$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa File: 0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa (raw, json) Hash identifier: Y89pKVvZU6jTl2+Hs/SijLyASdlpQ2REMX4N5bHKbAo= Subject key identifier: 27:A5:D4:AA:55:E6:22:19:D9:77:F1:7E:ED:7D:8E:02:C5:72:BE:F4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AC38EC72E4837F1A1180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ac:38:ec:72:e4:83:7f:1a:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=c8949190-8953-47f6-8989-613f924d3f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d3:61:ef:ff:c3:ce:80:31:69:ba:1c:a0:7c: dd:9a:3b:16:28:68:fe:10:35:7a:d2:ac:87:18:60: 04:87:2f:e2:14:51:56:18:98:33:c2:e5:d0:7d:6c: 40:d1:87:5f:a0:82:a7:14:e0:6e:26:a9:71:96:b6: b7:c2:d7:ea:19:c0:fe:d1:f6:7f:fd:2b:02:c2:a9: 96:03:1b:c5:66:51:a1:38:a8:80:b5:fb:1c:d6:4d: ee:99:80:94:c2:a0:38:9c:05:91:27:1e:e8:6f:37: 8d:f6:83:b5:e1:88:ac:d5:90:88:a0:93:f0:7b:b9: 14:fa:e5:6b:d9:71:a3:79:bf:eb:cd:09:21:a2:4e: 70:6d:70:47:5f:40:18:f6:12:1d:64:52:ce:a9:af: e7:ad:93:44:79:95:49:8f:94:e7:51:90:59:67:56: eb:38:ee:22:c8:0a:19:9e:e4:d6:68:89:1e:ac:fa: f4:37:6a:62:31:3e:75:45:0b:d2:86:0c:d2:50:7c: 54:dc:0b:23:52:78:36:91:4d:df:5f:6b:9c:44:18: df:59:e1:d4:85:0d:9d:e3:b5:35:40:d3:91:4c:b0: 07:96:25:09:19:b2:95:47:0f:75:49:4f:9d:37:d2: 9a:9b:cc:b6:31:03:50:86:fb:67:49:99:2f:91:89: c2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A5:D4:AA:55:E6:22:19:D9:77:F1:7E:ED:7D:8E:02:C5:72:BE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:fa:47:d8:60:37:b2:73:b5:54:91:28:ca:70:f9:3a:8a:c6: e2:25:22:d9:84:59:45:15:79:01:7d:04:2f:b5:1f:4d:de:f0: 47:f4:94:52:74:cb:5f:09:35:48:31:57:00:6e:2d:3b:1f:4d: b9:39:01:12:35:b6:55:8b:99:69:d6:25:9d:69:cd:b7:a5:2b: 40:8f:7d:71:5a:b2:b1:ce:31:4a:94:17:be:6d:02:92:0a:a3: cf:21:f2:b8:5e:fe:8e:a4:a2:49:28:b4:ae:02:28:7a:19:f7: c8:cb:e5:d3:4f:81:a7:8d:7b:fe:4b:ba:6f:e5:42:26:ec:55: 8d:45:2b:47:5c:3a:22:ff:04:1f:a5:bd:d2:5e:90:40:34:ea: 1f:d8:7c:b1:e1:1c:5b:35:29:e4:eb:de:b9:26:14:ab:0d:ed: d6:6a:e0:eb:9d:1f:c7:44:07:1e:55:66:1b:27:cb:76:4b:a9: 1d:7e:c1:03:76:2e:e5:7a:4d:48:23:b4:c4:28:16:7c:e2:d5: 0c:f3:40:5e:03:0c:65:9e:b9:f0:91:f8:a7:04:e9:3c:4a:a0: 9c:ae:b4:40:7c:0c:96:2d:34:41:28:0f:46:15:aa:5f:84:e3: 2b:58:d6:ee:08:2e:44:5c:74:0d:df:15:b4:51:e0:73:83:75: cb:d2:96:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6w47HLkg38aEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk Yzg5NDkxOTAtODk1My00N2Y2LTg5ODktNjEzZjkyNGQzZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNNh7//DzoAxabocoHzdmjsWKGj+EDV60qyH GGAEhy/iFFFWGJgzwuXQfWxA0YdfoIKnFOBuJqlxlra3wtfqGcD+0fZ//SsCwqmW AxvFZlGhOKiAtfsc1k3umYCUwqA4nAWRJx7obzeN9oO14Yis1ZCIoJPwe7kU+uVr 2XGjeb/rzQkhok5wbXBHX0AY9hIdZFLOqa/nrZNEeZVJj5TnUZBZZ1brOO4iyAoZ nuTWaIkerPr0N2piMT51RQvShgzSUHxU3AsjUng2kU3fX2ucRBjfWeHUhQ2d47U1 QNORTLAHliUJGbKVRw91SU+dN9Kam8y2MQNQhvtnSZkvkYnCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCel1KpV5iIZ2Xfxfu19jgLFcr70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGQ4MDdjYmItYTQyYi0z YzNkLWJkNWQtODhhMGVjNGM4MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALb6R9hgN7JztVSRKMpw+TqKxuIlItmEWUUVeQF9BC+1H03e8Ef0lFJ0 y18JNUgxVwBuLTsfTbk5ARI1tlWLmWnWJZ1pzbelK0CPfXFasrHOMUqUF75tApIK o88h8rhe/o6kokkotK4CKHoZ98jL5dNPgaeNe/5Lum/lQibsVY1FK0dcOiL/BB+l vdJekEA06h/YfLHhHFs1KeTr3rkmFKsN7dZq4OudH8dEBx5VZhsny3ZLqR1+wQN2 LuV6TUgjtMQoFnzi1QzzQF4DDGWeufCR+KcE6TxKoJyutEB8DJYtNEEoD0YVql+E 4ytY1u4ILkRcdA3fFbRR4HODdcvSlp0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:31 2025 by rpki-client