$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/759e33bb-46ae-3b4a-834c-a444550e1bd0.roa File: 759e33bb-46ae-3b4a-834c-a444550e1bd0.roa (raw, json) Hash identifier: wJwnK3i3neiswYZZODkPhCefiP1DK6LE9OMcWRkQhBE= Subject key identifier: C1:F4:E2:2B:BA:07:F5:8E:66:EE:F8:84:3E:1D:1F:9C:C6:7C:49:52 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AD112F53D1508F30783A Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/759e33bb-46ae-3b4a-834c-a444550e1bd0.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ad:11:2f:53:d1:50:8f:30:78:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=b7767349-678d-4577-ba46-89609f6f0b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7b:75:87:a3:ce:49:0c:bd:15:cc:25:46:34: 3a:f8:43:64:9d:45:3f:c7:8e:77:d2:24:1f:42:48: 8e:06:04:86:18:bb:24:1f:db:b2:90:69:5f:1f:82: 0a:f1:5d:6e:18:00:cb:68:e5:b3:da:d5:5e:c3:80: 19:80:70:47:ac:87:01:b7:d3:cc:d3:0d:ee:e7:8a: b0:2c:4c:e5:66:2f:9a:96:20:34:61:64:2c:81:2e: 2a:7d:0a:32:ed:35:a8:f0:7e:4f:1a:4c:8b:4c:4e: 67:d9:fe:28:bd:40:ca:70:fe:0e:ad:c1:cb:6c:d2: 35:93:5b:c4:ac:c6:15:c6:9a:7e:68:91:13:f8:b7: eb:40:7f:24:41:ce:02:84:a8:67:43:72:49:1a:23: f8:f5:a7:c6:c8:35:71:1b:fe:72:b5:33:76:4a:6b: d3:ce:c7:4c:5c:78:f5:5b:c2:e8:fe:39:4b:07:73: a5:6a:34:bf:10:2e:ec:a0:43:e2:00:68:3a:f4:c3: b8:93:4d:dc:73:02:e5:e7:99:78:94:4d:b2:36:cc: 97:10:b0:59:06:1e:d6:78:6c:00:41:8e:37:74:a3: ec:e2:af:bb:a3:cc:6e:7b:96:25:3c:47:6f:09:90: e8:49:18:23:32:c8:d1:44:16:5a:65:0c:2a:fb:58: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F4:E2:2B:BA:07:F5:8E:66:EE:F8:84:3E:1D:1F:9C:C6:7C:49:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/759e33bb-46ae-3b4a-834c-a444550e1bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f7:ad:cf:c0:f0:b1:f9:d1:8c:89:93:47:f6:0e:f8:93:92: e8:25:38:58:61:28:17:51:44:7a:60:6f:ce:a8:3d:52:d9:fa: 4d:f7:3f:25:19:55:a7:f4:cc:ea:5c:d7:fe:91:57:c4:84:a3: 23:4a:c4:63:50:b3:7d:06:f6:ba:e4:3e:fc:34:34:18:f5:3f: 33:ad:c9:f9:0e:64:6c:80:83:be:40:d2:38:fa:9f:bb:c6:b9: f5:77:21:71:4c:a4:13:1b:0d:fe:4f:8d:39:39:45:eb:88:61: 3a:3d:0e:f8:99:e3:c5:87:c0:0a:57:b4:5b:e0:cc:1e:98:c5: 28:b1:32:03:03:ee:82:9f:a5:86:a1:ba:58:a4:5d:dd:fc:15: 4f:16:e3:e2:62:ea:d8:75:fe:30:e0:b7:60:44:35:26:a6:c2: 4f:e5:b7:29:b9:57:5b:36:6f:79:e3:f3:cf:e5:10:94:88:bd: 6e:02:6b:50:8b:e0:91:e9:90:b6:72:1a:f4:84:49:2d:63:a9: e5:b2:f5:cf:29:30:5a:d5:87:61:e2:86:9f:db:10:08:6d:f2: af:d6:4a:8f:d2:39:eb:75:f1:50:17:71:24:c8:3f:02:ae:c9: 5e:07:f2:e6:3f:51:39:1e:89:d5:de:28:4a:78:6b:66:6f:e5: 0a:f1:0c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql60RL1PRUI8weDowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk Yjc3NjczNDktNjc4ZC00NTc3LWJhNDYtODk2MDlmNmYwYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nt1h6POSQy9FcwlRjQ6+ENknUU/x4530iQf QkiOBgSGGLskH9uykGlfH4IK8V1uGADLaOWz2tVew4AZgHBHrIcBt9PM0w3u54qw LEzlZi+aliA0YWQsgS4qfQoy7TWo8H5PGkyLTE5n2f4ovUDKcP4OrcHLbNI1k1vE rMYVxpp+aJET+LfrQH8kQc4ChKhnQ3JJGiP49afGyDVxG/5ytTN2SmvTzsdMXHj1 W8Lo/jlLB3OlajS/EC7soEPiAGg69MO4k03ccwLl55l4lE2yNsyXELBZBh7WeGwA QY43dKPs4q+7o8xue5YlPEdvCZDoSRgjMsjRRBZaZQwq+1jnGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH04iu6B/WOZu74hD4dH5zGfElSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzU5ZTMzYmItNDZhZS0z YjRhLTgzNGMtYTQ0NDU1MGUxYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL3rc/A8LH50YyJk0f2DviTkuglOFhhKBdRRHpgb86oPVLZ+k33PyUZ Vaf0zOpc1/6RV8SEoyNKxGNQs30G9rrkPvw0NBj1PzOtyfkOZGyAg75A0jj6n7vG ufV3IXFMpBMbDf5PjTk5ReuIYTo9DviZ48WHwApXtFvgzB6YxSixMgMD7oKfpYah ulikXd38FU8W4+Ji6th1/jDgt2BENSamwk/ltym5V1s2b3nj88/lEJSIvW4Ca1CL 4JHpkLZyGvSESS1jqeWy9c8pMFrVh2Hihp/bEAht8q/WSo/SOet18VAXcSTIPwKu yV4H8uY/UTkeidXeKEp4a2Zv5QrxDBY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:40 2025 by rpki-client