$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24e1075d-081c-3984-98e9-374471897eaa.roa File: 24e1075d-081c-3984-98e9-374471897eaa.roa (raw, json) Hash identifier: mNTyykLu21U9zbDCftEQMombPf2Nqanj4l1mZOgyWOs= Subject key identifier: 05:6E:B5:97:F0:DC:8A:8D:DA:1D:43:73:B3:11:3E:1D:21:52:72:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AF1660FECBC9BF8DD780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24e1075d-081c-3984-98e9-374471897eaa.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:af:16:60:fe:cb:c9:bf:8d:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=ca7df0f8-b3a7-4c50-a6f5-e710f040a7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:68:56:e5:e6:8d:a4:be:ae:55:af:82:22:29: b0:86:05:d3:3d:cf:b6:c7:54:77:b9:93:bc:ea:f3: e0:0c:85:84:1f:68:5f:8a:49:45:f6:f6:6f:b6:e1: 11:3b:78:9a:cd:5b:f7:99:bc:c2:9e:b9:21:db:ab: 09:91:7b:36:30:20:b7:b5:c1:0c:7d:14:ff:01:25: e5:b3:bb:19:71:1c:67:53:32:3f:bc:03:c1:b0:e3: 0b:30:98:cb:f0:18:59:6e:2a:9c:1f:2b:b4:e0:37: 66:b3:78:ef:7e:c9:c1:68:63:ef:4c:57:02:0a:47: 0a:59:7f:b3:d1:bf:05:76:78:4a:57:04:95:3e:e2: de:00:72:23:17:59:d1:6d:d2:45:d5:de:67:ef:8e: 57:b0:bd:3a:03:d7:db:c1:66:aa:3d:4c:2c:62:f7: ef:8d:67:9f:16:e9:3d:3a:bf:30:0b:8a:1e:1d:00: 48:ac:f2:51:61:6e:23:19:79:ff:a1:84:dc:21:df: 46:f7:71:0e:49:24:46:d7:52:1b:84:8f:01:79:09: 78:f0:be:33:2a:38:48:55:90:4e:15:81:34:7e:da: e4:f5:70:68:18:81:0a:39:4c:2f:70:96:d3:6a:d4: ea:6f:3e:4e:29:06:7c:83:ce:c6:55:77:af:b4:ff: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6E:B5:97:F0:DC:8A:8D:DA:1D:43:73:B3:11:3E:1D:21:52:72:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24e1075d-081c-3984-98e9-374471897eaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ee:40:92:32:15:af:af:04:08:0a:95:89:a9:92:25:dc:50: 01:f8:4e:f8:c2:92:9a:9f:ac:ce:ed:b3:43:67:96:2d:3d:8a: 04:c4:eb:c9:93:42:56:d2:a4:87:01:30:40:f5:70:6a:97:10: 9b:c9:72:1e:17:da:53:19:df:76:83:69:c6:a4:a7:9a:4f:bc: 2b:90:5a:ff:9f:5f:f1:04:26:1d:9e:c6:95:5e:1d:bb:2f:57: ce:c7:30:ba:d9:f3:18:66:77:b6:72:9f:07:11:87:58:ad:99: db:86:aa:c4:03:46:33:8e:c4:8d:d4:cd:e7:9c:52:b6:83:f5: a7:dc:8a:33:b8:06:9a:9f:59:60:c0:a5:a0:21:7a:04:5f:bc: c5:80:e7:09:80:95:4b:25:40:38:b0:ee:b9:1c:26:0f:28:01: 25:b4:61:2a:74:80:58:e3:fb:5b:44:4c:36:fa:c6:cc:e0:fa: c0:d0:05:22:06:e6:6b:2b:63:f2:d6:0d:c5:9f:f4:77:c3:d1: 94:5b:6e:9c:66:d2:fc:5b:8f:c8:49:37:52:8f:f1:2b:2a:2f: d1:60:66:0e:cc:1d:0f:c8:54:c3:a3:25:c3:91:59:9e:da:6d: f8:11:aa:b8:be:40:83:80:27:dc:33:1a:d3:57:4f:df:a0:7b: 06:bc:3a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql68WYP7Lyb+N14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk Y2E3ZGYwZjgtYjNhNy00YzUwLWE2ZjUtZTcxMGYwNDBhN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWhW5eaNpL6uVa+CIimwhgXTPc+2x1R3uZO8 6vPgDIWEH2hfiklF9vZvtuERO3iazVv3mbzCnrkh26sJkXs2MCC3tcEMfRT/ASXl s7sZcRxnUzI/vAPBsOMLMJjL8BhZbiqcHyu04Ddms3jvfsnBaGPvTFcCCkcKWX+z 0b8FdnhKVwSVPuLeAHIjF1nRbdJF1d5n745XsL06A9fbwWaqPUwsYvfvjWefFuk9 Or8wC4oeHQBIrPJRYW4jGXn/oYTcId9G93EOSSRG11IbhI8BeQl48L4zKjhIVZBO FYE0ftrk9XBoGIEKOUwvcJbTatTqbz5OKQZ8g87GVXevtP/lqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVutZfw3IqN2h1Dc7MRPh0hUnL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjRlMTA3NWQtMDgxYy0z OTg0LTk4ZTktMzc0NDcxODk3ZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHuQJIyFa+vBAgKlYmpkiXcUAH4TvjCkpqfrM7ts0Nnli09igTE68mT QlbSpIcBMED1cGqXEJvJch4X2lMZ33aDacakp5pPvCuQWv+fX/EEJh2expVeHbsv V87HMLrZ8xhmd7ZynwcRh1itmduGqsQDRjOOxI3UzeecUraD9afcijO4BpqfWWDA paAhegRfvMWA5wmAlUslQDiw7rkcJg8oASW0YSp0gFjj+1tETDb6xszg+sDQBSIG 5msrY/LWDcWf9HfD0ZRbbpxm0vxbj8hJN1KP8SsqL9FgZg7MHQ/IVMOjJcORWZ7a bfgRqri+QIOAJ9wzGtNXT9+gewa8Omk= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:54 2025 by rpki-client