$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c267b46-214b-36c7-9cd9-0a8e2e68bc73.roa File: 1c267b46-214b-36c7-9cd9-0a8e2e68bc73.roa (raw, json) Hash identifier: n28fKaqE+nR30Oq+GG+qTksKkA3N5HyYn6pnKvf1xMc= Subject key identifier: EF:3A:23:D9:33:7B:14:E8:AC:36:68:D1:F4:13:B6:FA:2B:D0:7A:2E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97B02F29C8C6423D5CD3A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c267b46-214b-36c7-9cd9-0a8e2e68bc73.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b0:2f:29:c8:c6:42:3d:5c:d3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=657a3425-e40e-4cfc-98e6-cf597eab3a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:83:aa:5c:1f:2e:22:11:a0:0a:e3:0b:23: 76:88:a6:4b:c5:fa:c5:03:96:f8:18:fb:92:3a:25: 79:24:d9:f1:0d:01:ed:cc:7e:df:d8:97:86:c7:82: ec:3c:4d:c0:73:54:36:cc:2f:11:ca:ff:c2:d9:ff: f9:f2:d7:a2:db:57:69:87:5f:eb:01:9b:d1:b7:73: e1:a8:c3:85:cb:4e:ff:95:ae:d1:6f:dd:12:d3:47: dc:35:9a:0b:b6:26:3b:53:f4:dd:51:fe:eb:62:3e: bf:86:70:c6:2e:05:38:a8:80:b2:21:b1:dc:12:ad: a8:11:b8:96:ce:8d:ad:e2:27:0c:f2:18:38:af:d7: 0a:e3:bb:30:7e:cb:c2:c0:42:cb:0b:d4:dc:b0:c7: fe:c7:21:a9:bd:ea:65:50:67:6f:bd:73:a4:6d:9f: c7:30:10:4a:53:42:0c:c0:1d:4f:3a:ba:e7:5b:41: 66:83:cf:d8:76:72:ee:b6:7d:d2:57:46:a1:4b:70: 78:a1:6e:31:70:d8:06:59:6a:8e:aa:42:4e:3e:e8: 7e:de:dd:18:fe:49:ce:d0:a8:cb:30:29:db:0c:7e: d0:35:ae:b3:be:02:ff:c0:22:c1:62:81:3c:67:5f: 5d:99:a4:73:ce:7a:d7:f6:50:69:7e:7e:39:67:57: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3A:23:D9:33:7B:14:E8:AC:36:68:D1:F4:13:B6:FA:2B:D0:7A:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c267b46-214b-36c7-9cd9-0a8e2e68bc73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:24:da:1d:19:18:2a:b3:ca:0d:2b:75:35:f8:63:28:90:33: 6b:e4:c6:49:08:7e:95:42:63:95:e0:64:f0:d0:9e:0b:0d:13: 3f:9d:79:64:09:42:31:b3:af:c5:90:54:dd:f4:3f:78:a0:cb: 66:03:36:c4:51:18:ce:33:49:eb:3a:6c:6c:7f:1c:1f:7f:66: 17:7d:58:8c:06:49:25:43:ff:52:1c:bf:a0:41:61:11:00:57: 57:91:e5:78:6e:6d:e0:f5:bb:03:1d:ce:ae:32:8b:ca:c8:69: 68:a2:23:72:4e:84:c5:a9:29:05:65:bd:ef:d2:ac:aa:c3:e3: 0d:14:8e:d4:21:ae:03:a2:31:c1:b3:59:5f:61:00:11:69:62: 71:2e:44:0d:09:15:48:b8:17:15:4a:71:98:69:05:96:49:f3: cf:07:95:15:92:f0:3b:a0:9d:27:cd:e2:50:de:1f:4e:25:ab: 05:e9:e4:32:1e:09:85:76:6e:da:ab:22:81:46:b6:bc:26:b5: 1a:a3:48:af:22:11:27:80:d5:d8:96:97:74:d0:3d:a8:6d:50: d1:e9:96:1a:94:82:6e:15:10:71:f3:85:a5:c1:f4:6b:06:6a: ef:82:a7:7d:db:ad:15:8d:e9:21:cc:0f:62:16:13:0f:93:04: 4c:45:49:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7AvKcjGQj1c06AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NjU3YTM0MjUtZTQwZS00Y2ZjLTk4ZTYtY2Y1OTdlYWIzYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlriDqlwfLiIRoArjCyN2iKZLxfrFA5b4GPuS OiV5JNnxDQHtzH7f2JeGx4LsPE3Ac1Q2zC8Ryv/C2f/58tei21dph1/rAZvRt3Ph qMOFy07/la7Rb90S00fcNZoLtiY7U/TdUf7rYj6/hnDGLgU4qICyIbHcEq2oEbiW zo2t4icM8hg4r9cK47swfsvCwELLC9TcsMf+xyGpveplUGdvvXOkbZ/HMBBKU0IM wB1POrrnW0Fmg8/YdnLutn3SV0ahS3B4oW4xcNgGWWqOqkJOPuh+3t0Y/knO0KjL MCnbDH7QNa6zvgL/wCLBYoE8Z19dmaRzznrX9lBpfn45Z1e10QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO86I9kzexTorDZo0fQTtvor0HouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWMyNjdiNDYtMjE0Yi0z NmM3LTljZDktMGE4ZTJlNjhiYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkk2h0ZGCqzyg0rdTX4YyiQM2vkxkkIfpVCY5XgZPDQngsNEz+deWQJ QjGzr8WQVN30P3igy2YDNsRRGM4zSes6bGx/HB9/Zhd9WIwGSSVD/1Icv6BBYREA V1eR5XhubeD1uwMdzq4yi8rIaWiiI3JOhMWpKQVlve/SrKrD4w0UjtQhrgOiMcGz WV9hABFpYnEuRA0JFUi4FxVKcZhpBZZJ888HlRWS8DugnSfN4lDeH04lqwXp5DIe CYV2btqrIoFGtrwmtRqjSK8iESeA1diWl3TQPahtUNHplhqUgm4VEHHzhaXB9GsG au+Cp33brRWN6SHMD2IWEw+TBExFSRM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:56 2025 by rpki-client