$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c244aa4-124d-357d-a624-adcad185d717.roa File: 0c244aa4-124d-357d-a624-adcad185d717.roa (raw, json) Hash identifier: WiiTh3yIeO6Pm/xw+HNt3yWq1KAZ2TLtXK+SEPehHT8= Subject key identifier: A0:1C:5D:AE:36:94:0F:B1:36:84:2F:55:64:20:94:A0:19:B1:85:FC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932826EF07FF684D304E590 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c244aa4-124d-357d-a624-adcad185d717.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:82:6e:f0:7f:f6:84:d3:04:e5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=9d5932c7-2d1c-4a34-9e9c-fa47d3f0da3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:5b:e8:a9:2f:16:d9:37:07:13:21:34:21: 1d:3b:52:07:43:03:20:90:63:3f:0a:51:b7:18:72: b5:9d:8d:0b:43:53:77:5c:b7:38:b8:df:a8:d7:62: 1c:8c:67:fd:08:71:a8:64:5e:17:1f:2e:7b:38:b5: 55:a1:e8:c0:c5:4e:41:01:52:40:d0:54:6c:38:7e: 19:b6:53:5b:63:a5:91:48:26:63:1b:bf:c4:f4:c9: 48:c5:c3:ed:44:05:d3:0e:bd:30:88:3a:3d:bb:da: ef:0d:c3:f8:c3:7a:ec:13:3e:e7:92:37:1a:0f:b8: d7:84:e7:58:fe:b9:56:e9:7f:7b:17:53:56:34:45: 6b:a4:db:5e:49:21:4f:39:6c:b1:e8:2e:2e:3d:ed: f5:7c:4e:9d:04:f0:cb:02:0e:7c:f9:60:47:f8:5b: b2:a9:b3:3a:64:48:18:e9:85:5f:bf:9d:83:bc:f1: 20:0b:65:f8:e1:a8:57:ad:f3:50:15:02:79:ba:ef: b7:86:fa:34:fd:32:fd:6a:6f:04:4c:ef:f9:3b:63: 97:b3:39:31:9d:a7:d9:9d:84:1e:55:4e:fd:bd:b9: 84:7c:f1:a4:65:d3:02:53:8d:bf:6f:79:6e:f6:f2: 2b:51:2f:05:51:0b:80:31:b4:17:fe:5e:94:2c:8d: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1C:5D:AE:36:94:0F:B1:36:84:2F:55:64:20:94:A0:19:B1:85:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c244aa4-124d-357d-a624-adcad185d717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:80:a1:2f:b5:55:c4:a3:4a:a3:ec:7b:7e:90:01:5a:c2:8e: ea:04:2e:ad:e9:01:04:fa:39:9a:2b:26:2a:e9:04:6d:e2:75: c0:6e:9a:c3:93:04:33:5f:95:bf:57:fb:dc:ec:34:90:44:73: 78:d8:fd:2c:ad:59:99:5e:fb:e1:3d:04:5f:0b:45:0c:09:f7: 2f:3d:06:d9:36:eb:00:ac:bd:15:05:65:c0:d6:ae:b3:4b:63: 0a:93:95:c9:49:18:70:e3:7e:7b:82:aa:4c:ea:ee:99:bb:dc: 7c:52:27:1e:85:e1:9c:d7:44:8f:8d:a1:46:8f:92:e0:b7:ed: 21:8d:2d:7c:e9:ac:b8:6d:4f:18:94:62:66:25:cd:b2:81:f3: 79:70:66:89:12:cf:fe:65:1a:82:d1:cf:83:55:f9:39:31:db: e9:ea:cc:f5:db:ae:3b:c7:e3:bb:b1:31:35:b1:2f:58:2b:51: 5c:f6:88:81:c4:40:a0:32:65:46:d1:07:e5:29:66:f2:41:c8: 3a:61:62:33:b7:d5:05:67:5e:a5:2b:a5:e8:5c:5f:8b:e7:69: d3:3b:60:99:f2:f4:91:ae:d4:cf:1c:a9:8a:38:a2:c8:ce:04: 7e:8f:64:13:78:e6:68:4a:6f:a6:d6:8a:6b:57:af:1c:1a:5a: f6:dd:ba:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoJu8H/2hNME5ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OWQ1OTMyYzctMmQxYy00YTM0LTllOWMtZmE0N2QzZjBkYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxpb6KkvFtk3BxMhNCEdO1IHQwMgkGM/ClG3 GHK1nY0LQ1N3XLc4uN+o12IcjGf9CHGoZF4XHy57OLVVoejAxU5BAVJA0FRsOH4Z tlNbY6WRSCZjG7/E9MlIxcPtRAXTDr0wiDo9u9rvDcP4w3rsEz7nkjcaD7jXhOdY /rlW6X97F1NWNEVrpNteSSFPOWyx6C4uPe31fE6dBPDLAg58+WBH+FuyqbM6ZEgY 6YVfv52DvPEgC2X44ahXrfNQFQJ5uu+3hvo0/TL9am8ETO/5O2OXszkxnafZnYQe VU79vbmEfPGkZdMCU42/b3lu9vIrUS8FUQuAMbQX/l6ULI2EtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAcXa42lA+xNoQvVWQglKAZsYX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGMyNDRhYTQtMTI0ZC0z NTdkLWE2MjQtYWRjYWQxODVkNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOAoS+1VcSjSqPse36QAVrCjuoELq3pAQT6OZorJirpBG3idcBumsOT BDNflb9X+9zsNJBEc3jY/SytWZle++E9BF8LRQwJ9y89Btk26wCsvRUFZcDWrrNL YwqTlclJGHDjfnuCqkzq7pm73HxSJx6F4ZzXRI+NoUaPkuC37SGNLXzprLhtTxiU YmYlzbKB83lwZokSz/5lGoLRz4NV+Tkx2+nqzPXbrjvH47uxMTWxL1grUVz2iIHE QKAyZUbRB+UpZvJByDphYjO31QVnXqUrpehcX4vnadM7YJny9JGu1M8cqYo4osjO BH6PZBN45mhKb6bWimtXrxwaWvbdukE= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:21 2025 by rpki-client