$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f179579-663e-3891-9e2c-531b67f9b20c.roa File: 1f179579-663e-3891-9e2c-531b67f9b20c.roa (raw, json) Hash identifier: tRq3CqYKYjRtcgzyF+rYFTkdrY7YVx9fDpkgsEDTPrQ= Subject key identifier: A5:DD:0C:7C:6B:FF:D3:CC:ED:4B:AA:98:35:8E:D2:8D:20:EE:8B:14 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AC4BDE7CE031746548E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f179579-663e-3891-9e2c-531b67f9b20c.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ac:4b:de:7c:e0:31:74:65:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=9c1639d4-ab1e-4772-9235-9675683fc21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:de:b4:98:61:e6:cc:3a:82:bf:ee:77:55:42: 37:cf:ec:22:66:f1:03:12:f0:a5:17:4d:1d:fe:df: 9f:3a:5a:f4:f4:19:d2:93:24:c4:f2:e8:e6:9a:dd: 0d:de:76:c7:c6:d1:41:2f:fd:32:53:32:f0:9c:21: 9a:1d:77:e5:6f:7e:96:7f:ac:7c:33:69:a5:91:c6: fa:fe:23:aa:16:c1:44:c8:aa:0c:24:e5:31:59:71: d3:e8:19:34:c5:db:cc:b6:1f:0d:82:0c:bb:2e:17: 88:aa:b5:df:39:14:af:18:ae:f0:40:86:47:26:09: 54:c6:2b:13:dd:79:28:15:42:ec:bf:7f:2f:23:fb: 9a:a0:b2:ea:7c:e1:7c:84:ec:63:c1:25:fe:28:a4: 22:45:ff:b9:ec:a4:b1:71:85:07:1e:37:75:f0:27: dc:34:46:40:fa:1f:3f:f4:68:3b:ec:46:c6:b9:e1: ea:db:22:24:5b:4a:d8:ec:66:64:6b:05:49:8d:d2: 0c:08:24:cf:b8:70:6c:2e:33:55:a0:9a:06:45:ac: 6f:6f:f4:06:67:73:74:5c:7e:5a:98:2b:90:a9:56: 1e:d9:13:c5:8a:4a:63:0d:d5:96:eb:a1:6b:ee:4a: 01:59:73:7b:00:5b:18:e5:74:75:44:c7:d6:21:c9: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DD:0C:7C:6B:FF:D3:CC:ED:4B:AA:98:35:8E:D2:8D:20:EE:8B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f179579-663e-3891-9e2c-531b67f9b20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9e:ff:51:e8:0f:39:66:32:5e:d3:e6:6f:a5:9a:a1:31:bc: e7:46:af:64:89:73:42:4f:03:4c:67:4d:23:ea:3a:a3:fe:19: b8:8b:dd:b6:2b:65:6e:61:1e:89:7f:a9:bb:a7:84:78:11:27: c4:ea:6d:82:57:bd:4d:9f:ad:b1:09:d2:57:f8:04:1f:a5:c2: 5c:e9:e8:ad:13:1c:ab:15:30:0f:a1:34:ee:5e:41:e4:c3:44: 0d:dc:f9:d5:1f:36:81:c2:7d:8a:7e:71:d8:b8:66:2b:b7:72: 56:b1:76:ae:5b:8f:ce:cd:f6:06:79:2e:ad:89:31:41:85:11: e0:25:05:59:56:61:9f:bc:62:8a:8b:4f:21:0d:be:00:28:fc: 4c:a6:bf:38:ba:35:d9:b5:c7:f8:4b:6f:9b:bb:4d:62:9a:e4: c0:52:ad:09:9e:70:97:8f:99:1b:40:06:68:3c:6d:ac:1b:61: 15:bb:fd:87:58:b9:fe:3b:39:e5:0f:f3:35:16:61:50:3c:29: 13:39:d7:59:82:02:18:66:de:7d:ec:ee:36:95:e3:d0:1b:8b: 7e:d4:01:9b:88:6c:77:5f:ef:85:16:c2:43:0f:da:33:17:b1: 2a:b9:75:e4:fc:ab:a6:17:2a:04:39:35:8f:30:02:c2:34:9a: ae:d0:dc:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6xL3nzgMXRlSOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OWMxNjM5ZDQtYWIxZS00NzcyLTkyMzUtOTY3NTY4M2ZjMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt60mGHmzDqCv+53VUI3z+wiZvEDEvClF00d /t+fOlr09BnSkyTE8ujmmt0N3nbHxtFBL/0yUzLwnCGaHXflb36Wf6x8M2mlkcb6 /iOqFsFEyKoMJOUxWXHT6Bk0xdvMth8Nggy7LheIqrXfORSvGK7wQIZHJglUxisT 3XkoFULsv38vI/uaoLLqfOF8hOxjwSX+KKQiRf+57KSxcYUHHjd18CfcNEZA+h8/ 9Gg77EbGueHq2yIkW0rY7GZkawVJjdIMCCTPuHBsLjNVoJoGRaxvb/QGZ3N0XH5a mCuQqVYe2RPFikpjDdWW66Fr7koBWXN7AFsY5XR1RMfWIcmYhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXdDHxr/9PM7UuqmDWO0o0g7osUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWYxNzk1NzktNjYzZS0z ODkxLTllMmMtNTMxYjY3ZjliMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKe/1HoDzlmMl7T5m+lmqExvOdGr2SJc0JPA0xnTSPqOqP+GbiL3bYr ZW5hHol/qbunhHgRJ8TqbYJXvU2frbEJ0lf4BB+lwlzp6K0THKsVMA+hNO5eQeTD RA3c+dUfNoHCfYp+cdi4Ziu3claxdq5bj87N9gZ5Lq2JMUGFEeAlBVlWYZ+8YoqL TyENvgAo/Eymvzi6Ndm1x/hLb5u7TWKa5MBSrQmecJePmRtABmg8bawbYRW7/YdY uf47OeUP8zUWYVA8KRM511mCAhhm3n3s7jaV49Abi37UAZuIbHdf74UWwkMP2jMX sSq5deT8q6YXKgQ5NY8wAsI0mq7Q3OA= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:30 2025 by rpki-client