$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7288110e-0295-3ba5-bde2-92efb88c4b6b.roa File: 7288110e-0295-3ba5-bde2-92efb88c4b6b.roa (raw, json) Hash identifier: zuKx+3RMytyvAqvrISv1N8sUMTDqKznj6jz3z5f9KDY= Subject key identifier: 93:18:EC:00:3B:D2:D5:7A:B5:19:24:78:54:8B:00:A4:9B:62:82:E7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AC843EEDAE97959EA3C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7288110e-0295-3ba5-bde2-92efb88c4b6b.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ac:84:3e:ed:ae:97:95:9e:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=4e2c5f61-e52b-4c50-89dc-775576ff6475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7f:61:4c:3b:64:0b:ed:5e:be:8b:84:8f:b6: 87:22:5b:f0:bb:1c:12:d6:14:a3:98:c0:c2:c9:c5: ee:09:47:a9:07:54:b4:36:0c:f2:19:b9:5b:2a:ad: e1:7e:3d:79:c3:9b:5e:dc:cf:56:2d:45:31:80:e2: 5a:2b:b9:38:2e:19:de:cb:7b:74:e3:09:26:60:c2: 06:38:90:90:2c:cb:24:fa:c9:b2:96:86:14:92:37: 93:f7:d6:b1:2e:40:6c:68:4a:20:6f:ca:29:60:53: 7f:ce:63:b3:f6:c3:7b:03:87:9d:a7:90:90:42:f0: 7e:00:13:c1:56:dc:19:3e:7f:05:d8:17:0b:8d:0b: f5:83:e7:9a:06:ed:bb:ee:f6:2b:24:69:16:2a:a0: 8f:0d:fd:9d:66:6a:23:aa:a7:7b:3b:33:76:74:48: 52:6d:a6:42:03:4c:f5:3b:c4:50:7e:26:46:41:8b: 2d:3d:59:10:aa:66:cc:35:a5:3d:11:a0:6a:f3:90: 52:64:46:4e:51:32:a0:ff:65:b8:39:cc:7f:ee:c4: a5:60:96:bf:4a:43:c4:f1:e4:9f:af:6f:38:96:a8: 0b:2e:69:ea:68:e1:63:9b:17:43:0c:46:13:36:f3: d3:c9:47:4d:ea:cb:17:00:8e:04:57:2c:d7:b6:22: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:18:EC:00:3B:D2:D5:7A:B5:19:24:78:54:8B:00:A4:9B:62:82:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7288110e-0295-3ba5-bde2-92efb88c4b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:06:8a:23:c2:41:4d:6b:db:0e:ed:7b:a0:aa:c3:ac:cf:45: 81:28:a0:1e:7b:42:91:57:a1:4a:a4:98:2f:86:22:42:98:bf: 1d:1a:a4:48:fe:74:61:b6:dc:70:f6:fb:fe:2b:29:c3:07:05: 6a:9b:74:be:00:a1:d9:5a:c1:3c:15:66:28:4f:93:14:01:e6: a5:d0:ae:a7:e8:cd:a3:a7:d6:8a:fb:fa:8d:6b:aa:0e:40:1c: 62:0f:b2:f9:66:2e:1f:d2:f5:4f:cd:d5:d2:67:9c:80:a8:0c: 7d:90:cb:ec:e7:78:6c:33:68:e6:0b:b2:22:69:6b:cf:99:f7: f5:84:82:22:cc:cf:91:94:21:5c:42:95:85:2e:1a:b2:41:1e: f2:a9:e8:a8:c3:aa:16:2b:0e:92:36:34:49:7c:59:98:2e:9c: f0:63:0c:cd:f9:89:6a:d2:73:30:ec:a5:43:11:e5:f0:76:1f: 7e:f8:e4:28:64:83:8a:b6:a1:76:1b:37:81:25:7b:19:a9:2b: 66:3d:9d:90:de:1e:be:57:7e:13:c8:de:d5:b0:a0:83:55:93: 67:ba:27:cc:a9:9f:47:ad:4e:92:8c:4a:71:89:78:0b:b1:02: c6:3e:83:48:46:eb:9c:66:0c:ea:52:94:05:6b:2b:2b:be:f3: 0d:fa:e9:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6yEPu2ul5Weo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NGUyYzVmNjEtZTUyYi00YzUwLTg5ZGMtNzc1NTc2ZmY2NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn9hTDtkC+1evouEj7aHIlvwuxwS1hSjmMDC ycXuCUepB1S0NgzyGblbKq3hfj15w5te3M9WLUUxgOJaK7k4Lhney3t04wkmYMIG OJCQLMsk+smyloYUkjeT99axLkBsaEogb8opYFN/zmOz9sN7A4edp5CQQvB+ABPB VtwZPn8F2BcLjQv1g+eaBu277vYrJGkWKqCPDf2dZmojqqd7OzN2dEhSbaZCA0z1 O8RQfiZGQYstPVkQqmbMNaU9EaBq85BSZEZOUTKg/2W4Ocx/7sSlYJa/SkPE8eSf r284lqgLLmnqaOFjmxdDDEYTNvPTyUdN6ssXAI4EVyzXtiIzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMY7AA70tV6tRkkeFSLAKSbYoLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzI4ODExMGUtMDI5NS0z YmE1LWJkZTItOTJlZmI4OGM0YjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsGiiPCQU1r2w7te6Cqw6zPRYEooB57QpFXoUqkmC+GIkKYvx0apEj+ dGG23HD2+/4rKcMHBWqbdL4AodlawTwVZihPkxQB5qXQrqfozaOn1or7+o1rqg5A HGIPsvlmLh/S9U/N1dJnnICoDH2Qy+zneGwzaOYLsiJpa8+Z9/WEgiLMz5GUIVxC lYUuGrJBHvKp6KjDqhYrDpI2NEl8WZgunPBjDM35iWrSczDspUMR5fB2H3745Chk g4q2oXYbN4ElexmpK2Y9nZDeHr5XfhPI3tWwoINVk2e6J8ypn0etTpKMSnGJeAux AsY+g0hG65xmDOpSlAVrKyu+8w366f0= -----END CERTIFICATE-----Generated at Sat Nov 1 15:24:05 2025 by rpki-client