$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0293a194-e053-3a22-871e-1146e6444935.roa File: 0293a194-e053-3a22-871e-1146e6444935.roa (raw, json) Hash identifier: nxUsJHOggmUmL/1inJ5a4YwXRFy8FR2u1vEEpRUbJp0= Subject key identifier: 3E:F9:86:C6:28:EB:AA:01:B5:E4:03:71:CB:94:95:DF:9A:D2:86:06 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93283D6E67F3404E5511200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0293a194-e053-3a22-871e-1146e6444935.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:83:d6:e6:7f:34:04:e5:51:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=fa5ccdb2-c4b2-4dde-b63c-9bdad912576a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:70:b1:af:72:aa:e3:b0:1b:78:9f:d7:0d: 5d:65:da:f7:b2:e7:a8:01:4a:70:e0:83:02:32:fc: 9b:e7:20:df:a5:99:51:0d:bc:56:06:3f:93:b1:9f: 06:ac:ff:79:fc:3f:3c:83:26:ff:48:a2:09:84:74: e4:f1:61:e9:89:39:04:9d:51:cb:8b:df:11:62:5b: e2:ca:a0:e0:98:81:ef:4b:6e:ab:6d:75:70:d3:09: 1c:5d:88:58:ba:90:f7:ab:2c:92:e9:99:32:b2:5b: 0b:da:50:2f:6d:84:8d:a7:6d:c6:3a:f4:bd:92:34: a7:c2:a1:0e:61:d3:3a:17:04:83:e5:97:2d:2b:7a: 55:14:1f:d0:31:e9:4c:08:8d:2e:88:a6:08:b4:ee: 2d:1d:39:fa:2d:8f:b1:ac:9e:e9:44:4b:40:b6:be: 31:76:63:06:d2:c0:00:40:70:dc:3b:d1:1a:d1:d0: 73:80:48:78:6c:b2:02:75:8d:c9:e0:c7:cc:1b:3b: d6:c6:03:2a:7c:fc:6b:27:e8:90:2d:85:f7:de:3a: ba:22:8b:2a:f9:30:e8:2c:84:fb:aa:e6:22:93:eb: 64:cf:79:96:73:37:04:9f:92:a3:c6:9e:d0:2a:eb: 90:62:b1:d9:d8:08:cb:c1:5d:ef:5c:f7:1a:a1:02: d7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F9:86:C6:28:EB:AA:01:B5:E4:03:71:CB:94:95:DF:9A:D2:86:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0293a194-e053-3a22-871e-1146e6444935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:80:d9:2e:76:a3:59:66:5e:57:9b:f7:10:54:db:cc:3d:ef: 36:6e:f8:fc:6a:f0:4b:ab:78:0b:a8:09:86:4a:a8:57:42:1c: 7e:a7:79:46:1c:cb:44:a6:dc:2e:64:df:17:2f:3a:67:f8:38: 51:e7:ad:e2:3b:26:7d:03:58:b4:33:60:a4:ee:75:a7:54:8e: a1:52:4a:1a:de:db:9f:51:23:ad:8b:51:63:4a:df:54:c5:6d: 67:1f:3f:8a:a9:9e:c8:64:a1:ea:5c:97:84:ab:bb:99:53:ff: 26:c9:09:05:eb:66:83:4e:49:3c:12:7c:84:fa:3c:80:19:21: 81:80:96:bd:6e:7a:89:b1:ba:3c:ab:2f:51:4a:4c:06:5a:e5: ed:a0:fc:7c:ec:ce:e6:9b:74:63:b6:72:25:c0:36:40:e5:54: 6b:5b:33:ac:7b:6c:24:59:23:19:fd:a6:d1:0b:33:9a:ad:59: 2b:b2:85:b2:9b:6d:dc:96:aa:f1:2a:12:91:8e:21:c8:b6:91: 3e:7b:08:09:6d:3f:7d:0c:9d:8d:14:76:2d:bd:b3:c8:57:a2: cd:ba:f2:ed:16:65:62:57:30:ff:97:a4:cc:63:d4:8a:9c:51: 1e:ee:72:24:68:7b:d6:fb:f3:97:d6:0b:b2:1e:f1:09:f7:3c: 42:fc:3c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoPW5n80BOVREgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZmE1Y2NkYjItYzRiMi00ZGRlLWI2M2MtOWJkYWQ5MTI1NzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTpwsa9yquOwG3if1w1dZdr3sueoAUpw4IMC Mvyb5yDfpZlRDbxWBj+TsZ8GrP95/D88gyb/SKIJhHTk8WHpiTkEnVHLi98RYlvi yqDgmIHvS26rbXVw0wkcXYhYupD3qyyS6ZkyslsL2lAvbYSNp23GOvS9kjSnwqEO YdM6FwSD5ZctK3pVFB/QMelMCI0uiKYItO4tHTn6LY+xrJ7pREtAtr4xdmMG0sAA QHDcO9Ea0dBzgEh4bLICdY3J4MfMGzvWxgMqfPxrJ+iQLYX33jq6Iosq+TDoLIT7 quYik+tkz3mWczcEn5Kjxp7QKuuQYrHZ2AjLwV3vXPcaoQLXBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD75hsYo66oBteQDccuUld+a0oYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDI5M2ExOTQtZTA1My0z YTIyLTg3MWUtMTE0NmU2NDQ0OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmA2S52o1lmXleb9xBU28w97zZu+Pxq8EureAuoCYZKqFdCHH6neUYc y0Sm3C5k3xcvOmf4OFHnreI7Jn0DWLQzYKTudadUjqFSShre259RI62LUWNK31TF bWcfP4qpnshkoepcl4Sru5lT/ybJCQXrZoNOSTwSfIT6PIAZIYGAlr1ueomxujyr L1FKTAZa5e2g/HzszuabdGO2ciXANkDlVGtbM6x7bCRZIxn9ptELM5qtWSuyhbKb bdyWqvEqEpGOIci2kT57CAltP30MnY0Udi29s8hXos268u0WZWJXMP+XpMxj1Iqc UR7uciRoe9b785fWC7Ie8Qn3PEL8PO8= -----END CERTIFICATE-----Generated at Sat Nov 1 15:17:47 2025 by rpki-client