$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bcf60f5-4414-361e-8eee-b78b8bf75eef.roa File: 4bcf60f5-4414-361e-8eee-b78b8bf75eef.roa (raw, json) Hash identifier: vGQE28dclYZfeUmkICiu3Q78g3h84oXoAQgp5BVB7RY= Subject key identifier: B7:88:6E:AA:3C:5E:02:00:EC:DC:CF:5D:72:94:3F:56:8C:DC:43:0B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD31C3923C5A018D56ED80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bcf60f5-4414-361e-8eee-b78b8bf75eef.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:31:c3:92:3c:5a:01:8d:56:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=504e0ab1-35fd-4956-9284-6dac4ec7fa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:95:3b:28:e2:f1:c0:0a:9a:67:7a:0e:56: 8a:ef:4d:78:95:5c:53:f3:a3:e1:74:b8:d2:a9:7f: 1d:04:81:79:0e:6c:83:0c:6a:67:2c:2f:c8:70:ab: 12:07:f3:2b:2c:e0:c9:a0:31:1b:30:9c:e0:ba:07: a1:d1:82:d4:2e:c5:d4:10:cd:03:8c:2f:54:12:8a: 07:21:34:45:18:78:11:a5:cc:eb:51:a1:97:8c:e3: cf:fe:88:56:fa:cb:ec:ea:2f:76:80:09:d0:0d:85: 9c:97:e0:27:e9:56:2b:c5:db:92:cc:ad:a1:c3:95: a0:53:10:ec:b5:f5:f5:18:c8:96:c5:05:11:d7:86: df:95:3c:d8:90:8f:d4:21:0f:dc:ee:8f:95:8b:c7: 81:e4:d7:eb:9f:c3:b2:48:02:42:52:df:09:01:4e: 65:67:8f:d6:02:2a:ae:02:af:de:b0:e8:d1:6b:23: 02:af:ac:ec:91:b4:bc:8a:90:07:d3:90:90:20:9f: 31:7b:e6:eb:f8:1f:f3:26:99:97:2b:c8:3e:af:1f: cc:38:ea:17:91:c0:3e:d8:aa:1a:23:d7:cb:51:29: 72:73:06:ed:9f:25:6e:f6:57:50:9b:2b:8d:a9:d5: cc:8d:cf:bf:d8:b0:69:df:bb:51:e3:eb:05:d9:dc: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:88:6E:AA:3C:5E:02:00:EC:DC:CF:5D:72:94:3F:56:8C:DC:43:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bcf60f5-4414-361e-8eee-b78b8bf75eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a3:c2:08:d7:49:f8:17:97:02:5f:9e:76:72:dc:3c:df:c4: 62:4f:dc:05:ab:a9:fb:de:e4:5a:a0:7b:4f:0c:86:c6:47:b8: 35:36:0f:1d:bf:7d:2a:6d:88:9c:5f:29:a4:94:1c:89:cb:be: cc:90:8d:9e:5e:6b:ea:8a:f7:ac:42:0b:08:b6:2a:89:56:96: d5:5d:ad:09:39:5b:04:dc:80:fb:b1:25:c1:d6:91:c8:2b:fd: f6:e1:85:5f:4a:d7:ce:50:61:ba:2c:fa:68:ce:00:a3:d0:c3: fd:aa:06:05:dd:dc:a8:09:24:a0:54:a7:49:65:2b:b3:1c:c0: c6:3e:8f:0b:1f:90:12:73:88:d5:72:c3:56:07:58:46:ce:28: 09:13:38:83:5d:dd:fc:84:0c:48:2b:06:17:39:ea:ec:6a:d7: 43:c1:3a:37:2a:fb:4d:7e:b5:c3:d4:c3:86:c8:a7:05:f7:7d: b2:e4:fb:e6:ff:5c:ba:39:e9:46:63:d1:05:6d:bd:82:7c:e0: 8d:ad:00:4a:a3:ec:d3:38:50:39:bd:dd:b0:78:65:b7:43:7b: 50:40:99:a7:7a:f0:e5:56:ee:fa:89:b4:09:d7:a7:b9:99:15: dd:89:60:4f:1f:e0:5a:18:42:d9:75:8f:11:53:6f:a8:27:ef: 14:5d:05:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/THDkjxaAY1W7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NTA0ZTBhYjEtMzVmZC00OTU2LTkyODQtNmRhYzRlYzdmYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMCVOyji8cAKmmd6DlaK7014lVxT86PhdLjS qX8dBIF5DmyDDGpnLC/IcKsSB/MrLODJoDEbMJzgugeh0YLULsXUEM0DjC9UEooH ITRFGHgRpczrUaGXjOPP/ohW+svs6i92gAnQDYWcl+An6VYrxduSzK2hw5WgUxDs tfX1GMiWxQUR14bflTzYkI/UIQ/c7o+Vi8eB5Nfrn8OySAJCUt8JAU5lZ4/WAiqu Aq/esOjRayMCr6zskbS8ipAH05CQIJ8xe+br+B/zJpmXK8g+rx/MOOoXkcA+2Koa I9fLUSlycwbtnyVu9ldQmyuNqdXMjc+/2LBp37tR4+sF2dwDCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeIbqo8XgIA7NzPXXKUP1aM3EMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGJjZjYwZjUtNDQxNC0z NjFlLThlZWUtYjc4YjhiZjc1ZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrET0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGjwgjXSfgXlwJfnnZy3DzfxGJP3AWrqfve5Fqge08MhsZHuDU2Dx2/ fSptiJxfKaSUHInLvsyQjZ5ea+qK96xCCwi2KolWltVdrQk5WwTcgPuxJcHWkcgr /fbhhV9K185QYbos+mjOAKPQw/2qBgXd3KgJJKBUp0llK7McwMY+jwsfkBJziNVy w1YHWEbOKAkTOINd3fyEDEgrBhc56uxq10PBOjcq+01+tcPUw4bIpwX3fbLk++b/ XLo56UZj0QVtvYJ84I2tAEqj7NM4UDm93bB4ZbdDe1BAmad68OVW7vqJtAnXp7mZ Fd2JYE8f4FoYQtl1jxFTb6gn7xRdBfE= -----END CERTIFICATE-----Generated at Sat Nov 1 15:24:06 2025 by rpki-client