$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ae98a3d-af6f-3e91-936f-1a5943ba9ca5.roa File: 8ae98a3d-af6f-3e91-936f-1a5943ba9ca5.roa (raw, json) Hash identifier: WQoP0c35hiOr+MtbeqLm0656x3lM4JUgxBnjFrnNe7A= Subject key identifier: EA:A8:E5:30:8B:5E:60:C2:DC:EA:E3:4F:9C:55:14:09:AC:6B:CE:6A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0A2F98ECB5F4FD347870 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ae98a3d-af6f-3e91-936f-1a5943ba9ca5.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0a:2f:98:ec:b5:f4:fd:34:78:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=99d37ebe-24db-4c24-b7e0-c0222a3ef35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:0f:e4:1f:f2:04:ee:c7:0b:0c:bb:45:49: 59:e2:95:64:e3:6f:a3:be:6c:d0:3b:a1:37:7c:14: 87:6c:63:e0:7d:a3:d3:2c:98:20:e8:cc:31:86:59: 47:59:7d:b3:a9:8f:31:bf:57:da:40:02:35:79:8b: b0:7f:2c:e6:55:f4:f0:3d:53:84:0f:b6:ab:10:da: 56:d5:92:bc:e6:0f:1e:fd:5c:3e:17:5c:49:16:ad: e5:cf:6b:2f:74:19:c6:62:2b:d2:b4:88:28:d3:74: 11:44:ba:7d:bc:dd:b5:1c:fe:0a:04:be:fe:db:00: 74:d9:c0:f5:15:1d:6e:55:e9:f2:a9:21:70:7a:d1: b2:42:87:22:04:e1:cb:a1:87:41:35:7c:01:53:f7: b2:a9:0b:2b:14:85:56:f6:c0:64:d8:bd:be:3f:7e: cd:56:47:10:8a:89:ba:b4:2a:2a:c1:fc:81:23:0b: 13:2e:31:52:10:ce:ae:28:97:57:09:b2:93:0c:90: e0:51:07:c6:2e:ee:74:fa:af:d4:23:93:f0:80:da: e3:ef:3b:7a:9c:8a:52:02:55:af:0a:e5:61:3f:71: 6e:c9:f3:ca:76:28:ad:78:fd:7d:79:92:15:75:8c: e5:43:cb:59:b8:af:78:9f:0d:21:7f:a8:dd:58:38: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A8:E5:30:8B:5E:60:C2:DC:EA:E3:4F:9C:55:14:09:AC:6B:CE:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ae98a3d-af6f-3e91-936f-1a5943ba9ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9d:e0:2d:e0:21:30:30:55:98:54:b0:70:a2:42:52:d7:7e: 95:60:b1:4b:4d:59:ba:90:5a:b9:04:fb:3a:95:74:6d:1a:fe: b7:17:c6:06:b6:33:a0:9c:af:51:af:13:bb:1f:4d:8b:fa:6d: f9:94:0d:a6:70:7d:e2:ba:28:94:07:b7:0c:e3:f9:99:fd:76: 84:cd:c5:3d:b1:4a:a9:d2:c2:01:e4:1a:d8:5e:f5:c6:7f:9a: 3d:3a:a0:d6:66:98:2f:4a:33:cf:01:d7:06:e0:be:7e:38:2c: 01:4e:2c:ac:4e:eb:62:77:d2:0c:0b:81:bc:5c:01:6a:44:7b: e4:16:5d:ea:6b:c5:6f:9f:75:f0:4b:33:df:78:b8:26:bc:85: f2:19:c0:1a:b5:00:71:a5:1d:54:f4:d4:07:d0:da:76:ac:d4: 67:83:4c:b8:23:6e:3f:ac:87:ea:c3:39:ee:7b:76:59:75:40: a0:fb:86:d0:26:cb:6e:b6:04:fa:19:fb:2b:d3:64:a1:80:6d: 1c:cd:8a:79:4b:54:09:57:d8:26:db:c6:5d:28:8f:bb:ef:15: 96:8a:48:86:20:c7:6c:95:13:64:65:2b:fd:c9:d5:9f:fc:fd: 59:d3:13:96:b4:fb:96:05:69:68:52:84:7b:90:a6:d5:cf:3b: 59:5a:d8:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQovmOy19P00eHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OTlkMzdlYmUtMjRkYi00YzI0LWI3ZTAtYzAyMjJhM2VmMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZAP5B/yBO7HCwy7RUlZ4pVk42+jvmzQO6E3 fBSHbGPgfaPTLJgg6MwxhllHWX2zqY8xv1faQAI1eYuwfyzmVfTwPVOED7arENpW 1ZK85g8e/Vw+F1xJFq3lz2svdBnGYivStIgo03QRRLp9vN21HP4KBL7+2wB02cD1 FR1uVenyqSFwetGyQociBOHLoYdBNXwBU/eyqQsrFIVW9sBk2L2+P37NVkcQiom6 tCoqwfyBIwsTLjFSEM6uKJdXCbKTDJDgUQfGLu50+q/UI5PwgNrj7zt6nIpSAlWv CuVhP3FuyfPKdiiteP19eZIVdYzlQ8tZuK94nw0hf6jdWDgoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqo5TCLXmDC3OrjT5xVFAmsa85qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGFlOThhM2QtYWY2Zi0z ZTkxLTkzNmYtMWE1OTQzYmE5Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2d4C3gITAwVZhUsHCiQlLXfpVgsUtNWbqQWrkE+zqVdG0a/rcXxga2 M6Ccr1GvE7sfTYv6bfmUDaZwfeK6KJQHtwzj+Zn9doTNxT2xSqnSwgHkGthe9cZ/ mj06oNZmmC9KM88B1wbgvn44LAFOLKxO62J30gwLgbxcAWpEe+QWXeprxW+fdfBL M994uCa8hfIZwBq1AHGlHVT01AfQ2nas1GeDTLgjbj+sh+rDOe57dll1QKD7htAm y262BPoZ+yvTZKGAbRzNinlLVAlX2Cbbxl0oj7vvFZaKSIYgx2yVE2RlK/3J1Z/8 /VnTE5a0+5YFaWhShHuQptXPO1la2LU= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:43 2025 by rpki-client