$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13bdd12c-e525-3c32-b643-17c7933e7532.roa File: 13bdd12c-e525-3c32-b643-17c7933e7532.roa (raw, json) Hash identifier: 7XXFwRhp5SC0/5Ez13YEDFIzWa03/wOvPVDG8PqHCfU= Subject key identifier: 31:CF:7D:ED:E7:3C:AE:E4:53:5F:AF:3D:D0:4A:BC:D1:73:9A:B8:A6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AE8EDD77A51C32863580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13bdd12c-e525-3c32-b643-17c7933e7532.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ae:8e:dd:77:a5:1c:32:86:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=254eb2c9-d00c-4c53-a568-f06ad068dd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3a:33:ed:1d:c1:f5:f8:2b:d1:2f:99:4d:2e: 24:ee:b7:2f:db:56:07:b2:4a:12:f4:af:28:ea:37: 14:f7:0e:50:de:56:2c:ad:3f:10:18:e0:49:35:f6: 49:cb:53:fb:59:3a:8e:93:bd:ce:d6:d6:b4:83:07: 5d:dc:f3:92:2d:b2:97:5f:d2:39:b9:c9:75:f5:e7: b9:23:fa:7b:1e:63:a8:2f:0e:64:c4:38:d6:2a:59: e4:ed:3b:86:b4:5a:30:d9:92:cc:7e:11:55:fa:a7: 98:68:00:fd:22:ea:ca:78:51:04:c6:46:2b:02:ea: 47:2b:a7:49:2b:6b:9f:ba:d9:03:b9:83:f5:66:bb: b2:b7:76:31:11:4e:f0:95:2e:0a:b7:d8:76:4d:ac: fc:23:06:2d:be:ce:ee:f7:9d:06:44:f6:60:6c:97: 65:9e:e1:68:af:0f:e3:50:17:6b:b3:d4:d4:aa:45: 14:ae:a1:a3:69:af:c2:4f:fa:08:83:93:58:f0:a0: e2:65:ac:f3:8c:11:8b:f4:bb:89:09:1b:04:72:34: ff:d8:b6:b4:f0:a2:3e:f1:39:6b:49:fa:48:11:61: c7:17:6f:1c:d5:56:e2:af:e9:86:e9:d7:d2:d1:2c: ba:f9:81:a3:81:d3:87:92:43:11:83:b8:94:c0:b9: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CF:7D:ED:E7:3C:AE:E4:53:5F:AF:3D:D0:4A:BC:D1:73:9A:B8:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13bdd12c-e525-3c32-b643-17c7933e7532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:9b:1b:20:0a:82:15:45:22:63:db:ab:0a:0e:92:a9:3e:51: 83:d7:91:e6:f8:32:46:57:6d:e3:25:ea:fb:8e:d0:0f:ab:18: 9d:44:dc:94:ba:0a:c7:cc:2a:24:b8:c9:b6:58:81:97:22:94: 6c:68:73:41:aa:b6:de:17:23:bc:5f:a6:cc:5b:5f:7a:f0:fd: 59:b6:67:3a:05:d2:bd:49:03:3a:17:49:3f:76:41:89:f3:0c: 76:cd:40:78:7a:28:a5:da:03:73:c0:f2:81:60:e5:68:55:ef: 31:b3:7e:9a:1d:d5:ec:fb:19:41:fd:a7:af:1d:f0:0b:07:53: 45:0c:d0:77:62:7a:3e:7e:c8:18:5f:f7:24:33:77:b2:4e:0c: ce:01:2b:7e:35:4b:e5:65:b8:a1:0a:22:28:12:2d:e4:f2:0a: 38:11:d0:69:e8:8b:e7:be:e8:d8:8b:f2:18:e3:de:3d:67:44: 5c:dd:1e:21:e8:94:6d:db:a3:81:74:a1:5a:1c:23:f6:0f:5a: c5:eb:4c:d0:f1:51:76:1f:49:9b:c9:e0:cc:2d:24:cf:15:88: 6e:f6:26:75:39:96:60:5c:75:30:20:34:d2:f2:c9:84:52:0c: c5:8a:c0:f2:ef:61:e1:eb:e3:16:20:9b:10:9e:2b:ec:33:cd: 48:67:3a:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql66O3XelHDKGNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MjU0ZWIyYzktZDAwYy00YzUzLWE1NjgtZjA2YWQwNjhkZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzoz7R3B9fgr0S+ZTS4k7rcv21YHskoS9K8o 6jcU9w5Q3lYsrT8QGOBJNfZJy1P7WTqOk73O1ta0gwdd3POSLbKXX9I5ucl19ee5 I/p7HmOoLw5kxDjWKlnk7TuGtFow2ZLMfhFV+qeYaAD9IurKeFEExkYrAupHK6dJ K2ufutkDuYP1Zruyt3YxEU7wlS4Kt9h2Taz8IwYtvs7u950GRPZgbJdlnuForw/j UBdrs9TUqkUUrqGjaa/CT/oIg5NY8KDiZazzjBGL9LuJCRsEcjT/2La08KI+8Tlr SfpIEWHHF28c1Vbir+mG6dfS0Sy6+YGjgdOHkkMRg7iUwLnpyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHPfe3nPK7kU1+vPdBKvNFzmrimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTNiZGQxMmMtZTUyNS0z YzMyLWI2NDMtMTdjNzkzM2U3NTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIibGyAKghVFImPbqwoOkqk+UYPXkeb4MkZXbeMl6vuO0A+rGJ1E3JS6 CsfMKiS4ybZYgZcilGxoc0Gqtt4XI7xfpsxbX3rw/Vm2ZzoF0r1JAzoXST92QYnz DHbNQHh6KKXaA3PA8oFg5WhV7zGzfpod1ez7GUH9p68d8AsHU0UM0Hdiej5+yBhf 9yQzd7JODM4BK341S+VluKEKIigSLeTyCjgR0Gnoi+e+6NiL8hjj3j1nRFzdHiHo lG3bo4F0oVocI/YPWsXrTNDxUXYfSZvJ4MwtJM8ViG72JnU5lmBcdTAgNNLyyYRS DMWKwPLvYeHr4xYgmxCeK+wzzUhnOp4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:57 2025 by rpki-client