$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa File: 0c88f35f-6e17-3c5e-b570-21d26061ab90.roa (raw, json) Hash identifier: Iy9svzh9SieWsvfHYR8BclByuYERTA7e/r3V+jMFXx4= Subject key identifier: 1B:C8:2C:7A:2D:8B:5E:C2:EB:54:9E:49:26:BF:DD:ED:F3:F1:EC:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD141F2B312F2756F4B780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:14:1f:2b:31:2f:27:56:f4:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=a7b964c2-c603-4557-85de-ac4b9b4df3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:10:d9:1c:9f:7c:25:20:a2:c4:2c:7d:72: fb:78:7d:ac:f7:ee:ab:90:c2:4a:07:f6:be:70:af: 42:19:bf:d6:41:5f:1e:54:ff:d5:c3:4c:0d:1b:16: 2e:a2:4b:92:2c:b7:66:b1:48:c7:fb:e4:6f:11:76: 31:a8:85:c0:f6:5d:a0:3f:20:8b:70:f2:17:a4:cd: c3:4e:35:ee:cd:61:91:9d:05:37:cb:7d:85:dc:4c: 60:ea:ad:cf:d5:36:76:4c:45:31:bc:aa:4d:7f:82: 01:b8:2c:84:b7:a1:38:1f:d0:61:26:ac:c0:4a:52: 4c:b6:27:60:e9:8a:89:47:2d:cb:0e:f9:93:42:71: f4:b6:c4:2c:61:e9:1a:91:f4:35:12:88:8d:6f:f5: 67:db:46:0b:42:cc:96:bc:4e:d3:09:5a:51:05:0c: 5a:ea:b8:f3:59:53:e0:dd:07:e1:c3:2c:ca:15:35: ca:d3:b3:80:d4:a2:26:4e:31:89:05:bc:d1:b5:9a: 5b:14:b2:e5:c0:ab:31:ea:d8:d9:b7:fc:00:09:15: b5:a9:b3:bc:af:82:9c:a9:23:37:ee:45:d8:4e:cb: 96:c7:fe:2f:27:76:86:0c:19:89:95:5e:2a:f8:ef: 90:27:12:e5:10:a4:a5:f9:2a:f6:34:ee:21:7f:26: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C8:2C:7A:2D:8B:5E:C2:EB:54:9E:49:26:BF:DD:ED:F3:F1:EC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:95:8b:be:88:b9:d6:f6:c6:36:e1:25:4b:0b:d2:4e:35:a9: d8:84:1b:35:c6:aa:f0:ad:bb:f9:7c:22:27:74:1a:ee:6a:a9: c8:6e:e2:5d:a8:38:40:7f:b3:c5:cd:6f:05:bc:4b:06:99:ed: bb:d5:cf:9a:bf:c9:2d:88:af:a3:eb:cd:bf:b3:52:99:db:b6: 2f:c6:51:c9:8b:d8:32:d6:b3:69:3c:45:cf:e5:4b:20:2b:f5: 1d:84:09:02:3e:09:d6:02:9f:47:c0:be:1b:d5:64:23:25:1d: f5:98:ca:18:99:99:ee:21:c6:3a:d4:87:d8:dc:10:e7:cb:4c: 2d:98:6f:35:b6:72:41:32:f4:db:a8:09:c6:de:32:09:28:31: ae:c0:b8:0c:87:e4:a8:8d:b2:a6:c8:bf:be:36:27:61:f5:20: f9:72:f4:bf:7a:12:f8:06:57:a7:54:2b:d6:92:16:da:ed:a1: b3:83:fe:d3:14:8e:6a:15:79:b8:ae:5d:c1:7b:c7:f9:ba:81: d8:56:27:10:a6:bb:80:a8:e5:95:8e:b2:73:66:69:9a:8c:d6: 40:26:49:b2:2f:03:91:9e:95:91:8c:46:ff:ed:6d:18:d0:98: 23:ef:fb:eb:b0:43:b9:95:f6:fc:09:0e:95:fe:1d:4d:27:ae: 43:c0:11:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRQfKzEvJ1b0t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YTdiOTY0YzItYzYwMy00NTU3LTg1ZGUtYWM0YjliNGRmM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7oQ2RyffCUgosQsfXL7eH2s9+6rkMJKB/a+ cK9CGb/WQV8eVP/Vw0wNGxYuokuSLLdmsUjH++RvEXYxqIXA9l2gPyCLcPIXpM3D TjXuzWGRnQU3y32F3Exg6q3P1TZ2TEUxvKpNf4IBuCyEt6E4H9BhJqzASlJMtidg 6YqJRy3LDvmTQnH0tsQsYekakfQ1EoiNb/Vn20YLQsyWvE7TCVpRBQxa6rjzWVPg 3QfhwyzKFTXK07OA1KImTjGJBbzRtZpbFLLlwKsx6tjZt/wACRW1qbO8r4KcqSM3 7kXYTsuWx/4vJ3aGDBmJlV4q+O+QJxLlEKSl+Sr2NO4hfyZvswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvILHoti17C61SeSSa/3e3z8eygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGM4OGYzNWYtNmUxNy0z YzVlLWI1NzAtMjFkMjYwNjFhYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiVi76Iudb2xjbhJUsL0k41qdiEGzXGqvCtu/l8Iid0Gu5qqchu4l2o OEB/s8XNbwW8SwaZ7bvVz5q/yS2Ir6Przb+zUpnbti/GUcmL2DLWs2k8Rc/lSyAr 9R2ECQI+CdYCn0fAvhvVZCMlHfWYyhiZme4hxjrUh9jcEOfLTC2YbzW2ckEy9Nuo CcbeMgkoMa7AuAyH5KiNsqbIv742J2H1IPly9L96EvgGV6dUK9aSFtrtobOD/tMU jmoVebiuXcF7x/m6gdhWJxCmu4Co5ZWOsnNmaZqM1kAmSbIvA5GelZGMRv/tbRjQ mCPv++uwQ7mV9vwJDpX+HU0nrkPAEcI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:37 2025 by rpki-client