$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/15290928-3392-35da-acc4-2e4f3a076edf.roa File: 15290928-3392-35da-acc4-2e4f3a076edf.roa (raw, json) Hash identifier: nbutzHQOQsRjiBGL9TO/Ie3hRMX6fsyKzN4/aJLVOb0= Subject key identifier: A8:F4:EE:7F:10:B7:78:86:C5:5F:3E:D8:FC:69:43:02:A3:AF:60:F6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93283F8867D9F43260F9980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/15290928-3392-35da-acc4-2e4f3a076edf.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:83:f8:86:7d:9f:43:26:0f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=a6ac8274-9e76-40c3-96e4-8accdb8e8fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:ff:f1:c4:bb:4d:4f:bf:55:ca:87:ab:e7: e8:1a:aa:97:2e:3b:4c:dc:d9:80:dd:21:7e:38:aa: 34:f2:ac:9f:a6:f9:d0:ed:20:ac:cd:7c:5f:57:e0: c7:e8:68:d6:aa:64:37:e9:2b:0c:70:0c:60:07:81: fd:d1:9b:38:d9:99:d0:fb:ed:ac:ea:fb:b5:d1:78: 41:62:8c:f0:16:4e:4d:8b:a8:26:e3:49:e8:5f:08: f1:ac:ef:d3:f6:4f:96:fa:1c:a2:ce:52:98:70:97: 4f:f6:4b:f0:3b:0c:19:5f:93:78:4b:57:91:36:95: 5b:e1:59:c9:9f:02:f6:e8:8b:62:d9:5a:b8:ed:b1: 23:0b:47:ae:e2:e2:05:9c:e6:f4:86:1d:df:9f:7b: 3a:bc:8b:02:e2:d3:e0:7c:69:74:b8:18:62:ea:e0: 0f:f8:a0:d8:7a:0f:77:8a:fb:41:9a:3f:31:99:3d: 23:80:eb:89:ae:7f:b8:91:3d:ca:5b:fa:9c:1e:75: 5a:00:76:36:ca:5e:f1:f3:5f:50:d5:a9:6a:9e:90: 1c:ea:07:3b:42:3f:20:a8:cd:ae:8e:3a:b6:79:ec: 2d:8a:62:d9:09:8b:08:7c:fa:6a:8c:51:65:09:8b: ed:0a:4c:d7:d5:cc:eb:88:f9:6c:41:59:d7:34:49: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F4:EE:7F:10:B7:78:86:C5:5F:3E:D8:FC:69:43:02:A3:AF:60:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/15290928-3392-35da-acc4-2e4f3a076edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7f:42:83:78:39:c3:a4:33:f9:e9:ed:9d:df:fe:ce:d0:df: bc:c3:11:c1:84:d2:0f:a7:16:7d:c6:94:99:7c:75:94:1c:5d: 5b:7a:11:d3:32:9a:04:50:9a:c4:c3:c5:69:69:ef:2b:98:cd: e3:d1:d6:81:7e:8d:e0:ed:5a:76:78:ef:77:c1:e5:50:90:81: 82:b0:6b:03:fe:92:db:4b:e5:18:ba:93:3d:67:e5:ab:7d:1f: 1b:65:fc:69:e4:c2:b5:79:ba:43:f8:57:54:a4:fc:32:96:d5: 52:d8:26:80:c1:72:71:50:20:25:b1:20:0c:79:05:9c:8e:55: f9:7c:fb:6b:31:69:f8:6a:2c:78:d4:38:f2:8d:09:8d:5e:7e: 64:73:23:f3:85:8a:2c:ca:aa:89:cb:2a:3a:0e:2d:82:48:64: ce:63:72:c4:36:bc:d2:44:03:a4:5c:44:23:42:02:30:82:e8: 1b:05:4b:97:9a:9a:19:87:b6:dc:a4:62:6c:90:57:a5:49:fc: d3:10:a2:8b:75:08:6b:6b:a2:98:c5:76:40:bd:db:24:d5:b7: 1c:be:6b:9e:bd:ee:16:ea:d8:d0:5b:b2:bb:7c:87:1d:7d:20: e3:80:e6:dc:d5:3b:e2:2d:e5:2d:16:8c:ab:4b:73:78:51:c0: 42:2a:ff:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoP4hn2fQyYPmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YTZhYzgyNzQtOWU3Ni00MGMzLTk2ZTQtOGFjY2RiOGU4ZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv7/8cS7TU+/VcqHq+foGqqXLjtM3NmA3SF+ OKo08qyfpvnQ7SCszXxfV+DH6GjWqmQ36SsMcAxgB4H90Zs42ZnQ++2s6vu10XhB YozwFk5Ni6gm40noXwjxrO/T9k+W+hyizlKYcJdP9kvwOwwZX5N4S1eRNpVb4VnJ nwL26Iti2Vq47bEjC0eu4uIFnOb0hh3fn3s6vIsC4tPgfGl0uBhi6uAP+KDYeg93 ivtBmj8xmT0jgOuJrn+4kT3KW/qcHnVaAHY2yl7x819Q1alqnpAc6gc7Qj8gqM2u jjq2eewtimLZCYsIfPpqjFFlCYvtCkzX1czriPlsQVnXNElJgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj07n8Qt3iGxV8+2PxpQwKjr2D2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTUyOTA5MjgtMzM5Mi0z NWRhLWFjYzQtMmU0ZjNhMDc2ZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEReMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt/QoN4OcOkM/np7Z3f/s7Q37zDEcGE0g+nFn3GlJl8dZQcXVt6EdMy mgRQmsTDxWlp7yuYzePR1oF+jeDtWnZ473fB5VCQgYKwawP+kttL5Ri6kz1n5at9 Hxtl/GnkwrV5ukP4V1Sk/DKW1VLYJoDBcnFQICWxIAx5BZyOVfl8+2sxafhqLHjU OPKNCY1efmRzI/OFiizKqonLKjoOLYJIZM5jcsQ2vNJEA6RcRCNCAjCC6BsFS5ea mhmHttykYmyQV6VJ/NMQoot1CGtropjFdkC92yTVtxy+a5697hbq2NBbsrt8hx19 IOOA5tzVO+It5S0WjKtLc3hRwEIq/6s= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:44 2025 by rpki-client