$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75c7d92d-e49e-388b-9fb6-0577ca864b05.roa File: 75c7d92d-e49e-388b-9fb6-0577ca864b05.roa (raw, json) Hash identifier: S9hiDHqp6GpvfXsUc8vkwZXc1m1JWIQZddbGriBURTA= Subject key identifier: 8E:D5:6A:ED:87:CE:4A:7C:87:19:EE:C7:F6:FC:C7:D8:55:56:CD:87 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932865D1D2C3F94BA65F100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75c7d92d-e49e-388b-9fb6-0577ca864b05.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:86:5d:1d:2c:3f:94:ba:65:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=820310e2-c799-44a7-a6f1-41fe43d48ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:f9:45:32:41:eb:cd:a0:5c:1e:b1:8c:7a: 36:e3:21:cb:e1:f7:b9:b1:cb:18:4f:e8:dd:41:fa: c0:9c:8e:01:24:3b:31:a6:de:5a:78:af:d7:df:61: a8:53:aa:8d:1b:ad:c3:26:d7:59:31:81:81:f5:61: 97:df:72:a9:f3:19:fa:f6:55:7e:ee:c9:f4:f9:c8: 38:e2:06:85:7f:16:30:43:e8:86:fa:30:65:62:0f: 12:86:04:01:9d:42:d8:4a:4f:8c:ac:d5:99:2d:96: b0:81:8e:7f:c2:07:a1:4f:35:d5:fa:18:29:f0:fc: 38:00:a3:f0:61:05:38:9d:31:56:5c:d7:47:1d:1a: e9:ce:bc:12:99:bf:05:0d:6e:76:2b:ab:cf:f6:f8: 28:e9:37:4f:95:4e:5b:02:52:d3:91:84:37:8f:7c: 6d:45:6e:62:0a:48:ea:fe:79:90:96:84:87:a1:fe: 84:96:31:bb:1f:ab:b3:bb:06:87:2e:ec:11:6c:1d: ed:4d:f4:37:01:44:94:48:fd:e6:a6:5e:f5:d6:85: 01:62:1e:5c:f3:2a:3f:c0:3b:d3:10:6b:fa:ea:00: cd:ed:74:52:2e:58:de:a4:59:a2:83:91:60:83:d1: aa:fd:6f:ed:25:00:a3:50:87:01:ab:38:ae:5b:e9: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D5:6A:ED:87:CE:4A:7C:87:19:EE:C7:F6:FC:C7:D8:55:56:CD:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/75c7d92d-e49e-388b-9fb6-0577ca864b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:b7:2c:f0:26:48:ff:a8:a0:1d:ce:0a:86:0b:7e:71:b4:8c: 9e:41:87:c0:a1:5d:94:94:aa:74:3c:0e:02:f5:5e:7f:50:55: c6:c9:4a:f1:94:32:52:e4:c0:06:77:dd:e8:40:61:fd:76:87: e3:d5:ff:da:95:00:eb:44:95:56:2a:f5:61:6e:db:c4:d7:79: 48:19:ac:cb:a7:ff:b3:22:6a:1b:c1:33:95:f6:ae:a9:d7:50: 18:34:af:45:82:f2:0c:2b:98:8c:97:88:5c:5c:17:bf:f9:41: 85:a8:5e:b6:c4:82:a1:ef:02:90:9c:6c:a9:d9:d4:8e:94:35: 3a:5e:bc:e2:29:94:16:d3:68:f1:50:da:b8:02:38:cb:0e:68: 5b:cc:46:92:d1:5a:16:d0:11:fc:57:81:80:c2:92:f3:8d:6f: b5:08:64:05:e5:86:0f:77:a0:da:f8:e0:52:06:f4:7f:13:14: 3b:60:54:e6:e8:6e:00:ad:58:08:7d:9d:05:58:72:46:90:ed: 0d:c6:35:d3:d5:76:dc:40:bd:54:cf:cc:55:21:83:d2:e4:40: 1f:22:24:f9:33:a8:ec:0b:ce:06:e9:68:e7:4f:ce:ba:1f:d9: b2:a9:cf:6f:53:41:ee:b7:da:a2:d9:64:91:d8:35:3a:30:39: 19:ed:2f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoZdHSw/lLpl8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ODIwMzEwZTItYzc5OS00NGE3LWE2ZjEtNDFmZTQzZDQ4ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwj5RTJB682gXB6xjHo24yHL4fe5scsYT+jd QfrAnI4BJDsxpt5aeK/X32GoU6qNG63DJtdZMYGB9WGX33Kp8xn69lV+7sn0+cg4 4gaFfxYwQ+iG+jBlYg8ShgQBnULYSk+MrNWZLZawgY5/wgehTzXV+hgp8Pw4AKPw YQU4nTFWXNdHHRrpzrwSmb8FDW52K6vP9vgo6TdPlU5bAlLTkYQ3j3xtRW5iCkjq /nmQloSHof6EljG7H6uzuwaHLuwRbB3tTfQ3AUSUSP3mpl711oUBYh5c8yo/wDvT EGv66gDN7XRSLljepFmig5Fgg9Gq/W/tJQCjUIcBqziuW+mcVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7Vau2Hzkp8hxnux/b8x9hVVs2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzVjN2Q5MmQtZTQ5ZS0z ODhiLTlmYjYtMDU3N2NhODY0YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMe3LPAmSP+ooB3OCoYLfnG0jJ5Bh8ChXZSUqnQ8DgL1Xn9QVcbJSvGU MlLkwAZ33ehAYf12h+PV/9qVAOtElVYq9WFu28TXeUgZrMun/7MiahvBM5X2rqnX UBg0r0WC8gwrmIyXiFxcF7/5QYWoXrbEgqHvApCcbKnZ1I6UNTpevOIplBbTaPFQ 2rgCOMsOaFvMRpLRWhbQEfxXgYDCkvONb7UIZAXlhg93oNr44FIG9H8TFDtgVObo bgCtWAh9nQVYckaQ7Q3GNdPVdtxAvVTPzFUhg9LkQB8iJPkzqOwLzgbpaOdPzrof 2bKpz29TQe632qLZZJHYNTowORntL3c= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:45 2025 by rpki-client