$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa File: 9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa (raw, json) Hash identifier: n7jpvBBFaMDIOnScgHW4zSk0hvexEvdyomrfwrvHIvc= Subject key identifier: EE:E8:4A:B8:00:54:F7:A2:F8:CF:66:72:AD:51:70:05:C1:3F:DF:C9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328F1D9746826FADC75F40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8f:1d:97:46:82:6f:ad:c7:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=a1bd0065-afe5-4463-abe4-0aebf2b4d9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:2e:e5:e5:f7:87:15:ac:92:1c:52:5c:7c: ca:49:c4:5a:79:05:bf:ab:2d:60:a1:ec:3f:ab:a5: 42:76:c0:83:c5:02:8f:e1:eb:f5:64:8d:aa:71:bd: 1c:c5:67:85:ae:d5:88:78:52:29:4e:78:2c:fc:74: 03:25:a6:20:0f:b5:2b:9d:0f:17:77:7d:5f:0a:6f: 37:8f:61:ae:07:05:83:75:a0:ab:00:34:b4:87:df: 5d:f4:e3:1c:12:a6:26:47:4b:0a:49:b0:4c:d7:c5: 53:6d:f8:57:05:77:72:3a:68:2e:65:93:a2:4c:f7: e6:73:ab:48:fb:00:01:68:cc:f3:fb:a7:31:46:15: 04:56:4f:a0:06:ae:1c:99:b5:e9:3c:d3:56:b9:3a: 13:0d:2b:cc:dc:37:1d:c7:bd:ba:4d:ef:1d:85:b5: 1a:bd:e9:c0:85:fd:58:7b:85:c3:86:c2:1e:06:be: 08:b5:25:f7:02:7f:fb:af:2f:c8:a6:9d:3b:3c:d0: a7:88:95:c0:0e:73:fc:d8:89:eb:8e:1b:19:94:6f: f5:36:42:e4:a8:a5:3b:d3:8c:63:7f:f2:c2:29:4f: 00:4a:ef:fe:b4:59:c3:53:33:57:e1:f7:f8:7c:c2: 28:b8:00:d9:21:7f:f2:94:51:78:53:07:bd:e0:cd: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E8:4A:B8:00:54:F7:A2:F8:CF:66:72:AD:51:70:05:C1:3F:DF:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c5:ed:1c:7b:f1:e0:6b:eb:ee:25:da:ea:7b:49:d9:b0:ce: a5:eb:ea:50:cd:a6:67:24:33:57:66:99:1d:e3:b7:a4:c5:e6: 85:b8:ab:12:ed:cd:ff:51:da:43:8d:fe:cf:64:ee:70:bc:63: c9:f9:f1:e3:71:ad:e7:e5:12:7f:78:e8:c4:e8:b4:c1:3d:e2: 89:c1:46:4d:8a:ea:bd:55:cf:99:aa:57:01:8c:9e:36:58:86: 2b:e5:a4:53:0e:cc:02:dd:b2:1d:d0:da:9b:ff:01:44:3f:a8: d1:be:89:de:71:dc:39:20:ce:ac:42:1f:c4:2f:26:f9:f8:c1: 2d:c2:ab:35:0d:29:14:30:2f:4b:22:6f:26:6b:fc:17:c4:95: 8a:13:ab:f1:c2:90:fc:7f:f2:7b:63:66:ca:dd:75:44:7a:18: c4:f4:71:f2:3e:9d:2a:32:06:14:62:98:94:c8:22:a9:c8:52: c0:a6:60:60:11:84:1e:2b:d2:d3:30:c4:52:50:02:df:58:3d: 0d:e2:0a:8f:75:25:d1:af:89:d3:ad:9b:92:da:dd:dd:6c:b9: b3:e2:d6:a7:ab:ad:de:fc:4f:bc:19:75:25:e3:1e:44:b1:59: 79:61:75:b1:32:37:41:2f:6a:61:84:4a:2a:e6:d2:7e:69:44: c6:7c:f7:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo8dl0aCb63HX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YTFiZDAwNjUtYWZlNS00NDYzLWFiZTQtMGFlYmYyYjRkOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp0u5eX3hxWskhxSXHzKScRaeQW/qy1goew/ q6VCdsCDxQKP4ev1ZI2qcb0cxWeFrtWIeFIpTngs/HQDJaYgD7UrnQ8Xd31fCm83 j2GuBwWDdaCrADS0h99d9OMcEqYmR0sKSbBM18VTbfhXBXdyOmguZZOiTPfmc6tI +wABaMzz+6cxRhUEVk+gBq4cmbXpPNNWuToTDSvM3Dcdx726Te8dhbUavenAhf1Y e4XDhsIeBr4ItSX3An/7ry/Ipp07PNCniJXADnP82InrjhsZlG/1NkLkqKU704xj f/LCKU8ASu/+tFnDUzNX4ff4fMIouADZIX/ylFF4Uwe94M0CQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7oSrgAVPei+M9mcq1RcAXBP9/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTI4NGYyMDQtNjE2My0z ZTA4LThmYTAtYzEyYmZjNGJjNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjF7Rx78eBr6+4l2up7SdmwzqXr6lDNpmckM1dmmR3jt6TF5oW4qxLt zf9R2kON/s9k7nC8Y8n58eNxreflEn946MTotME94onBRk2K6r1Vz5mqVwGMnjZY hivlpFMOzALdsh3Q2pv/AUQ/qNG+id5x3DkgzqxCH8QvJvn4wS3CqzUNKRQwL0si byZr/BfElYoTq/HCkPx/8ntjZsrddUR6GMT0cfI+nSoyBhRimJTIIqnIUsCmYGAR hB4r0tMwxFJQAt9YPQ3iCo91JdGvidOtm5La3d1subPi1qerrd78T7wZdSXjHkSx WXlhdbEyN0EvamGESirm0n5pRMZ89/4= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:20 2025 by rpki-client