$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa File: 8e39d174-0132-38c7-8666-3ddfd10c3f12.roa (raw, json) Hash identifier: QuuEYTw1z5d1NYi0bOWv0qrIEhG7/NIRADFCs0W6Ob8= Subject key identifier: 90:14:E8:B7:D9:6E:23:3E:B9:E0:93:9C:5D:11:BA:14:62:E7:D1:E8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AF3B3E1E6B196F6F1200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:af:3b:3e:1e:6b:19:6f:6f:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=046a0adf-9ed5-4e40-b448-33311f1f4e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:93:d4:9b:a9:5b:8e:36:45:71:47:70:26:b1: 85:28:91:51:a5:1b:5f:4d:fc:38:30:64:33:dd:c3: 4a:9d:d6:d5:61:10:28:be:0d:0d:53:2a:fc:56:c6: 96:3e:0e:fd:db:8e:30:12:50:a9:3c:ca:ab:55:29: cc:5f:a7:7a:35:6c:50:ce:fa:57:3c:e0:86:77:2a: 7e:57:76:e4:9e:68:13:16:cd:17:18:7d:79:f2:22: 3b:f2:b8:16:4b:e7:ff:90:4e:a8:fe:c4:6a:d8:a8: 6b:76:fc:49:a2:e0:2c:2f:a5:66:46:7e:d1:19:67: b1:cd:40:54:16:d0:74:ea:f9:d1:f3:2e:c1:ad:8c: 7f:7d:79:a2:6d:b9:c6:76:a2:65:c3:7b:58:54:50: b5:40:b7:d0:5c:74:f4:6a:5a:3e:fb:19:a1:64:3e: 86:72:21:46:35:5d:56:78:ae:2c:47:84:1f:46:ec: d9:b7:ac:f8:56:fc:b8:35:0b:9c:42:f7:64:ce:1e: 6b:8d:cf:5d:6e:ea:17:84:d3:53:d3:cc:e1:21:f0: 55:19:5f:25:3c:c6:bd:18:36:66:19:1a:98:50:ff: 08:82:1c:d0:90:eb:76:d8:13:05:0f:21:ad:0b:8c: b2:82:fc:05:1e:41:ce:3e:de:dc:d7:6e:45:f2:2f: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:14:E8:B7:D9:6E:23:3E:B9:E0:93:9C:5D:11:BA:14:62:E7:D1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:ad:66:ce:59:f9:74:14:78:55:75:2b:4d:26:63:06:d7:ad: 0d:d8:17:3b:72:3d:21:be:6e:3f:05:f0:e7:a1:6c:7a:cc:92: ad:5c:95:c3:8e:e0:1d:7c:42:96:55:3c:b4:7f:43:e1:fb:df: 1d:b2:a8:ab:8b:8b:f1:2b:55:d4:78:46:77:d2:91:2c:dc:d9: d0:08:99:b9:5e:c8:e3:5b:9b:fb:41:6d:24:83:72:14:4b:a5: 22:a7:21:81:1d:ab:c1:b4:88:70:c3:7b:dc:9c:06:56:8b:39: 37:f9:f3:0b:70:e9:c7:84:0a:2c:12:80:e5:a4:e7:71:55:89: 48:60:5f:d2:90:60:22:c3:7f:6b:40:ab:01:92:76:fd:1c:d3: 6c:54:7e:32:5b:96:f0:56:82:ac:34:3f:08:0b:32:7e:08:df: 88:68:2c:b3:ba:0c:e0:67:69:8a:0a:f1:a7:28:bd:16:8a:6c: d5:8f:3f:49:e2:79:65:d3:93:81:13:0c:21:83:ab:1f:c9:cf: 4d:b4:44:0f:8b:6f:b0:cb:4d:ef:fd:a2:cf:bd:ff:67:ca:6d: fe:d8:33:6a:97:63:38:41:d0:01:76:19:e9:2c:ab:cb:86:dc: c5:51:fc:74:80:dc:21:52:2b:15:98:68:12:08:a8:cc:6d:3a: 76:b0:af:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql687Ph5rGW9vEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MDQ2YTBhZGYtOWVkNS00ZTQwLWI0NDgtMzMzMTFmMWY0ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZPUm6lbjjZFcUdwJrGFKJFRpRtfTfw4MGQz 3cNKndbVYRAovg0NUyr8VsaWPg79244wElCpPMqrVSnMX6d6NWxQzvpXPOCGdyp+ V3bknmgTFs0XGH158iI78rgWS+f/kE6o/sRq2KhrdvxJouAsL6VmRn7RGWexzUBU FtB06vnR8y7BrYx/fXmibbnGdqJlw3tYVFC1QLfQXHT0alo++xmhZD6GciFGNV1W eK4sR4QfRuzZt6z4Vvy4NQucQvdkzh5rjc9dbuoXhNNT08zhIfBVGV8lPMa9GDZm GRqYUP8IghzQkOt22BMFDyGtC4yygvwFHkHOPt7c125F8i+DYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAU6LfZbiM+ueCTnF0RuhRi59HoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGUzOWQxNzQtMDEzMi0z OGM3LTg2NjYtM2RkZmQxMGMzZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCtZs5Z+XQUeFV1K00mYwbXrQ3YFztyPSG+bj8F8OehbHrMkq1clcOO 4B18QpZVPLR/Q+H73x2yqKuLi/ErVdR4RnfSkSzc2dAImbleyONbm/tBbSSDchRL pSKnIYEdq8G0iHDDe9ycBlaLOTf58wtw6ceECiwSgOWk53FViUhgX9KQYCLDf2tA qwGSdv0c02xUfjJblvBWgqw0PwgLMn4I34hoLLO6DOBnaYoK8acovRaKbNWPP0ni eWXTk4ETDCGDqx/Jz020RA+Lb7DLTe/9os+9/2fKbf7YM2qXYzhB0AF2Geksq8uG 3MVR/HSA3CFSKxWYaBIIqMxtOnawryQ= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:42 2025 by rpki-client