$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0108a716-38be-31f8-b06e-ed9f9486b106.roa File: 0108a716-38be-31f8-b06e-ed9f9486b106.roa (raw, json) Hash identifier: PlQAqDz2xgEV70rplLjBzmssLzx93eYN5IURyxBUCns= Subject key identifier: 8B:1D:32:C8:E7:C5:30:FB:70:7C:5B:79:F4:95:97:9F:82:BC:E2:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1AEC73D000068AAEF800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0108a716-38be-31f8-b06e-ed9f9486b106.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1a:ec:73:d0:00:06:8a:ae:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=73b2dfe1-5d42-4a91-932c-9e953b75a891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:17:b6:d7:68:14:82:a1:e5:2b:0f:ca:ea:4e: 1f:99:80:e0:c3:c6:0a:53:2a:39:67:84:e0:a5:e4: f7:d3:a4:02:89:d9:22:02:63:a5:9a:77:21:67:d9: 0d:94:e4:f4:09:22:06:1a:7f:be:a3:1b:ad:d7:9f: 86:9a:f0:a0:7f:f7:10:ef:bd:54:c6:31:05:85:20: 5b:6a:02:f3:02:17:21:03:9b:58:d2:2f:af:7f:12: 8d:55:70:05:be:7c:08:ff:ba:d5:f8:60:b8:70:17: c0:71:5c:3a:82:bc:b4:0b:80:85:b9:9c:dc:07:12: 2d:50:3a:a8:14:1f:1c:1e:3e:33:c5:ec:da:80:28: d2:40:73:d3:cf:73:37:86:a9:22:43:0e:a4:4c:93: dd:6e:b7:31:92:44:39:01:8e:80:6b:c1:78:ae:31: a7:45:de:47:fc:85:89:2e:80:8b:73:5a:ed:a7:85: e0:1b:2a:fb:74:30:91:27:9d:f3:8c:3c:b5:7d:ad: 4b:11:12:18:6b:80:b5:79:61:15:f5:e8:00:10:e7: f8:c8:ec:12:7b:d7:25:2e:b2:83:3c:2f:29:af:bf: 25:26:0a:b3:c5:ce:37:af:de:c1:3e:23:e8:d9:1c: c1:57:c1:ae:64:64:af:1b:ac:41:fa:ff:43:e6:f3: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1D:32:C8:E7:C5:30:FB:70:7C:5B:79:F4:95:97:9F:82:BC:E2:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0108a716-38be-31f8-b06e-ed9f9486b106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1c:f5:e1:ce:65:09:e7:d3:d4:92:50:ec:9f:78:37:e6:6f: 19:84:f4:61:5f:d4:4c:40:3e:ca:1a:28:8f:28:97:13:93:4f: 26:a5:7e:51:f2:e3:cf:d0:a1:5f:d9:39:bb:b5:37:1e:8d:0f: 78:01:e6:b9:d6:9b:98:1b:b9:2e:cd:d9:07:82:13:86:d2:b5: e4:10:f2:44:27:40:91:5a:6a:21:a3:49:89:dc:f1:15:e5:2e: 62:16:87:91:0a:1e:c0:c7:be:da:15:17:b8:e1:ad:7e:90:0f: ec:a3:b3:9e:df:12:3f:92:93:b1:47:fd:68:63:99:69:7f:00: fd:58:d8:ef:d7:c3:0c:e7:46:f0:25:86:07:f5:7d:5e:94:dd: e4:e2:db:5c:38:2a:51:95:e6:84:12:76:c7:1d:bc:83:6f:57: 29:37:e6:a2:4d:2b:91:50:d8:78:4c:ee:bf:1c:08:cf:1d:e7: 4f:a0:27:4b:0d:4f:5d:c2:80:1f:0a:98:ad:70:9f:5a:9c:ac: 7d:a0:c1:8a:4e:77:c4:92:0b:df:e7:80:1c:ad:23:04:cc:53: 2a:0c:44:6f:e4:c5:29:8e:42:a7:3a:6d:b8:95:cd:01:de:94: c0:13:bf:fe:d8:3a:aa:f6:30:b4:34:76:93:0c:66:20:a1:d8: 50:36:62:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Rrsc9AABoqu+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NzNiMmRmZTEtNWQ0Mi00YTkxLTkzMmMtOWU5NTNiNzVhODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxe212gUgqHlKw/K6k4fmYDgw8YKUyo5Z4Tg peT306QCidkiAmOlmnchZ9kNlOT0CSIGGn++oxut15+GmvCgf/cQ771UxjEFhSBb agLzAhchA5tY0i+vfxKNVXAFvnwI/7rV+GC4cBfAcVw6gry0C4CFuZzcBxItUDqo FB8cHj4zxezagCjSQHPTz3M3hqkiQw6kTJPdbrcxkkQ5AY6Aa8F4rjGnRd5H/IWJ LoCLc1rtp4XgGyr7dDCRJ53zjDy1fa1LERIYa4C1eWEV9egAEOf4yOwSe9clLrKD PC8pr78lJgqzxc43r97BPiPo2RzBV8GuZGSvG6xB+v9D5vPUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsdMsjnxTD7cHxbefSVl5+CvOL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDEwOGE3MTYtMzhiZS0z MWY4LWIwNmUtZWQ5Zjk0ODZiMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAc9eHOZQnn09SSUOyfeDfmbxmE9GFf1ExAPsoaKI8olxOTTyalflHy 48/QoV/ZObu1Nx6ND3gB5rnWm5gbuS7N2QeCE4bSteQQ8kQnQJFaaiGjSYnc8RXl LmIWh5EKHsDHvtoVF7jhrX6QD+yjs57fEj+Sk7FH/WhjmWl/AP1Y2O/XwwznRvAl hgf1fV6U3eTi21w4KlGV5oQSdscdvINvVyk35qJNK5FQ2HhM7r8cCM8d50+gJ0sN T13CgB8KmK1wn1qcrH2gwYpOd8SSC9/ngBytIwTMUyoMRG/kxSmOQqc6bbiVzQHe lMATv/7YOqr2MLQ0dpMMZiCh2FA2YsQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:46 2025 by rpki-client