$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa File: 5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa (raw, json) Hash identifier: uXGPbdDjIFNF4dhgR/Wxx9iSqQ3lWltVaVG0mKU+kjA= Subject key identifier: 2B:40:69:A7:2D:73:D0:8E:39:AB:C2:39:35:F5:AA:65:49:35:1C:1F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AC714C11FCC5BD3EED80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ac:71:4c:11:fc:c5:bd:3e:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=5cf0dc35-7a4e-46b5-a10f-5abe04083af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:44:f6:dd:b2:a7:e9:f1:cd:18:59:4c:30: 60:ab:fa:94:1c:a1:97:13:68:2b:3f:71:b4:df:7a: e8:bc:b5:90:51:d6:f2:cb:86:d7:ee:bb:c9:f9:50: f8:d9:e1:70:3c:31:84:fb:f1:26:05:a7:bc:c0:0c: d8:c4:cf:61:91:2b:69:6d:4e:c2:d3:3a:8c:aa:6e: c6:84:0b:2b:98:01:b9:bf:f2:80:08:b1:df:20:67: 3d:e0:73:e0:90:55:b9:46:b2:73:dd:d4:0a:e3:38: 5d:1b:5f:0b:ab:20:bf:56:c0:96:ab:fc:4c:9e:19: ad:cd:ac:bc:dd:07:d6:83:1d:40:76:d7:be:85:f5: 94:21:ec:0f:2d:8e:fb:e3:12:4b:20:fa:7e:5b:12: 40:ab:b9:34:9f:f7:f9:13:a4:62:7d:ca:99:b4:3d: c9:12:23:7b:17:04:8b:fa:c5:4a:d4:80:08:45:e2: 7e:cc:18:c5:0a:5d:6c:36:a0:75:29:88:a4:bd:64: bf:19:0e:b4:0b:5c:12:24:70:66:d3:00:3b:58:a5: a2:db:c8:fa:1d:82:79:9f:dd:55:5e:88:55:45:35: bf:df:07:ad:80:7b:4e:cd:2c:12:79:be:2d:77:27: 5b:b5:b6:a4:58:28:71:2f:76:65:3f:88:f6:69:ee: e1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:40:69:A7:2D:73:D0:8E:39:AB:C2:39:35:F5:AA:65:49:35:1C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:25:73:34:03:6d:7a:b8:5b:f2:7d:5b:52:d2:7b:e5:b3:9e: 3b:58:29:78:f9:db:1c:6f:71:06:89:b7:92:cf:35:d6:94:d5: 38:b4:6e:2b:a7:e6:ad:67:8d:56:0b:bc:2b:5a:05:f6:84:07: 81:00:17:8f:8a:79:92:12:d1:c4:ff:16:11:76:1d:79:c6:2d: 17:ed:06:fd:01:0a:90:30:b0:a8:c1:b0:6d:eb:c6:de:c1:e9: 02:b7:53:70:e8:4a:11:00:cf:f6:51:8d:20:99:f6:de:a5:83: d9:5f:ea:7a:60:e4:55:d6:e0:a8:d0:3b:68:ad:44:ec:52:51: ba:7d:9b:64:bf:bf:2f:3a:4a:d6:2c:78:75:6f:90:7e:79:7a: 76:0c:f9:77:72:7b:2a:79:9c:de:5f:ec:bb:e7:3e:27:31:24: 74:7e:e2:55:d6:05:4c:85:6e:d9:8d:74:81:a6:08:19:12:b8: 1b:e8:02:4d:5d:3b:fe:25:bd:2d:a2:cb:1c:f3:11:e8:19:1a: 81:c8:49:43:1a:09:c1:08:c4:6f:6e:e5:cc:07:7c:09:fb:37: 40:de:db:ca:12:7a:13:47:90:9b:2b:ce:fd:7a:f0:db:a4:64: 23:b4:64:09:7c:37:9e:d9:90:a0:cd:7f:77:ae:94:cc:62:f7: c3:3f:af:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6xxTBH8xb0+7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NWNmMGRjMzUtN2E0ZS00NmI1LWExMGYtNWFiZTA0MDgzYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8VE9t2yp+nxzRhZTDBgq/qUHKGXE2grP3G0 33rovLWQUdbyy4bX7rvJ+VD42eFwPDGE+/EmBae8wAzYxM9hkStpbU7C0zqMqm7G hAsrmAG5v/KACLHfIGc94HPgkFW5RrJz3dQK4zhdG18LqyC/VsCWq/xMnhmtzay8 3QfWgx1Adte+hfWUIewPLY774xJLIPp+WxJAq7k0n/f5E6RifcqZtD3JEiN7FwSL +sVK1IAIReJ+zBjFCl1sNqB1KYikvWS/GQ60C1wSJHBm0wA7WKWi28j6HYJ5n91V XohVRTW/3wetgHtOzSwSeb4tdydbtbakWChxL3ZlP4j2ae7hbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtAaactc9COOavCOTX1qmVJNRwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJkYWI5NGItN2VmOC0z MjMxLTg0YjMtMWM2ZmQ3N2JiMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMElczQDbXq4W/J9W1LSe+WznjtYKXj52xxvcQaJt5LPNdaU1Ti0biun 5q1njVYLvCtaBfaEB4EAF4+KeZIS0cT/FhF2HXnGLRftBv0BCpAwsKjBsG3rxt7B 6QK3U3DoShEAz/ZRjSCZ9t6lg9lf6npg5FXW4KjQO2itROxSUbp9m2S/vy86StYs eHVvkH55enYM+Xdyeyp5nN5f7LvnPicxJHR+4lXWBUyFbtmNdIGmCBkSuBvoAk1d O/4lvS2iyxzzEegZGoHISUMaCcEIxG9u5cwHfAn7N0De28oSehNHkJsrzv168Nuk ZCO0ZAl8N57ZkKDNf3eulMxi98M/r4Q= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:39 2025 by rpki-client