$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa File: 5e5cf601-dd4a-3483-b580-0ba6786cf229.roa (raw, json) Hash identifier: 6m5ao2O5BHF2k0VpJp1emFEdTL4mFQjfUzQgNExV6U4= Subject key identifier: E5:40:FB:D2:6B:C1:D2:11:FF:6E:9C:98:D3:B7:52:FB:1A:AC:62:9D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932843655500671E487B200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:84:36:55:50:06:71:e4:87:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=8f9f1c41-a2ef-4349-bc0b-90369240e223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:89:98:0a:a0:71:a6:eb:f9:39:fc:5e:47: ca:db:9f:a8:4f:dc:c0:3c:f4:b7:6d:fd:16:12:66: 94:f4:29:26:8c:b2:22:5e:86:34:6c:24:74:67:c9: d3:2a:dc:17:6a:ed:c0:98:e9:00:7c:74:e4:61:8d: 05:74:54:bd:ba:94:e0:0a:ab:df:c4:32:7e:1d:30: ac:89:6e:f4:98:eb:7a:f0:f1:b2:93:4d:cd:45:4f: 33:1a:85:5a:d6:cd:d9:c3:ee:50:c7:04:fe:e7:c8: 57:d0:67:6e:a2:07:45:e2:e4:05:3d:f3:29:b0:11: 9d:f2:41:3e:d6:d1:fe:d6:10:17:e7:3d:80:53:0f: 3f:7e:f4:e4:c1:71:1a:75:c1:89:a0:b2:61:a3:ab: 9d:7f:61:61:6e:ec:ac:4f:d3:b4:87:43:4b:18:85: 9d:bd:30:08:50:40:df:28:a7:ea:b4:68:7c:04:3b: 66:ca:9b:f8:15:fc:d7:60:60:ee:1b:9c:1b:91:72: 67:01:20:b4:83:af:70:cc:ab:eb:50:5d:23:2f:9c: 6a:4b:b4:cf:c1:f1:ad:be:c1:fe:74:72:51:f3:b9: 57:99:69:88:5e:b5:ef:3e:53:a4:9b:21:57:07:b8: d2:91:c5:9f:4b:44:25:8a:1f:49:48:a4:f2:b8:56: 44:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:40:FB:D2:6B:C1:D2:11:FF:6E:9C:98:D3:B7:52:FB:1A:AC:62:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e5cf601-dd4a-3483-b580-0ba6786cf229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:22:81:34:01:40:24:c3:b0:6d:ff:05:6b:bc:09:28:a6:03: 6b:41:cf:cc:40:1f:3b:06:c6:23:32:ee:d1:75:d7:22:c9:34: 04:e5:34:60:82:61:24:d4:47:2b:0f:c8:9a:ac:80:95:d9:5e: f6:e8:4e:1a:ae:57:f7:8c:cf:34:55:26:2e:dc:89:ff:20:da: 12:87:a9:cf:0f:be:48:d7:8a:0d:33:d2:a7:35:22:77:99:44: 4f:2e:ba:af:d0:11:60:ba:88:bf:bf:4f:74:7d:1d:6e:3e:cd: fa:20:78:df:5e:66:3f:48:b9:c7:c3:a3:46:61:d9:bd:2f:ac: 04:b3:41:00:02:88:08:de:66:86:9c:70:3d:f5:5a:c4:5d:38: 3e:d3:17:9f:9f:4b:49:37:80:0b:a3:bc:7c:b1:7b:58:8d:14: 69:a9:62:05:c9:71:31:b2:4f:78:bd:9f:47:09:58:59:8b:58: 0a:6b:4a:76:e7:67:df:f5:87:9f:d0:01:97:5f:9c:d8:80:96: b9:f0:a2:18:8a:32:f1:f1:25:cb:60:d1:66:cd:55:01:a6:29: ab:8a:9f:65:46:59:10:7c:0c:48:95:0a:8f:82:46:5e:a9:d6: 81:18:ee:2e:da:36:17:14:f4:b3:ba:07:eb:30:14:6c:1e:b0: a6:ac:8b:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoQ2VVAGceSHsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OGY5ZjFjNDEtYTJlZi00MzQ5LWJjMGItOTAzNjkyNDBlMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gOJmAqgcabr+Tn8XkfK25+oT9zAPPS3bf0W EmaU9CkmjLIiXoY0bCR0Z8nTKtwXau3AmOkAfHTkYY0FdFS9upTgCqvfxDJ+HTCs iW70mOt68PGyk03NRU8zGoVa1s3Zw+5QxwT+58hX0GduogdF4uQFPfMpsBGd8kE+ 1tH+1hAX5z2AUw8/fvTkwXEadcGJoLJho6udf2FhbuysT9O0h0NLGIWdvTAIUEDf KKfqtGh8BDtmypv4FfzXYGDuG5wbkXJnASC0g69wzKvrUF0jL5xqS7TPwfGtvsH+ dHJR87lXmWmIXrXvPlOkmyFXB7jSkcWfS0Qlih9JSKTyuFZEjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVA+9JrwdIR/26cmNO3UvsarGKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWU1Y2Y2MDEtZGQ0YS0z NDgzLWI1ODAtMGJhNjc4NmNmMjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIigTQBQCTDsG3/BWu8CSimA2tBz8xAHzsGxiMy7tF11yLJNATlNGCC YSTURysPyJqsgJXZXvboThquV/eMzzRVJi7cif8g2hKHqc8PvkjXig0z0qc1IneZ RE8uuq/QEWC6iL+/T3R9HW4+zfogeN9eZj9IucfDo0Zh2b0vrASzQQACiAjeZoac cD31WsRdOD7TF5+fS0k3gAujvHyxe1iNFGmpYgXJcTGyT3i9n0cJWFmLWAprSnbn Z9/1h5/QAZdfnNiAlrnwohiKMvHxJctg0WbNVQGmKauKn2VGWRB8DEiVCo+CRl6p 1oEY7i7aNhcU9LO6B+swFGwesKasi08= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:42 2025 by rpki-client