$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/130e47a3-e029-3940-996d-4354cda2466e.roa File: 130e47a3-e029-3940-996d-4354cda2466e.roa (raw, json) Hash identifier: JMkiEkHeyuaps/Hkho0u//0Y8CpPEUYe/Sxz+TZo3kw= Subject key identifier: C3:CC:47:59:88:25:A9:05:53:55:C6:AD:52:A2:22:EA:1C:67:73:6F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCF9BC8DCB28B7071E5B70 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/130e47a3-e029-3940-996d-4354cda2466e.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:f9:bc:8d:cb:28:b7:07:1e:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=77753b57-8ee5-47d4-804e-2cbe679a5131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:39:4a:a0:e1:9a:07:ba:fa:ca:ee:d8:6f: ed:7c:42:74:14:b8:7e:31:98:f4:6b:b4:63:6c:9b: 47:6c:a0:d5:67:5d:21:10:0f:52:d3:be:c3:97:d0: fc:e1:7a:cf:92:f2:23:6d:b5:e1:13:5b:93:f3:98: 29:d1:c0:54:5e:dc:f8:b2:ad:ed:13:06:98:fd:0b: fc:b4:a9:aa:55:21:62:cc:94:9b:9b:84:f1:2a:ed: 05:cb:bf:a9:65:e5:43:2d:5a:17:5b:e8:04:ae:42: ed:56:e8:12:9e:e8:ce:7b:77:2a:94:09:c1:71:15: 8d:d8:e4:7d:75:d6:d7:62:2e:11:ec:99:7a:24:fa: c0:51:9f:8f:22:16:77:b1:3c:52:5a:f9:13:40:d3: 68:38:75:67:7a:b1:05:37:2d:f6:10:1f:6e:63:4b: 9a:ed:96:f1:51:c6:82:29:59:bd:70:43:7f:ba:79: 75:f9:c2:58:9b:63:41:b0:6f:4d:d8:05:c2:b1:4a: 4c:ea:c6:fd:f4:5d:e1:53:32:0a:95:71:54:12:97: 20:80:43:b0:a7:54:4e:62:bb:8c:3c:f2:5e:31:b9: fb:c7:81:d6:1e:b7:ac:40:3c:59:70:94:f8:bc:13: b4:c9:2d:4b:23:d0:34:6a:4d:ad:e0:4c:05:ae:c1: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CC:47:59:88:25:A9:05:53:55:C6:AD:52:A2:22:EA:1C:67:73:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/130e47a3-e029-3940-996d-4354cda2466e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ee:e7:8c:65:ff:a6:70:12:1f:86:d6:56:55:4c:57:cd:60: 7f:b6:93:18:38:d3:e6:a8:43:02:b0:69:2f:d4:32:11:8e:f5: 7a:9b:87:12:6c:9f:5b:aa:a3:50:33:f0:70:5e:fb:99:e9:cf: 3f:64:44:18:44:f5:33:a3:ba:50:d8:8c:fe:eb:43:93:ed:9d: 74:26:a2:a8:c5:03:55:82:a4:52:32:85:c5:7b:3f:64:0e:5b: 30:c7:73:62:c0:c0:f9:b0:bb:94:35:dc:5c:64:f5:c3:7b:e8: 0a:ff:90:3c:be:f9:95:c0:20:f7:b7:90:02:8e:63:98:50:d8: a5:c5:0f:d2:00:b9:21:fe:c1:c5:da:7b:79:09:4d:f2:fd:a8: 4a:32:2d:15:9a:3b:12:f4:82:9c:0e:6a:22:43:f6:fb:b6:4a: 37:b0:b4:17:18:e2:8c:50:3b:9e:ed:95:16:1b:c4:38:58:8a: 59:9f:b9:98:58:cb:a3:e5:28:7f:58:23:de:14:27:5b:91:24: 3f:67:dd:4e:7f:0e:6a:f2:97:59:5b:fd:74:3b:e8:71:86:19: cd:34:5d:d5:7f:d7:68:07:6c:84:06:98:a6:83:cb:a9:25:8f: 94:77:40:68:75:c5:13:72:d7:93:de:73:be:e0:cc:a4:9c:5c: ab:61:34:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPm8jcsotwceW3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk Nzc3NTNiNTctOGVlNS00N2Q0LTgwNGUtMmNiZTY3OWE1MTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4U5SqDhmge6+sru2G/tfEJ0FLh+MZj0a7Rj bJtHbKDVZ10hEA9S077Dl9D84XrPkvIjbbXhE1uT85gp0cBUXtz4sq3tEwaY/Qv8 tKmqVSFizJSbm4TxKu0Fy7+pZeVDLVoXW+gErkLtVugSnujOe3cqlAnBcRWN2OR9 ddbXYi4R7Jl6JPrAUZ+PIhZ3sTxSWvkTQNNoOHVnerEFNy32EB9uY0ua7ZbxUcaC KVm9cEN/unl1+cJYm2NBsG9N2AXCsUpM6sb99F3hUzIKlXFUEpcggEOwp1ROYruM PPJeMbn7x4HWHresQDxZcJT4vBO0yS1LI9A0ak2t4EwFrsFJYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPMR1mIJakFU1XGrVKiIuocZ3NvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTMwZTQ3YTMtZTAyOS0z OTQwLTk5NmQtNDM1NGNkYTI0NjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTu54xl/6ZwEh+G1lZVTFfNYH+2kxg40+aoQwKwaS/UMhGO9XqbhxJs n1uqo1Az8HBe+5npzz9kRBhE9TOjulDYjP7rQ5PtnXQmoqjFA1WCpFIyhcV7P2QO WzDHc2LAwPmwu5Q13Fxk9cN76Ar/kDy++ZXAIPe3kAKOY5hQ2KXFD9IAuSH+wcXa e3kJTfL9qEoyLRWaOxL0gpwOaiJD9vu2SjewtBcY4oxQO57tlRYbxDhYilmfuZhY y6PlKH9YI94UJ1uRJD9n3U5/Dmryl1lb/XQ76HGGGc00XdV/12gHbIQGmKaDy6kl j5R3QGh1xRNy15Pec77gzKScXKthNO4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:00 2025 by rpki-client