$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa File: 0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa (raw, json) Hash identifier: dgqDqZSkLPfEfgrpQvl7UNtG/DF87ObKzIYJDHlOfX4= Subject key identifier: 9D:51:2F:FB:D0:BA:E2:5E:F1:7F:25:C0:A4:4F:7C:0F:A3:B4:8D:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1C4DE2F2A5B6E58A1B88 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1c:4d:e2:f2:a5:b6:e5:8a:1b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=e4d11719-d3ff-4fdd-a93c-28d961e22e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:53:ba:bf:c2:64:66:63:c4:ee:4b:d3:77: 55:cc:b4:bc:cc:9e:c9:82:63:ce:98:72:d4:45:a7: 18:99:ee:f2:23:98:e2:64:db:27:fb:d7:d5:8f:06: 4e:08:30:2f:62:8a:45:c0:fc:ab:0c:6c:b7:f8:e7: fa:96:4b:cb:ea:93:25:49:07:e2:30:a3:56:7f:a3: 0a:d4:fa:29:ad:e1:ab:cb:e6:f5:2e:33:fc:27:d4: 3c:5f:ee:cc:a5:48:3d:99:8b:f8:df:5e:53:cc:3f: af:8c:bd:9e:8b:86:b1:d2:f8:0a:f5:d1:18:8c:0b: 2c:99:78:8b:80:83:26:28:85:b6:4c:60:b0:6d:c0: 49:a5:1c:78:a1:fe:78:ed:66:7e:70:ac:7b:9d:5a: 85:e1:05:28:21:84:72:95:43:6c:48:b2:57:43:cd: ba:11:2f:21:f3:ae:66:6c:83:05:98:d6:d9:6f:20: b3:fa:a3:a0:50:e2:58:49:d1:1d:ea:19:d1:c5:28: 31:79:03:0a:3f:0a:13:2c:c8:15:ec:46:33:fc:8e: 6b:72:82:24:f6:ed:bd:e4:1d:9b:1d:c6:77:82:5e: 44:cd:2f:19:a3:55:35:b5:b5:53:c3:26:22:1a:fe: 8b:54:02:c1:ce:73:48:97:90:4f:a7:52:7a:dd:b3: aa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:51:2F:FB:D0:BA:E2:5E:F1:7F:25:C0:A4:4F:7C:0F:A3:B4:8D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:00:bf:43:d9:b5:f6:ce:30:54:20:df:b3:c7:6d:79:cc:11: fe:ba:88:af:80:72:7a:f7:29:d9:13:50:ad:77:db:27:ab:0a: 5e:98:b7:7c:dd:fd:64:86:c6:05:3e:fa:ce:15:3a:ed:49:e4: 0a:33:66:ee:ab:b8:7f:b6:3f:57:66:04:b1:8f:5a:ff:98:b4: 29:fd:c5:4e:48:fb:13:64:ac:59:a8:93:53:b7:16:c6:0d:46: 2f:aa:95:62:f7:99:bb:9e:e9:5a:09:36:c9:69:48:7a:3d:02: c4:25:1d:7f:6e:ad:78:a0:52:20:79:cf:97:c6:6d:27:1d:f5: bb:99:bc:3d:ec:da:db:66:7f:0a:ff:87:b3:be:da:2b:ce:42: 65:27:a3:7d:e4:30:ab:35:79:2b:46:52:62:87:dd:74:b6:d3: 93:02:ab:f3:be:98:94:12:09:3d:34:ee:0b:f5:77:ba:3c:76: 33:dc:e9:34:b1:82:5b:c9:9a:77:c1:e4:7a:19:98:f8:45:78: 3e:49:0a:a3:36:2e:cc:49:3b:a7:89:e7:6a:5a:27:96:59:ea: 2c:fb:60:d2:67:2f:e9:64:9e:c3:12:f6:fd:7b:02:95:95:04: c9:c4:78:2e:9c:32:de:e0:b4:f5:99:50:65:37:95:21:fe:59: fd:26:97:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RxN4vKltuWKG4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZTRkMTE3MTktZDNmZi00ZmRkLWE5M2MtMjhkOTYxZTIyZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufBTur/CZGZjxO5L03dVzLS8zJ7JgmPOmHLU RacYme7yI5jiZNsn+9fVjwZOCDAvYopFwPyrDGy3+Of6lkvL6pMlSQfiMKNWf6MK 1PopreGry+b1LjP8J9Q8X+7MpUg9mYv4315TzD+vjL2ei4ax0vgK9dEYjAssmXiL gIMmKIW2TGCwbcBJpRx4of547WZ+cKx7nVqF4QUoIYRylUNsSLJXQ826ES8h865m bIMFmNbZbyCz+qOgUOJYSdEd6hnRxSgxeQMKPwoTLMgV7EYz/I5rcoIk9u295B2b HcZ3gl5EzS8Zo1U1tbVTwyYiGv6LVALBznNIl5BPp1J63bOq/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1RL/vQuuJe8X8lwKRPfA+jtI0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDg2M2RmYTMtZDdjMC0z YWJmLTkyOTEtMDdiZjI3ZTk0NzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIAv0PZtfbOMFQg37PHbXnMEf66iK+Acnr3KdkTUK132yerCl6Yt3zd /WSGxgU++s4VOu1J5AozZu6ruH+2P1dmBLGPWv+YtCn9xU5I+xNkrFmok1O3FsYN Ri+qlWL3mbue6VoJNslpSHo9AsQlHX9urXigUiB5z5fGbScd9buZvD3s2ttmfwr/ h7O+2ivOQmUno33kMKs1eStGUmKH3XS205MCq/O+mJQSCT007gv1d7o8djPc6TSx glvJmnfB5HoZmPhFeD5JCqM2LsxJO6eJ52paJ5ZZ6iz7YNJnL+lknsMS9v17ApWV BMnEeC6cMt7gtPWZUGU3lSH+Wf0ml6I= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:38 2025 by rpki-client