$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/212f04f8-2b45-35a8-9f96-c7630cbc30e0.roa File: 212f04f8-2b45-35a8-9f96-c7630cbc30e0.roa (raw, json) Hash identifier: SJBKUiQWYwFN8GDIE7wYTaT0+jQIKJQ2F4enPnZH9qQ= Subject key identifier: D3:B5:75:D5:F9:15:29:19:C3:85:E6:B5:F8:90:AB:07:AC:23:DF:F9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328E49A9B5A906C0FDFF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/212f04f8-2b45-35a8-9f96-c7630cbc30e0.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8e:49:a9:b5:a9:06:c0:fd:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=4dc3c324-990a-48dd-80b2-e8c164b535eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:75:f9:39:06:f6:e7:a3:6c:55:fe:ff:8d:d5: 2e:83:04:82:7f:bc:66:bc:13:5f:89:29:e5:43:53: 96:c3:f0:49:08:8b:49:ba:df:1b:99:e2:11:a7:eb: 20:08:d1:7f:24:50:3b:b8:3e:12:b3:41:b6:87:90: 0e:37:d3:2d:5a:d7:0d:37:59:e6:2c:3e:7c:66:e5: e4:43:59:ed:df:cd:43:cf:56:b9:c2:85:11:0c:bb: 26:cf:21:cc:ab:ce:f9:20:8e:e1:a8:80:b9:c3:03: 06:d5:f4:40:db:28:fb:ee:b2:96:1d:28:46:4e:41: e4:bf:aa:92:ce:c7:d5:f7:d0:c8:8d:18:34:ef:49: 15:cc:ba:fa:4b:29:dd:e5:2e:ec:56:b3:bc:3b:9c: cd:81:ff:4c:ae:36:a1:8d:b3:68:44:0d:31:8b:be: 27:ff:be:48:28:58:2f:82:c0:87:30:8d:3f:ab:31: ac:3f:de:19:fb:5a:e0:3e:d0:46:f5:5f:27:fc:be: fc:af:44:a2:42:9b:3b:47:f1:41:d6:99:29:d5:47: dd:65:b1:c3:fb:89:1b:e3:1e:92:49:35:4c:1b:59: 3f:24:e5:39:fd:2b:a0:20:c9:ee:71:d0:43:84:d6: 84:00:da:14:da:fa:6c:a5:18:19:37:18:81:54:13: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B5:75:D5:F9:15:29:19:C3:85:E6:B5:F8:90:AB:07:AC:23:DF:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/212f04f8-2b45-35a8-9f96-c7630cbc30e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8a:5b:7a:78:9b:5c:8c:b8:86:f6:27:20:be:c7:de:64:07: 77:98:a8:49:ac:69:81:6b:db:38:3e:9a:0b:e2:14:fb:b1:3b: ab:7e:5c:ef:f5:d2:14:b8:a0:b2:04:12:8f:94:53:d2:65:3d: f1:2e:c4:66:e4:9c:4d:d9:97:49:fc:10:c2:05:69:ae:c0:38: 4a:5e:b2:bd:a1:c3:42:c5:13:ff:8e:95:ac:92:57:0b:3a:71: 51:6a:0c:4f:4c:14:14:34:2f:8a:12:4e:e2:e3:6e:31:31:3c: 22:a6:71:8d:14:a6:c6:13:d3:33:6a:04:59:b5:39:a5:2a:b3: f1:85:a0:23:db:e9:d7:bf:22:be:17:97:7f:04:cb:5b:be:8d: 96:af:65:d1:6b:d0:28:8f:a3:a2:a6:6a:03:03:d4:69:91:06: 7d:33:52:19:0d:cb:a2:9d:96:01:09:ce:dd:a3:14:da:19:59: 1f:7f:e7:58:7f:56:93:49:8e:d7:1b:06:12:fa:fb:76:38:bc: d8:a9:59:10:ea:e4:ac:7e:f6:bc:19:ab:fc:f3:7d:98:6d:03: 8d:8a:c1:5e:f4:37:00:42:f3:7c:0b:01:03:4c:d4:cf:9b:28: 88:76:68:f9:8c:13:d9:aa:68:af:55:71:60:13:7a:5b:66:84: 9c:90:99:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo5JqbWpBsD9/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NGRjM2MzMjQtOTkwYS00OGRkLTgwYjItZThjMTY0YjUzNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73X5OQb256NsVf7/jdUugwSCf7xmvBNfiSnl Q1OWw/BJCItJut8bmeIRp+sgCNF/JFA7uD4Ss0G2h5AON9MtWtcNN1nmLD58ZuXk Q1nt381Dz1a5woURDLsmzyHMq875II7hqIC5wwMG1fRA2yj77rKWHShGTkHkv6qS zsfV99DIjRg070kVzLr6Synd5S7sVrO8O5zNgf9MrjahjbNoRA0xi74n/75IKFgv gsCHMI0/qzGsP94Z+1rgPtBG9V8n/L78r0SiQps7R/FB1pkp1UfdZbHD+4kb4x6S STVMG1k/JOU5/SugIMnucdBDhNaEANoU2vpspRgZNxiBVBPSVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO1ddX5FSkZw4XmtfiQqwesI9/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjEyZjA0ZjgtMmI0NS0z NWE4LTlmOTYtYzc2MzBjYmMzMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqKW3p4m1yMuIb2JyC+x95kB3eYqEmsaYFr2zg+mgviFPuxO6t+XO/1 0hS4oLIEEo+UU9JlPfEuxGbknE3Zl0n8EMIFaa7AOEpesr2hw0LFE/+OlaySVws6 cVFqDE9MFBQ0L4oSTuLjbjExPCKmcY0UpsYT0zNqBFm1OaUqs/GFoCPb6de/Ir4X l38Ey1u+jZavZdFr0CiPo6KmagMD1GmRBn0zUhkNy6KdlgEJzt2jFNoZWR9/51h/ VpNJjtcbBhL6+3Y4vNipWRDq5Kx+9rwZq/zzfZhtA42KwV70NwBC83wLAQNM1M+b KIh2aPmME9mqaK9VcWATeltmhJyQmQw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:03 2025 by rpki-client