$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa File: 25a8ab15-e085-3562-9462-51bb91799e31.roa (raw, json) Hash identifier: dRiDx9/J/3W2p4MSUcksbQCpaShCwRSCcNfBcctStYg= Subject key identifier: DE:6B:DE:14:AD:4D:FC:50:53:BA:B2:81:55:3C:0E:33:61:8A:4B:70 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1BA070589097A63F6080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1b:a0:70:58:90:97:a6:3f:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=da761a10-fcab-4096-b6ce-757fe2f0b421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:46:cc:7c:1d:d9:11:4f:da:90:32:35:0e: da:4d:77:e4:fb:25:57:ee:de:17:8b:4a:eb:5d:72: 00:1c:a9:66:75:e4:8a:57:a2:28:31:6f:e3:3a:c5: cd:92:90:b2:51:b8:83:a1:9a:3f:e9:10:ae:7b:01: 29:ae:fc:f6:23:b4:8e:fb:ee:f7:77:69:aa:26:82: c1:5e:33:fc:77:b4:b2:79:21:e4:31:b1:d0:a7:63: cc:67:5b:72:50:bb:5c:bb:43:df:dd:43:09:57:fd: da:d2:58:ae:a4:ae:93:b0:84:d1:3c:23:b7:a8:c9: 08:56:42:81:a7:c8:a6:e3:f3:86:5a:11:ae:e6:51: cb:38:1b:7c:6c:c2:4d:7e:5c:00:5b:a1:65:46:22: d0:84:14:f9:6c:a0:1b:0c:22:26:f3:fa:bb:9c:f4: 61:40:44:83:e1:47:4b:90:f6:0c:c6:37:5a:c2:e3: 94:bb:b6:7a:93:43:94:2b:52:e9:4d:b8:55:71:86: a6:be:16:a4:1a:00:a1:27:fc:30:5c:5d:d5:5f:5e: 18:8f:84:1b:ed:1b:6e:42:8c:9e:31:40:c7:a7:53: ae:ef:e0:4f:25:14:47:6e:a7:ad:1d:fc:15:f4:02: b4:c1:bd:c2:ca:ba:3b:7c:1a:88:ab:ef:18:85:8c: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6B:DE:14:AD:4D:FC:50:53:BA:B2:81:55:3C:0E:33:61:8A:4B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:48:d1:40:ed:69:2d:da:1e:f5:24:bf:43:45:87:8b:0e:b2: 77:8b:8f:21:54:cf:2f:4d:59:b4:b1:b0:85:26:04:9d:f7:a2: 37:5e:7b:f4:03:41:0d:f5:c2:b8:db:bc:dd:bf:01:fb:81:99: f6:34:2b:d3:a0:58:6c:3d:5c:ec:0b:44:68:60:61:ec:09:a1: 4c:1d:a9:e7:4d:c0:57:5a:ec:c0:43:77:d1:9e:2f:22:09:2a: 63:7f:f4:bb:2e:32:32:fd:f8:95:c8:ce:91:c9:ba:10:78:ea: e9:65:67:09:4b:1b:24:82:d8:40:e0:5e:9e:1e:52:cf:18:e8: 02:7e:f7:9f:0c:c1:cd:62:a6:27:6e:06:ee:29:ad:7c:6e:af: bf:c0:37:d7:27:e0:17:19:62:27:ba:b6:18:2c:4f:86:6b:9d: 0f:29:c7:90:bb:89:f0:30:0c:59:32:8c:64:37:a5:e0:86:65: ee:3c:eb:69:d6:83:48:9f:d3:5a:86:79:9c:b8:83:3b:54:3d: 0f:88:b6:27:47:3f:62:f5:ac:cd:e4:33:f5:97:13:0e:db:e8: f8:db:00:30:8e:ea:51:dc:ec:cb:c4:f8:0c:53:21:27:66:20: 4d:10:c6:61:98:f3:fc:c5:49:77:08:d9:06:3e:0d:f8:69:5f: c5:c4:ed:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RugcFiQl6Y/YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZGE3NjFhMTAtZmNhYi00MDk2LWI2Y2UtNzU3ZmUyZjBiNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVhGzHwd2RFP2pAyNQ7aTXfk+yVX7t4Xi0rr XXIAHKlmdeSKV6IoMW/jOsXNkpCyUbiDoZo/6RCuewEprvz2I7SO++73d2mqJoLB XjP8d7SyeSHkMbHQp2PMZ1tyULtcu0Pf3UMJV/3a0liupK6TsITRPCO3qMkIVkKB p8im4/OGWhGu5lHLOBt8bMJNflwAW6FlRiLQhBT5bKAbDCIm8/q7nPRhQESD4UdL kPYMxjdawuOUu7Z6k0OUK1LpTbhVcYamvhakGgChJ/wwXF3VX14Yj4Qb7RtuQoye MUDHp1Ou7+BPJRRHbqetHfwV9AK0wb3Cyro7fBqIq+8YhYw0fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5r3hStTfxQU7qygVU8DjNhiktwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVhOGFiMTUtZTA4NS0z NTYyLTk0NjItNTFiYjkxNzk5ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlI0UDtaS3aHvUkv0NFh4sOsneLjyFUzy9NWbSxsIUmBJ33ojdee/QD QQ31wrjbvN2/AfuBmfY0K9OgWGw9XOwLRGhgYewJoUwdqedNwFda7MBDd9GeLyIJ KmN/9LsuMjL9+JXIzpHJuhB46ullZwlLGySC2EDgXp4eUs8Y6AJ+958Mwc1ipidu Bu4prXxur7/AN9cn4BcZYie6thgsT4ZrnQ8px5C7ifAwDFkyjGQ3peCGZe4862nW g0if01qGeZy4gztUPQ+ItidHP2L1rM3kM/WXEw7b6PjbADCO6lHc7MvE+AxTISdm IE0QxmGY8/zFSXcI2QY+DfhpX8XE7dw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:06 2025 by rpki-client