$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f781fa5-216a-318d-81c3-28358b633e96.roa File: 1f781fa5-216a-318d-81c3-28358b633e96.roa (raw, json) Hash identifier: VRdgiVFyWCexXts0vnUUeNYEcTiOHjjcZtxHg491p1A= Subject key identifier: ED:B1:E3:DD:C6:E1:66:E4:CB:23:E6:91:00:1F:24:70:70:A2:29:D9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AF024CA7EB73AC18B460 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f781fa5-216a-318d-81c3-28358b633e96.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:af:02:4c:a7:eb:73:ac:18:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=8cdd80ce-c23b-470e-8d88-21babf9b29fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c5:1f:cb:f9:d9:49:d0:16:bd:66:79:a8:4b: b5:6e:99:95:c4:59:7b:0f:af:ee:09:54:52:09:82: cc:63:13:f8:e1:13:bb:5f:43:cb:a2:c1:dc:6f:30: 4f:39:9a:6a:01:6a:af:59:19:5a:a4:54:1d:81:49: 7e:a1:e0:56:79:b7:bc:8d:de:b8:b3:43:ac:5d:71: 39:16:04:92:c8:05:b8:81:e6:ad:7e:0a:07:a1:29: eb:84:37:bd:fc:e4:b6:f9:e1:16:64:1c:8a:53:5e: f2:d9:2c:cd:8e:fd:76:5f:3f:76:b0:a9:30:9b:33: a6:6a:1c:13:9c:2b:f6:02:5a:0f:b8:8c:6f:e5:b0: 8c:c1:20:8b:23:23:0b:ef:32:14:14:0a:86:1e:ab: 1f:dc:8d:2a:4d:a6:ed:fd:f7:24:95:f3:73:5e:2f: 29:00:4e:45:0c:98:86:14:3a:37:41:df:e5:2b:64: 06:53:09:47:39:5d:cf:d0:bb:40:d6:d5:8f:5c:d0: 2c:ed:b7:93:89:02:57:93:9a:15:d9:41:2f:cf:59: 95:a1:8f:47:5e:df:42:f6:7d:39:ef:16:9a:4d:9b: 78:83:f0:e8:47:41:55:65:db:48:ed:c7:01:76:6f: f8:55:0f:c2:31:f3:27:78:00:5e:99:24:de:c6:3f: 59:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B1:E3:DD:C6:E1:66:E4:CB:23:E6:91:00:1F:24:70:70:A2:29:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f781fa5-216a-318d-81c3-28358b633e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:cf:68:ef:6f:d7:e0:52:af:e9:de:ec:e3:97:fe:4b:99:47: a3:fd:35:09:6d:21:73:ea:1e:68:77:96:da:4a:62:53:96:06: a6:97:b7:fd:f5:85:1f:2b:93:f7:fe:7b:37:61:91:8e:06:ac: b9:7e:f3:4d:7b:ee:d2:26:1c:91:89:04:e5:aa:d4:f3:d4:c5: 80:e0:8c:05:fa:3e:21:9e:40:20:b1:fa:d4:59:1d:79:9f:33: d5:d1:e7:3b:11:35:7a:8d:d4:a4:f0:70:a4:03:6d:9e:ee:f9: e8:8d:0e:dc:90:e6:c9:ec:99:bb:e0:4f:f5:44:1c:92:35:1a: c2:86:a6:d5:65:ee:44:3c:9c:e9:3a:15:a7:9b:00:34:0f:1a: 9a:b5:61:a4:3d:04:6a:65:8b:9e:bd:6a:a7:48:09:bd:1e:1f: dc:b1:44:6e:35:da:dc:da:c8:e9:f3:2b:20:cd:85:ec:13:3e: b1:81:1b:cb:40:10:97:67:76:5f:96:ca:fe:a1:0c:94:71:c8: 81:30:4b:c9:aa:f3:af:c9:df:02:37:51:98:94:5a:e8:53:e8: f3:b2:db:d5:3c:b3:e5:f9:ab:0f:35:88:de:00:cf:c4:73:17: 5f:7a:ce:77:e0:02:e6:3a:06:8f:5b:d5:0e:79:61:ad:26:9f: 0a:10:ba:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql68CTKfrc6wYtGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OGNkZDgwY2UtYzIzYi00NzBlLThkODgtMjFiYWJmOWIyOWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMUfy/nZSdAWvWZ5qEu1bpmVxFl7D6/uCVRS CYLMYxP44RO7X0PLosHcbzBPOZpqAWqvWRlapFQdgUl+oeBWebe8jd64s0OsXXE5 FgSSyAW4geatfgoHoSnrhDe9/OS2+eEWZByKU17y2SzNjv12Xz92sKkwmzOmahwT nCv2AloPuIxv5bCMwSCLIyML7zIUFAqGHqsf3I0qTabt/fcklfNzXi8pAE5FDJiG FDo3Qd/lK2QGUwlHOV3P0LtA1tWPXNAs7beTiQJXk5oV2UEvz1mVoY9HXt9C9n05 7xaaTZt4g/DoR0FVZdtI7ccBdm/4VQ/CMfMneABemSTexj9Z6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2x493G4WbkyyPmkQAfJHBwoinZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWY3ODFmYTUtMjE2YS0z MThkLTgxYzMtMjgzNThiNjMzZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrESMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7PaO9v1+BSr+ne7OOX/kuZR6P9NQltIXPqHmh3ltpKYlOWBqaXt/31 hR8rk/f+ezdhkY4GrLl+80177tImHJGJBOWq1PPUxYDgjAX6PiGeQCCx+tRZHXmf M9XR5zsRNXqN1KTwcKQDbZ7u+eiNDtyQ5snsmbvgT/VEHJI1GsKGptVl7kQ8nOk6 FaebADQPGpq1YaQ9BGpli569aqdICb0eH9yxRG412tzayOnzKyDNhewTPrGBG8tA EJdndl+Wyv6hDJRxyIEwS8mq86/J3wI3UZiUWuhT6POy29U8s+X5qw81iN4Az8Rz F196znfgAuY6Bo9b1Q55Ya0mnwoQujE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:04 2025 by rpki-client