$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c2362c-2844-3229-bf90-8c5234922061.roa File: 20c2362c-2844-3229-bf90-8c5234922061.roa (raw, json) Hash identifier: ryKgWY5WXyzkFFioAtw9TCl6pGwHsAqxnfjSV6FNtK0= Subject key identifier: 5B:D9:84:D2:CB:02:51:86:B6:1D:F3:1C:7A:A8:7D:13:B1:F6:C7:8F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFFBBD110287D13DE0900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c2362c-2844-3229-bf90-8c5234922061.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ff:bb:d1:10:28:7d:13:de:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=1d0d200e-5028-4a4c-bd67-1106d7b3c5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:3c:45:c7:fd:30:a5:5b:20:87:b1:cd:44: 58:52:29:af:c5:61:c1:af:0c:75:d2:ba:59:d7:49: 5b:50:d5:0f:0b:2c:72:88:05:21:48:d9:05:25:47: 4a:c6:15:f5:ce:49:b0:cd:49:62:a4:2f:22:29:80: 85:fd:42:ff:e1:00:17:6e:fa:fb:46:c8:f9:ad:72: 1e:2b:43:64:8b:31:97:56:fa:b2:29:6e:49:66:05: fc:49:7c:4a:51:0a:b9:f9:a5:e7:bb:0b:71:a1:6c: 5b:4e:2c:84:6c:88:a7:95:46:a4:8d:f7:fc:78:06: 3c:01:cb:0d:11:c6:c6:63:66:8b:3d:c8:ad:19:ca: e0:43:8b:eb:66:f8:c1:29:27:5f:fa:12:1a:18:8b: f0:42:b2:fb:5b:8b:15:bb:91:30:fb:18:d3:6f:cc: 0c:4a:b3:c2:f1:d5:95:79:05:46:2a:d7:dd:14:18: c8:f0:af:4e:83:a4:f4:36:99:01:a5:3b:ef:f4:40: 8a:7c:7c:3f:67:85:35:4f:37:de:27:c3:24:18:12: 16:62:b8:27:c8:09:e9:0a:41:1b:00:8a:f0:65:37: 0f:2b:09:a5:d1:1b:55:bc:b7:c5:72:60:09:e8:73: 9b:d2:e8:9a:94:a8:84:a0:e3:45:fd:b6:97:1f:6e: c3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:84:D2:CB:02:51:86:B6:1D:F3:1C:7A:A8:7D:13:B1:F6:C7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/20c2362c-2844-3229-bf90-8c5234922061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:2f:fe:cb:9b:10:65:7e:b5:c9:88:cf:c8:e4:e7:cb:0b:2c: b9:a5:87:3d:0c:5b:10:f7:85:7c:cc:c7:e9:2e:b1:70:f3:ec: 9d:91:c2:22:db:99:55:78:23:2d:4f:a7:67:c8:33:00:fd:9f: cf:7a:49:f3:5c:05:7d:9a:3c:fe:87:9f:0a:da:e7:32:29:c9: 70:44:cf:d7:76:0a:1b:b1:2e:35:2d:6c:3c:c0:b3:79:e9:aa: 23:bc:cf:9a:59:49:59:b0:33:d5:26:5a:47:c2:55:69:38:c2: b5:8f:02:bd:13:b1:75:be:5c:2a:e3:32:a4:91:5b:2f:70:af: 0f:c7:e0:0b:8e:14:1b:7e:e4:6f:58:23:b6:b9:18:77:eb:b6: 1c:32:13:e9:d6:8d:5b:ad:74:e1:41:47:a4:dc:ac:33:46:6e: 90:80:54:b0:02:68:9c:f6:52:29:8d:08:9f:10:9c:82:84:1b: 04:73:76:f9:4a:fe:e6:97:a9:99:b6:b6:3c:80:fc:bb:d5:68: 96:ec:76:d8:9a:b6:bd:c1:09:26:bd:0b:a9:a0:5f:57:e4:06: da:18:e3:50:b4:49:78:6a:05:7c:74:8f:66:64:ac:6d:c4:72: 39:87:a5:a0:25:e1:5f:ab:bd:db:e4:46:26:59:1f:92:59:b1: ee:c7:c3:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP+70RAofRPeCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MWQwZDIwMGUtNTAyOC00YTRjLWJkNjctMTEwNmQ3YjNjNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyQ8Rcf9MKVbIIexzURYUimvxWHBrwx10rpZ 10lbUNUPCyxyiAUhSNkFJUdKxhX1zkmwzUlipC8iKYCF/UL/4QAXbvr7Rsj5rXIe K0NkizGXVvqyKW5JZgX8SXxKUQq5+aXnuwtxoWxbTiyEbIinlUakjff8eAY8AcsN EcbGY2aLPcitGcrgQ4vrZvjBKSdf+hIaGIvwQrL7W4sVu5Ew+xjTb8wMSrPC8dWV eQVGKtfdFBjI8K9Og6T0NpkBpTvv9ECKfHw/Z4U1TzfeJ8MkGBIWYrgnyAnpCkEb AIrwZTcPKwml0RtVvLfFcmAJ6HOb0uialKiEoONF/baXH27D8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvZhNLLAlGGth3zHHqofROx9sePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjBjMjM2MmMtMjg0NC0z MjI5LWJmOTAtOGM1MjM0OTIyMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0v/subEGV+tcmIz8jk58sLLLmlhz0MWxD3hXzMx+kusXDz7J2RwiLb mVV4Iy1Pp2fIMwD9n896SfNcBX2aPP6Hnwra5zIpyXBEz9d2ChuxLjUtbDzAs3np qiO8z5pZSVmwM9UmWkfCVWk4wrWPAr0TsXW+XCrjMqSRWy9wrw/H4AuOFBt+5G9Y I7a5GHfrthwyE+nWjVutdOFBR6TcrDNGbpCAVLACaJz2UimNCJ8QnIKEGwRzdvlK /uaXqZm2tjyA/LvVaJbsdtiatr3BCSa9C6mgX1fkBtoY41C0SXhqBXx0j2ZkrG3E cjmHpaAl4V+rvdvkRiZZH5JZse7Hw3c= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:23 2025 by rpki-client