$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa File: 5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa (raw, json) Hash identifier: FBPaT/dra996bOLrslF8gEgckp5n31Xn93nSDwSQhnQ= Subject key identifier: 66:02:5A:14:67:62:D7:51:18:50:B8:0C:54:E4:74:AE:58:C0:8F:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B8648E72F59B1D2DA5FEB2FC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa Signing time: Wed 15 Oct 2025 00:52:55 +0000 ROA not before: Wed 15 Oct 2025 00:52:55 +0000 ROA not after: Tue 13 Jan 2026 01:52:55 +0000 asID: 13335 IP address blocks: 172.68.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:48:e7:2f:59:b1:d2:da:5f:eb:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 15 00:52:55 2025 GMT Not After : Jan 13 01:52:55 2026 GMT Subject: CN=8bd307f9-7042-4a36-a29d-8ce3a8bf9442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:99:b5:78:d3:78:a9:ff:ca:96:f8:d0:53:24: be:08:e2:e4:22:14:2a:73:07:ff:3e:c8:55:b9:91: 1f:e0:02:90:2d:9b:fe:8c:68:f6:44:bc:a8:7e:d6: a6:80:c7:00:5b:a2:fe:b0:df:8c:a1:e2:d1:d2:3c: f6:03:ac:c4:01:24:e2:e1:24:4c:64:d5:0b:76:51: 40:87:4c:a9:a5:25:b3:42:08:01:8b:91:cc:9b:fd: e9:46:7a:69:ca:61:20:33:09:56:8b:76:8f:24:62: 73:ff:3a:69:f6:a5:07:58:5b:9f:43:d7:21:44:e0: 2d:94:0f:8f:9b:3f:b7:fd:57:7f:88:57:60:f4:28: d1:b9:10:68:bb:06:d1:06:52:d5:16:3b:a8:de:88: ef:aa:87:9a:4a:80:7c:b2:16:56:e4:c0:e2:25:c7: 62:1d:1c:29:6f:ff:23:61:57:bf:42:f3:41:f2:d5: 16:cc:82:03:10:62:4b:0d:ac:e9:9a:28:62:a1:56: 7f:84:4e:23:b9:c5:e6:61:f1:7d:e7:28:16:cf:03: 0d:a5:1f:de:bd:20:40:a2:9f:7c:fb:ef:83:0b:07: b3:41:3d:22:f2:91:24:41:8e:01:5f:7f:d3:ac:21: fe:f8:f2:59:c5:cc:93:96:09:53:9e:2c:67:96:f0: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:02:5A:14:67:62:D7:51:18:50:B8:0C:54:E4:74:AE:58:C0:8F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be14a37-b219-3c75-8c68-d8a5bc8ec38d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1c:9d:7b:1a:1a:eb:c2:09:cd:85:7c:7b:a7:ee:2a:de:96: 66:93:de:2f:3c:4f:bb:fc:43:08:d6:6f:61:18:a8:b6:9d:88: d4:1b:36:e4:7b:a6:67:a3:c9:95:c6:60:91:b8:cf:a5:bc:a8: f0:69:3c:32:f4:91:e1:a4:71:8c:a4:84:87:92:f0:d5:0e:3f: 9a:d5:ae:ae:2f:4c:51:b8:c5:11:c4:5d:dd:5a:ba:f2:cb:dd: f9:a8:cd:27:91:39:aa:31:b1:fb:3d:09:92:58:e0:47:56:2a: a2:a9:8c:9b:a4:99:5d:25:b5:21:09:bb:75:09:17:88:3f:0b: e8:85:be:82:e9:57:7d:7c:20:75:89:9f:7c:bd:d8:ea:64:d2: 0f:7e:69:64:ec:e5:5a:7e:fe:f2:cc:c8:d2:1a:56:6b:c8:62: d2:05:de:72:05:89:de:eb:f4:23:ba:e4:08:0a:16:5d:8c:46: b5:d8:12:23:97:e9:05:29:0c:36:da:90:02:82:01:dd:f0:3c: 40:20:d1:b2:31:30:15:39:f1:4c:cf:3b:58:92:7a:16:a5:b7: 42:0d:e4:c8:43:15:1b:c7:6d:56:12:61:da:11:1b:4b:a2:8d: df:c1:3f:a7:d7:57:30:c6:2b:e3:42:54:ed:f4:0b:b5:cd:b9: 4f:f3:d7:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGSOcvWbHS2l/rL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAxNTAwNTI1NVoXDTI2MDExMzAxNTI1NVowLzEtMCsGA1UEAxMk OGJkMzA3ZjktNzA0Mi00YTM2LWEyOWQtOGNlM2E4YmY5NDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJm1eNN4qf/KlvjQUyS+COLkIhQqcwf/PshV uZEf4AKQLZv+jGj2RLyoftamgMcAW6L+sN+MoeLR0jz2A6zEASTi4SRMZNULdlFA h0yppSWzQggBi5HMm/3pRnppymEgMwlWi3aPJGJz/zpp9qUHWFufQ9chROAtlA+P mz+3/Vd/iFdg9CjRuRBouwbRBlLVFjuo3ojvqoeaSoB8shZW5MDiJcdiHRwpb/8j YVe/QvNB8tUWzIIDEGJLDazpmihioVZ/hE4jucXmYfF95ygWzwMNpR/evSBAop98 +++DCwezQT0i8pEkQY4BX3/TrCH++PJZxcyTlglTnixnlvBF2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYCWhRnYtdRGFC4DFTkdK5YwI9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJlMTRhMzctYjIxOS0z Yzc1LThjNjgtZDhhNWJjOGVjMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEcnXsaGuvCCc2FfHun7irelmaT3i88T7v8QwjWb2EYqLadiNQbNuR7 pmejyZXGYJG4z6W8qPBpPDL0keGkcYykhIeS8NUOP5rVrq4vTFG4xRHEXd1auvLL 3fmozSeROaoxsfs9CZJY4EdWKqKpjJukmV0ltSEJu3UJF4g/C+iFvoLpV318IHWJ n3y92Opk0g9+aWTs5Vp+/vLMyNIaVmvIYtIF3nIFid7r9CO65AgKFl2MRrXYEiOX 6QUpDDbakAKCAd3wPEAg0bIxMBU58UzPO1iSehalt0IN5MhDFRvHbVYSYdoRG0ui jd/BP6fXVzDGK+NCVO30C7XNuU/z13o= -----END CERTIFICATE-----Generated at Sun Oct 19 19:10:18 2025 by rpki-client