$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b67e8b19-fcaa-3f06-a01c-ac1cf5df37e8.roa File: b67e8b19-fcaa-3f06-a01c-ac1cf5df37e8.roa (raw, json) Hash identifier: hioAHfOXgNcTjEQfV4Qth6ShjpPl+hGXOMCqRGtFs5Q= Subject key identifier: E3:E1:D5:91:8F:3D:67:30:AF:BA:E9:48:79:59:8F:43:CB:7F:DF:F0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B5E26987B263B71EE10E8A200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b67e8b19-fcaa-3f06-a01c-ac1cf5df37e8.roa Signing time: Tue 30 Sep 2025 15:51:27 +0000 ROA not before: Tue 30 Sep 2025 15:51:27 +0000 ROA not after: Mon 29 Dec 2025 16:51:27 +0000 asID: 14789 IP address blocks: 172.69.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:26:98:7b:26:3b:71:ee:10:e8:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 30 15:51:27 2025 GMT Not After : Dec 29 16:51:27 2025 GMT Subject: CN=3a432d9f-9dcf-4ce4-a83a-e2e0462342c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:88:e5:32:bc:a6:9c:ac:cf:67:2b:c4:e1: 04:f3:ef:94:02:e9:7f:2a:9c:f8:86:55:98:7f:e7: 61:e9:4d:7a:58:02:ec:cd:8e:a1:c0:8b:11:15:96: 1c:22:39:5a:13:15:8f:d1:93:6c:38:f6:40:13:a6: 9c:98:fc:22:e3:36:75:ca:a3:d7:07:76:26:b6:77: 1b:20:0e:e0:6c:21:39:3a:3c:9b:3a:9e:f6:e1:d4: 97:78:99:c6:f6:bb:ca:17:2c:2a:3f:1b:ca:f7:77: ff:7e:3c:6f:00:bc:9d:47:55:05:16:62:7c:79:90: 49:7c:a0:46:7b:17:b3:cc:8e:2f:80:36:4a:64:f0: 4d:7f:47:75:f4:b1:77:64:b0:b3:22:3c:87:d3:11: 83:b5:a3:89:fd:2d:2b:73:39:f3:0d:a6:ec:89:38: ef:58:c1:27:d7:df:b1:67:b2:99:c7:64:03:b1:10: 71:f2:ce:45:e0:27:a4:97:e6:38:17:c5:4f:6e:53: 28:55:51:30:fb:7d:28:17:6a:0c:61:04:30:f8:c4: de:60:c8:df:7f:1d:87:d9:39:74:72:32:19:0c:ff: 01:56:cb:36:1d:98:16:02:1f:c3:48:3d:c1:cd:87: 6f:20:90:6a:30:58:45:9d:d4:de:df:e6:18:13:b3: 08:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E1:D5:91:8F:3D:67:30:AF:BA:E9:48:79:59:8F:43:CB:7F:DF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b67e8b19-fcaa-3f06-a01c-ac1cf5df37e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b6:41:7d:37:80:11:b7:55:2b:f9:ef:e9:c2:91:e8:b1:b5: 17:d3:fa:64:ac:c3:32:b2:8d:95:89:1f:ca:80:0a:44:07:65: c7:c1:70:cc:40:2e:e3:4c:9c:c1:24:5d:51:b3:61:05:0a:6c: 26:4d:d1:26:84:55:c0:90:06:3b:b4:42:06:a8:30:0f:17:24: 19:29:73:20:7d:a3:d8:b0:ad:ad:ee:92:63:55:73:b6:3b:22: f6:86:9e:0b:5d:ba:01:3e:59:60:27:87:76:f1:d0:79:2a:88: 31:da:5d:eb:f6:68:0d:79:64:e5:4e:9c:7b:76:e0:7d:a2:32: f4:a3:a3:ce:b6:5a:1a:28:cd:3f:35:09:57:3d:4d:f1:00:b9: 5e:aa:c1:10:03:5e:c1:94:e8:f1:1c:fb:4b:9a:2b:b4:f6:51: 4a:d0:0e:30:88:bc:46:a6:fb:b5:8d:de:2e:da:11:08:62:78: fb:43:ff:93:2c:aa:16:26:33:e3:c1:71:19:06:0a:79:e6:0c: a8:63:d5:b3:cb:c8:c3:00:f0:bd:af:17:9b:48:e8:83:fe:c5: 3c:27:07:91:59:79:e4:ca:ad:d3:a8:05:2c:c9:35:89:71:02: 70:db:4d:6e:9d:98:38:e9:0d:86:48:e9:cb:e9:26:d0:3b:a5: 59:14:46:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEteJph7Jjtx7hDoogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkzMDE1NTEyN1oXDTI1MTIyOTE2NTEyN1owLzEtMCsGA1UEAxMk M2E0MzJkOWYtOWRjZi00Y2U0LWE4M2EtZTJlMDQ2MjM0MmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNCI5TK8ppysz2crxOEE8++UAul/Kpz4hlWY f+dh6U16WALszY6hwIsRFZYcIjlaExWP0ZNsOPZAE6acmPwi4zZ1yqPXB3Ymtncb IA7gbCE5OjybOp724dSXeJnG9rvKFywqPxvK93f/fjxvALydR1UFFmJ8eZBJfKBG exezzI4vgDZKZPBNf0d19LF3ZLCzIjyH0xGDtaOJ/S0rcznzDabsiTjvWMEn19+x Z7KZx2QDsRBx8s5F4Cekl+Y4F8VPblMoVVEw+30oF2oMYQQw+MTeYMjffx2H2Tl0 cjIZDP8BVss2HZgWAh/DSD3BzYdvIJBqMFhFndTe3+YYE7MICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPh1ZGPPWcwr7rpSHlZj0PLf9/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjY3ZThiMTktZmNhYS0z ZjA2LWEwMWMtYWMxY2Y1ZGYzN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa2QX03gBG3VSv57+nCkeixtRfT+mSswzKyjZWJH8qACkQHZcfBcMxA LuNMnMEkXVGzYQUKbCZN0SaEVcCQBju0QgaoMA8XJBkpcyB9o9iwra3ukmNVc7Y7 IvaGngtdugE+WWAnh3bx0HkqiDHaXev2aA15ZOVOnHt24H2iMvSjo862WhoozT81 CVc9TfEAuV6qwRADXsGU6PEc+0uaK7T2UUrQDjCIvEam+7WN3i7aEQhiePtD/5Ms qhYmM+PBcRkGCnnmDKhj1bPLyMMA8L2vF5tI6IP+xTwnB5FZeeTKrdOoBSzJNYlx AnDbTW6dmDjpDYZI6cvpJtA7pVkURqU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:12:03 2025 by rpki-client