-42bf-a502-4a3e75ff68cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:07:b0:65:0b:be:f8:a4:1a:00:b6:7c:ef:16: 9c:9c:f5:36:12:7e:60:cb:f6:34:02:28:cd:bf:d3: 22:7f:b7:6e:b7:13:23:8d:44:46:12:ae:da:fd:c2: c7:10:2e:b4:26:fc:45:01:da:d2:b5:6a:c0:80:89: 27:02:a6:83:5e:3f:8e:4b:71:2e:4b:f8:c4:87:ec: b6:24:f8:04:fe:fd:59:ba:d5:b1:85:4f:3f:ea:67: 19:1f:9f:3c:cc:1a:77:be:09:85:c4:9e:93:a5:ee: 69:bd:e1:17:be:df:1f:53:ab:c5:fb:03:f4:39:68: 11:a3:c0:0c:e0:10:18:b0:2c:10:a4:87:66:63:e5: d5:67:f9:a4:b6:52:32:62:71:07:a0:28:d8:55:4f: 64:78:ac:9f:74:12:b3:38:09:b0:da:a4:0d:84:9e: 11:c5:8e:0b:1d:7b:5f:3d:23:05:2d:b5:14:c6:c3: 2e:d0:e9:12:ae:06:1f:0b:10:7f:1c:cd:ec:a6:6d: 66:b3:be:eb:ca:3d:be:f5:28:84:10:f4:f6:2c:b4: 04:08:7a:67:55:81:33:c8:66:97:65:22:0d:fb:da: 21:6e:6d:20:82:12:f5:b9:3b:ce:6d:13:44:05:ff: 68:e6:05:3d:ac:9e:cc:68:f8:09:00:8e:5a:09:e5: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:D9:AF:67:66:22:42:19:AF:FD:D8:58:11:F4:69:24:2F:0D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:74:75:70:06:49:f0:4d:75:bc:66:94:3c:15:16:f1:ac:4f: ee:ec:27:ac:f0:90:68:b3:af:f1:6c:7a:f4:60:d7:75:29:c7: 1e:6e:fa:9c:cb:ab:a8:ec:6d:6b:84:a3:9d:de:e7:64:bf:8a: 7c:00:fe:de:a7:12:bd:e8:db:c6:fc:f0:a1:2b:b1:35:f4:24: 57:46:20:e5:6a:5e:6b:e5:98:aa:ff:9a:55:64:8b:d9:7c:0b: 23:cc:52:20:2b:d2:a9:66:fd:d4:b2:ea:b0:fd:64:84:ba:4c: 42:c1:7f:95:e5:b6:81:c8:ec:8e:b0:2f:c1:10:af:fb:15:89: ad:5c:df:4b:69:66:76:7d:51:07:07:d9:8a:06:db:24:fc:00: b3:b7:70:ac:c3:a3:6f:4f:ef:9d:ec:ae:98:74:3c:fe:1d:6a: df:9c:9c:7c:54:ba:57:1a:24:53:9b:89:18:7c:69:c2:57:93: c0:fa:bb:97:d8:c2:a5:7e:81:1e:d0:2d:34:68:68:cc:1d:1c: 67:c6:9e:fb:8c:59:f6:f9:fa:6e:5b:83:f7:32:50:88:a6:c0: e2:14:94:69:af:c6:3a:dd:25:07:1d:95:46:cf:ce:9f:6e:6f: 7b:60:70:e7:71:ac:b3:3b:37:51:de:93:4c:98:a1:83:d4:57: d3:b8:33:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn/W5vAEB87Ib4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MjQ5OTlhNmItMjA3MS00MmJmLWE1MDItNGEzZTc1ZmY2OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAewZQu++KQaALZ87xacnPU2En5gy/Y0AijN v9Mif7dutxMjjURGEq7a/cLHEC60JvxFAdrStWrAgIknAqaDXj+OS3EuS/jEh+y2 JPgE/v1ZutWxhU8/6mcZH588zBp3vgmFxJ6Tpe5pveEXvt8fU6vF+wP0OWgRo8AM 4BAYsCwQpIdmY+XVZ/mktlIyYnEHoCjYVU9keKyfdBKzOAmw2qQNhJ4RxY4LHXtf PSMFLbUUxsMu0OkSrgYfCxB/HM3spm1ms77ryj2+9SiEEPT2LLQECHpnVYEzyGaX ZSIN+9ohbm0gghL1uTvObRNEBf9o5gU9rJ7MaPgJAI5aCeUwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFG2a9nZiJCGa/92FgR9GkkLw03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjkyMWM0ZTctZDc4OS0z YWIwLTk0ZWYtNGVlYzY5NGFlZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKd0dXAGSfBNdbxmlDwVFvGsT+7sJ6zwkGizr/FsevRg13Upxx5u+pzL q6jsbWuEo53e52S/inwA/t6nEr3o28b88KErsTX0JFdGIOVqXmvlmKr/mlVki9l8 CyPMUiAr0qlm/dSy6rD9ZIS6TELBf5XltoHI7I6wL8EQr/sVia1c30tpZnZ9UQcH 2YoG2yT8ALO3cKzDo29P753srph0PP4dat+cnHxUulcaJFObiRh8acJXk8D6u5fY wqV+gR7QLTRoaMwdHGfGnvuMWfb5+m5bg/cyUIimwOIUlGmvxjrdJQcdlUbPzp9u b3tgcOdxrLM7N1Hek0yYoYPUV9O4M9E= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:25 2025 by rpki-client