$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af882a7-ba1b-3658-a246-84894c29d7a2.roa File: 2af882a7-ba1b-3658-a246-84894c29d7a2.roa (raw, json) Hash identifier: iSj40VOwEDg8ZFesKkI+3jQDZWsVNDs0ucxHRcWHBv4= Subject key identifier: 15:D1:2F:EE:BA:61:4D:F9:6E:17:CC:F4:9C:10:69:86:51:48:FB:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328F7FBAE82138C06CFC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af882a7-ba1b-3658-a246-84894c29d7a2.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8f:7f:ba:e8:21:38:c0:6c:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=96ec50fe-0571-4dd7-939b-481d98d68e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:ff:ad:b9:95:a0:57:3f:9c:c8:7c:6f:be: a7:af:9e:a2:d5:32:cf:ce:ea:13:68:f0:57:e2:5b: d9:71:61:a9:23:dc:fa:b6:14:eb:7d:53:b8:bd:5e: b9:77:1d:b4:22:10:fd:48:ea:61:fc:c4:de:9c:3e: 48:39:1e:98:73:be:be:c1:58:ce:a8:05:50:c1:e2: 8b:ed:5d:94:c3:36:80:d7:3f:15:b4:20:2f:38:7a: 36:eb:69:3b:bc:e7:58:65:59:a2:8d:45:24:a5:63: f6:cd:f2:ee:e2:e5:46:5b:41:1d:3d:28:ff:b3:bd: 54:c3:42:22:20:ad:c6:26:95:0d:c2:9e:93:be:30: 47:a7:89:3b:ad:e6:b9:f2:ed:f7:8e:7a:7f:bc:37: 12:d7:b8:cf:df:8e:e4:dc:94:7b:74:14:e1:2a:0d: 49:37:fa:ef:ad:be:bc:76:39:06:0e:99:36:7f:da: c8:54:f1:0f:c3:bb:08:60:6a:52:40:eb:aa:89:7b: 87:44:b9:ad:35:c5:e0:f9:3a:e0:30:96:06:05:ae: db:50:eb:58:ce:41:c5:4b:85:45:2c:4d:96:64:a2: 9b:15:21:dc:4c:df:6d:bc:89:4b:a2:37:79:04:e3: 11:55:f8:b7:c3:fb:94:12:0f:50:d0:2b:1b:f7:9d: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D1:2F:EE:BA:61:4D:F9:6E:17:CC:F4:9C:10:69:86:51:48:FB:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af882a7-ba1b-3658-a246-84894c29d7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3b:a7:7d:8c:f1:3d:62:95:db:e0:8d:65:bf:70:50:19:3e: d2:ed:d2:ff:6e:da:28:82:b3:a3:2f:53:c0:b9:23:0f:11:42: a5:16:4c:10:d9:17:4b:7a:4a:cd:64:5e:29:cd:10:f2:f8:26: 64:b4:a5:bb:9a:41:bb:e1:64:ea:4a:db:e1:25:a9:eb:ed:c7: 59:60:30:c8:d8:de:85:1b:3f:23:e7:92:22:ec:d8:28:a9:bc: cf:eb:8b:a1:7c:d9:82:b4:4c:05:d4:27:1e:f2:51:53:49:e3: a3:4e:a1:bc:7f:1d:e7:8d:cc:ad:ff:cf:69:01:c3:ec:1e:ea: 3a:0c:3b:9a:00:bd:38:b4:87:f8:b9:00:4c:d9:03:eb:6b:f3: 5f:63:cd:1f:db:39:36:7d:a3:a3:29:df:06:63:73:26:24:8b: c3:2c:a3:f0:f0:1f:49:1e:e7:1b:aa:a7:38:1d:a0:c8:48:d1: e4:b1:27:55:f4:e2:24:df:3c:dc:73:83:ce:5c:1d:8c:c9:53: 33:f0:c1:b8:67:0c:d4:20:cd:77:40:d7:e1:d2:22:5f:47:0a: 14:04:65:cd:16:6b:04:b8:83:ca:91:c4:0a:de:e6:52:b7:08: 03:ec:1f:58:1e:03:72:0f:33:f6:67:43:f1:48:07:67:98:a0: dd:b7:01:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo9/uughOMBs/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OTZlYzUwZmUtMDU3MS00ZGQ3LTkzOWItNDgxZDk4ZDY4ZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf7/rbmVoFc/nMh8b76nr56i1TLPzuoTaPBX 4lvZcWGpI9z6thTrfVO4vV65dx20IhD9SOph/MTenD5IOR6Yc76+wVjOqAVQweKL 7V2UwzaA1z8VtCAvOHo262k7vOdYZVmijUUkpWP2zfLu4uVGW0EdPSj/s71Uw0Ii IK3GJpUNwp6TvjBHp4k7rea58u33jnp/vDcS17jP347k3JR7dBThKg1JN/rvrb68 djkGDpk2f9rIVPEPw7sIYGpSQOuqiXuHRLmtNcXg+TrgMJYGBa7bUOtYzkHFS4VF LE2WZKKbFSHcTN9tvIlLojd5BOMRVfi3w/uUEg9Q0Csb953UHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXRL+66YU35bhfM9JwQaYZRSPv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmFmODgyYTctYmExYi0z NjU4LWEyNDYtODQ4OTRjMjlkN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE87p32M8T1ildvgjWW/cFAZPtLt0v9u2iiCs6MvU8C5Iw8RQqUWTBDZ F0t6Ss1kXinNEPL4JmS0pbuaQbvhZOpK2+Elqevtx1lgMMjY3oUbPyPnkiLs2Cip vM/ri6F82YK0TAXUJx7yUVNJ46NOobx/HeeNzK3/z2kBw+we6joMO5oAvTi0h/i5 AEzZA+tr819jzR/bOTZ9o6Mp3wZjcyYki8Mso/DwH0ke5xuqpzgdoMhI0eSxJ1X0 4iTfPNxzg85cHYzJUzPwwbhnDNQgzXdA1+HSIl9HChQEZc0WawS4g8qRxAre5lK3 CAPsH1geA3IPM/ZnQ/FIB2eYoN23AWs= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:54 2025 by rpki-client