$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44a00149-0ca4-38d5-9865-a80cf0ff900a.roa File: 44a00149-0ca4-38d5-9865-a80cf0ff900a.roa (raw, json) Hash identifier: icz7QKpB8opg03V/hG8AeG8Wv7xTR+mJVGPudBFjNQg= Subject key identifier: 97:61:E4:77:8A:62:D5:84:7D:70:BC:C3:45:4E:C6:92:E6:16:80:F2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0A53EACAD2F5BAE4C9C8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44a00149-0ca4-38d5-9865-a80cf0ff900a.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0a:53:ea:ca:d2:f5:ba:e4:c9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=f64c8158-337e-455b-aef2-2b4b9b1bf786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:46:b5:ee:07:6f:5a:68:db:71:cd:a1:9f:13: 22:d3:86:a2:35:45:28:b7:ff:79:42:4f:f6:e8:5e: 48:bb:4e:fe:23:ff:36:54:39:6e:0e:59:ed:cc:6b: 19:cb:55:bf:2a:f9:ac:1e:88:ab:d4:dc:b3:ca:90: 82:f2:e0:43:21:2e:b3:bb:b4:21:b5:5e:21:9a:46: 3c:ad:d5:7d:86:98:b1:28:c8:64:2d:9f:5e:0d:49: a5:ed:b0:02:cd:b4:8b:57:a0:43:87:d3:c3:63:ba: 3b:d9:c7:9a:56:c5:8b:77:45:97:be:78:6b:eb:96: 04:41:ca:6a:43:7e:7d:0e:4e:7d:b3:28:38:7e:b5: 73:72:24:a2:4d:4c:f9:85:3d:72:9a:5a:d6:4a:0b: 95:db:5f:77:52:e6:64:02:20:15:f0:99:e3:4c:87: a5:72:16:a9:7b:1f:85:52:10:98:25:c4:a9:c8:7f: 39:ef:d4:ca:92:74:a2:dc:6c:49:bc:10:6a:16:16: e3:05:da:e2:9f:96:b3:30:89:66:95:c6:50:0f:13: c5:3e:ac:df:27:6b:8e:1a:44:78:95:fd:6a:71:42: df:dd:86:57:1f:d4:c1:04:34:e2:4f:1f:9b:a4:19: 53:1f:f1:33:a7:20:b4:60:f3:90:d5:04:80:7e:92: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:61:E4:77:8A:62:D5:84:7D:70:BC:C3:45:4E:C6:92:E6:16:80:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44a00149-0ca4-38d5-9865-a80cf0ff900a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:6e:38:8c:10:0d:89:31:34:89:70:06:7c:df:67:36:b5:26: da:6a:35:16:6c:19:bc:e9:72:1d:e5:a4:9c:47:17:9b:06:54: b1:25:fe:2d:2c:c2:b8:d1:f9:2d:c7:c9:7c:2c:55:0c:2b:83: 7f:48:2d:f6:88:f8:83:cb:d1:9d:4e:e5:99:13:c0:76:bb:80: 8a:e8:43:44:0c:34:ba:2e:55:ca:ce:e5:42:a8:83:e5:97:75: 8f:d3:b4:29:a4:f7:35:28:35:8b:68:e8:e8:4e:13:49:a5:4e: c6:3d:af:50:cd:80:53:31:ec:d1:03:f0:64:22:8b:0f:98:f6: 5f:81:0f:22:31:0c:8d:64:bd:e5:f3:33:3d:2d:d6:af:94:c6: e8:09:2f:f0:dc:0d:17:19:56:63:00:ee:33:6f:4a:10:f4:b5: 3c:00:8f:cf:97:81:14:fc:3e:24:a1:ba:4c:f4:a6:2d:09:d2: e6:b3:1d:2f:d7:a3:f7:79:ab:b1:db:83:0c:d6:09:e8:03:40: 58:19:a5:ae:ac:6c:16:3a:44:d4:6a:c0:92:d0:19:4b:5c:80: 52:d8:c5:ef:db:76:a8:d6:cb:f1:3f:37:6a:d5:97:6a:47:9e: 37:cb:2e:a8:49:be:b0:11:8e:65:88:31:b0:35:62:4a:33:57: 6a:f3:3e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQpT6srS9brkycgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZjY0YzgxNTgtMzM3ZS00NTViLWFlZjItMmI0YjliMWJmNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEa17gdvWmjbcc2hnxMi04aiNUUot/95Qk/2 6F5Iu07+I/82VDluDlntzGsZy1W/KvmsHoir1NyzypCC8uBDIS6zu7QhtV4hmkY8 rdV9hpixKMhkLZ9eDUml7bACzbSLV6BDh9PDY7o72ceaVsWLd0WXvnhr65YEQcpq Q359Dk59syg4frVzciSiTUz5hT1ymlrWSguV2193UuZkAiAV8JnjTIelchapex+F UhCYJcSpyH8579TKknSi3GxJvBBqFhbjBdrin5azMIlmlcZQDxPFPqzfJ2uOGkR4 lf1qcULf3YZXH9TBBDTiTx+bpBlTH/EzpyC0YPOQ1QSAfpI8cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdh5HeKYtWEfXC8w0VOxpLmFoDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDRhMDAxNDktMGNhNC0z OGQ1LTk4NjUtYTgwY2YwZmY5MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1uOIwQDYkxNIlwBnzfZza1JtpqNRZsGbzpch3lpJxHF5sGVLEl/i0s wrjR+S3HyXwsVQwrg39ILfaI+IPL0Z1O5ZkTwHa7gIroQ0QMNLouVcrO5UKog+WX dY/TtCmk9zUoNYto6OhOE0mlTsY9r1DNgFMx7NED8GQiiw+Y9l+BDyIxDI1kveXz Mz0t1q+UxugJL/DcDRcZVmMA7jNvShD0tTwAj8+XgRT8PiShukz0pi0J0uazHS/X o/d5q7HbgwzWCegDQFgZpa6sbBY6RNRqwJLQGUtcgFLYxe/bdqjWy/E/N2rVl2pH njfLLqhJvrARjmWIMbA1YkozV2rzPgc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:36 2025 by rpki-client