$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90a5cd07-700f-3775-a8d3-82d6f9de564c.roa File: 90a5cd07-700f-3775-a8d3-82d6f9de564c.roa (raw, json) Hash identifier: jPtNQWKNxNfG2pgPZyCjK1urkrdZsVGsam1hwHs/5aw= Subject key identifier: 6F:C5:01:7D:E2:A6:4D:23:66:FC:88:22:7B:68:80:D1:4C:9E:27:80 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFF6CADD23CB263283F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90a5cd07-700f-3775-a8d3-82d6f9de564c.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ff:6c:ad:d2:3c:b2:63:28:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=73f85f32-d8b0-475e-8112-321def5046de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:f8:86:81:cd:94:bf:84:7c:7f:24:f5:5a: 36:e1:58:12:b4:9f:d4:57:d9:a3:11:0c:22:38:ac: db:d3:ac:f1:fc:92:bb:81:8a:61:29:db:dc:a4:4e: 15:d1:1a:e3:7a:d7:13:71:d2:b8:63:0e:eb:e5:78: 5d:90:fd:be:de:ec:7c:f4:3c:b2:6a:3d:53:11:15: c8:8e:3c:94:b1:32:9b:55:04:68:53:e4:45:62:be: 73:85:3f:76:de:a0:76:ec:5f:a3:bf:19:e0:cd:fb: 53:b0:2f:53:d7:12:be:91:99:cc:83:79:b7:87:30: 25:d7:22:14:54:56:11:8f:41:55:9b:06:db:82:25: 7c:d0:42:9c:a2:84:5a:f9:97:be:4c:7b:6b:4a:49: e0:19:23:23:96:fa:25:f8:bc:68:74:5b:f2:62:17: 59:67:8a:76:be:a7:cb:74:31:93:22:7f:ab:7a:06: cb:39:12:a0:83:46:75:1c:65:00:11:d0:76:93:34: a8:f7:41:34:f5:0a:bd:8e:f7:72:b9:c6:48:cb:13: d0:6a:8d:c2:dc:85:c8:80:27:8e:ea:e3:da:d3:bc: a0:ff:89:e9:21:57:59:51:66:1c:53:c6:81:a7:b9: 47:76:07:37:ac:ce:66:1b:33:2c:2d:28:da:5c:13: 27:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C5:01:7D:E2:A6:4D:23:66:FC:88:22:7B:68:80:D1:4C:9E:27:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90a5cd07-700f-3775-a8d3-82d6f9de564c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:d8:72:61:38:4f:7c:b7:de:4f:79:9e:08:63:79:f2:c0:bc: 20:e2:8b:ec:2e:d0:58:dc:26:61:bb:ac:82:94:61:ba:23:87: 4b:2c:ba:79:c6:e3:c4:89:ff:e2:ab:ff:48:5e:5d:e0:ad:09: 37:49:3f:8a:03:db:f2:7b:2d:d4:70:2c:b4:98:49:24:ea:ed: e6:a1:37:31:c1:d3:3b:3a:d5:c6:e0:92:25:66:c9:8f:86:a4: 0c:ad:02:2f:4f:cd:ff:8f:f1:50:8a:28:8d:77:f2:a8:07:40: 48:0b:62:58:4e:de:01:97:99:2e:7a:7a:17:7d:ad:c4:d4:a2: 05:d4:13:38:f2:7a:e5:28:fa:33:41:c7:b6:e4:93:ff:29:d1: b1:5c:f8:d4:4f:6b:c8:73:66:e1:c5:dc:a2:3c:bb:9d:b3:af: 73:64:ed:b7:db:b9:c2:ac:86:5d:7c:f3:e7:bd:94:de:1d:40: bd:22:f7:ed:e7:79:28:9c:b9:99:d2:f0:86:8e:33:f4:eb:eb: 90:f9:36:5d:7b:77:d4:ca:7d:dc:81:54:33:2d:56:a6:e7:1f: 04:dc:30:79:6c:47:39:eb:46:b0:ac:cb:c2:9d:fe:d2:89:46: d8:e3:36:31:63:1b:06:8e:e6:55:7f:2d:10:7d:36:9e:52:25: 03:b7:db:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP9srdI8smMoP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NzNmODVmMzItZDhiMC00NzVlLTgxMTItMzIxZGVmNTA0NmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9P4hoHNlL+EfH8k9Vo24VgStJ/UV9mjEQwi OKzb06zx/JK7gYphKdvcpE4V0RrjetcTcdK4Yw7r5XhdkP2+3ux89Dyyaj1TERXI jjyUsTKbVQRoU+RFYr5zhT923qB27F+jvxngzftTsC9T1xK+kZnMg3m3hzAl1yIU VFYRj0FVmwbbgiV80EKcooRa+Ze+THtrSkngGSMjlvol+LxodFvyYhdZZ4p2vqfL dDGTIn+regbLORKgg0Z1HGUAEdB2kzSo90E09Qq9jvdyucZIyxPQao3C3IXIgCeO 6uPa07yg/4npIVdZUWYcU8aBp7lHdgc3rM5mGzMsLSjaXBMnfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/FAX3ipk0jZvyIIntogNFMnieAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTBhNWNkMDctNzAwZi0z Nzc1LWE4ZDMtODJkNmY5ZGU1NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbYcmE4T3y33k95nghjefLAvCDii+wu0FjcJmG7rIKUYbojh0ssunnG 48SJ/+Kr/0heXeCtCTdJP4oD2/J7LdRwLLSYSSTq7eahNzHB0zs61cbgkiVmyY+G pAytAi9Pzf+P8VCKKI138qgHQEgLYlhO3gGXmS56ehd9rcTUogXUEzjyeuUo+jNB x7bkk/8p0bFc+NRPa8hzZuHF3KI8u52zr3Nk7bfbucKshl188+e9lN4dQL0i9+3n eSicuZnS8IaOM/Tr65D5Nl17d9TKfdyBVDMtVqbnHwTcMHlsRznrRrCsy8Kd/tKJ RtjjNjFjGwaO5lV/LRB9Np5SJQO3298= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:00 2025 by rpki-client