$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa File: 5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa (raw, json) Hash identifier: opHW4OhPq2nOqUnRGtjb19dPICaPU9boCMr72eDiMns= Subject key identifier: 6E:03:E9:E3:A4:B1:04:96:C1:27:DB:63:3B:60:D0:71:C9:A5:9C:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD30E66282960AD190FE40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:30:e6:62:82:96:0a:d1:90:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=440cb70e-4dc3-4efc-8957-81bbda591b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:f4:98:06:63:fb:dc:eb:11:7f:66:d8:e6: 53:65:70:bb:e1:3a:44:24:b8:61:84:0a:37:27:6b: 1d:11:b4:cb:f9:7e:20:0a:cd:b8:ac:2c:57:9b:08: 6c:9d:29:e7:1e:e3:96:a7:83:dd:1a:c0:91:e0:e6: b9:2a:51:39:3b:9f:67:99:f7:a2:73:2b:e9:6b:ef: 5d:3e:f0:c0:27:14:2d:22:65:1c:1d:ab:82:60:30: 7f:c6:85:da:d4:d7:16:9e:73:52:34:48:46:10:b4: 43:87:91:01:78:da:38:83:6a:b2:2d:c6:13:f5:d4: 8b:29:91:5f:3c:7b:59:1d:8d:4c:14:82:97:f3:a9: 74:7d:4d:61:5a:e0:a5:f3:98:ec:0a:3b:1d:a8:5b: da:ca:6d:f8:8a:60:52:b9:56:cd:c4:ea:6d:a9:4a: f2:bc:d3:21:a7:28:3d:52:64:e8:0f:ec:ab:e3:87: 59:2f:37:cc:4c:71:48:12:28:8b:06:88:3d:a5:c6: 88:eb:02:54:38:97:9e:01:b7:c3:7f:93:94:d2:c2: ee:bb:d9:9d:d5:61:ae:ef:43:27:b4:8b:00:b8:25: ad:d5:80:8d:03:50:c4:4f:0c:b6:94:64:f3:e2:42: b0:63:70:09:83:06:e5:a0:91:f2:03:11:32:9c:02: 9d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:03:E9:E3:A4:B1:04:96:C1:27:DB:63:3B:60:D0:71:C9:A5:9C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a0:8e:0b:ad:b9:1d:2e:37:e6:c8:ae:ca:d8:53:bf:74:6c: 26:bd:8f:eb:62:d7:32:90:4e:bd:cf:da:91:30:4a:e8:37:83: 8d:19:aa:b9:b6:b0:4f:04:21:e7:9a:9a:b3:60:9a:62:ce:13: a8:4c:82:6b:8b:eb:a5:28:04:15:b7:3e:41:38:73:74:e8:35: 82:aa:6a:24:33:e8:3b:7d:44:1a:fb:cf:8c:36:dc:4a:8f:ba: b8:5c:15:74:67:11:af:63:ce:30:7c:5a:2a:c9:db:05:42:2a: 4e:83:1e:75:5a:2d:94:31:15:ad:06:44:15:b8:9f:15:8f:c2: 58:5c:1d:50:d5:46:50:02:7a:ee:8f:40:7c:7d:d4:f1:4d:89: c0:9f:9c:46:90:58:1e:23:28:45:7e:f2:81:9f:eb:c3:a7:76: 0e:a7:5c:d3:9f:49:9b:4c:03:70:f1:1e:8e:d3:a7:2c:fd:5b: c1:fd:cf:64:8c:9a:38:83:f3:24:09:4c:f3:71:b7:de:be:6f: 79:72:a6:27:14:8d:af:aa:17:88:6a:4d:44:23:85:75:e1:27: 99:da:9e:15:f5:72:5d:a3:79:be:25:69:b5:af:72:b3:92:cd: 70:7f:b3:27:c9:31:07:2b:4e:ea:49:24:33:52:6c:ca:00:10: 14:5a:9c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TDmYoKWCtGQ/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NDQwY2I3MGUtNGRjMy00ZWZjLTg5NTctODFiYmRhNTkxYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH/0mAZj+9zrEX9m2OZTZXC74TpEJLhhhAo3 J2sdEbTL+X4gCs24rCxXmwhsnSnnHuOWp4PdGsCR4Oa5KlE5O59nmfeicyvpa+9d PvDAJxQtImUcHauCYDB/xoXa1NcWnnNSNEhGELRDh5EBeNo4g2qyLcYT9dSLKZFf PHtZHY1MFIKX86l0fU1hWuCl85jsCjsdqFvaym34imBSuVbNxOptqUryvNMhpyg9 UmToD+yr44dZLzfMTHFIEiiLBog9pcaI6wJUOJeeAbfDf5OU0sLuu9md1WGu70Mn tIsAuCWt1YCNA1DETwy2lGTz4kKwY3AJgwbloJHyAxEynAKdmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4D6eOksQSWwSfbYztg0HHJpZzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWQ3MzAxMmUtZDZhYi0z OTdmLTlhMzEtOTJkNDE2ZTNjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEigjgutuR0uN+bIrsrYU790bCa9j+ti1zKQTr3P2pEwSug3g40Zqrm2 sE8EIeeamrNgmmLOE6hMgmuL66UoBBW3PkE4c3ToNYKqaiQz6Dt9RBr7z4w23EqP urhcFXRnEa9jzjB8WirJ2wVCKk6DHnVaLZQxFa0GRBW4nxWPwlhcHVDVRlACeu6P QHx91PFNicCfnEaQWB4jKEV+8oGf68Ondg6nXNOfSZtMA3DxHo7Tpyz9W8H9z2SM mjiD8yQJTPNxt96+b3lypicUja+qF4hqTUQjhXXhJ5nanhX1cl2jeb4labWvcrOS zXB/syfJMQcrTupJJDNSbMoAEBRanBg= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:23 2025 by rpki-client