$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa File: 9321b008-0f22-3d80-8c12-c151456cd1da.roa (raw, json) Hash identifier: fInUkfVLwoA87iVeXth7gUwe6iIyOrepPG80bYfUwyo= Subject key identifier: B7:31:3C:3B:A6:9A:D6:6B:CA:C6:72:9A:A3:B7:C1:EB:49:64:E4:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1B57C66EF4AD0E26C180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1b:57:c6:6e:f4:ad:0e:26:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=bd059fcd-d7f9-446f-81d7-106a957c600a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:45:26:2b:a6:29:db:3b:5f:2b:fe:85:7e: f6:5a:bd:d6:08:06:05:fb:b5:94:f1:f0:4a:cb:3c: d0:b2:8e:e6:f1:bc:77:9c:62:c4:7b:2c:43:e7:eb: 72:e6:ac:85:6d:cc:65:b9:3c:42:56:45:b4:8a:02: 0a:a6:ac:57:01:e2:86:bd:9a:b9:5a:0a:50:85:3b: 49:aa:b9:0f:4e:c5:a5:17:05:74:e5:e2:be:b6:24: 11:7d:9c:73:28:82:3c:71:8a:0d:6d:ef:6c:50:12: e6:8c:0f:31:66:23:9c:79:ec:ea:1a:53:fd:78:72: 08:e4:56:65:3b:1f:7f:b7:32:69:67:8d:6c:25:1e: db:6e:b2:ea:40:8b:43:82:71:01:b3:80:51:e0:7f: cd:b5:b5:28:b6:1d:dc:2b:96:9c:2f:ea:6f:9f:f7: ac:45:17:b9:35:67:30:75:f7:1c:71:88:1d:a3:6c: f2:83:18:c0:47:55:95:90:f9:83:6c:4a:11:15:a1: 08:fd:7b:a0:d8:37:00:71:75:a7:fa:99:94:b4:c8: 7c:ee:75:cb:c5:e9:dc:93:0c:a6:dd:d0:83:ad:a9: 79:c9:db:53:8b:0c:13:da:07:98:bc:59:ef:a4:76: 21:7a:c4:27:fc:47:16:df:43:01:f3:c4:94:4e:d5: 37:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:3C:3B:A6:9A:D6:6B:CA:C6:72:9A:A3:B7:C1:EB:49:64:E4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:71:40:b9:ab:bc:cd:63:d7:04:ad:ee:d8:36:c1:ff:49:80: b5:1e:79:44:e2:4b:b1:4f:59:d2:11:5e:31:cd:fa:10:9b:04: 34:71:55:13:da:03:4a:74:41:ee:e6:ac:cd:32:a3:71:68:6c: b9:0d:d0:66:2c:fa:9d:01:cc:e0:1c:30:c1:a8:90:c0:1f:43: 60:a8:0f:e5:e5:82:38:fb:b7:62:69:7c:82:ad:09:ef:ed:3e: 86:cc:80:1c:83:4f:21:31:c2:a5:b7:24:20:ca:57:05:6c:76: e5:23:64:26:cc:a5:5b:a4:fc:de:a2:63:1c:57:f5:44:72:cc: 8c:6c:3c:df:ae:ef:f3:03:32:51:80:a7:27:d4:6b:57:18:89: fb:48:5f:fa:63:7a:4b:a5:ff:9a:20:04:cb:72:03:da:1c:21: 6f:da:2e:0f:29:52:8a:47:f9:87:b9:60:71:04:48:cb:9c:23: c8:cd:81:8b:ae:e8:8b:24:b3:2e:d2:07:42:eb:8f:b6:e4:43: 8d:00:0a:8c:88:65:69:1b:18:43:5f:e1:47:8a:6c:cd:3c:db: ee:67:af:87:6b:64:66:6e:6d:16:1e:92:fa:d6:6e:e9:b2:93: bc:c3:a8:4d:be:ab:94:b5:18:69:d1:ec:3f:62:e9:cb:4d:62: 99:14:0d:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RtXxm70rQ4mwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YmQwNTlmY2QtZDdmOS00NDZmLTgxZDctMTA2YTk1N2M2MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFZFJiumKds7Xyv+hX72Wr3WCAYF+7WU8fBK yzzQso7m8bx3nGLEeyxD5+ty5qyFbcxluTxCVkW0igIKpqxXAeKGvZq5WgpQhTtJ qrkPTsWlFwV05eK+tiQRfZxzKII8cYoNbe9sUBLmjA8xZiOceezqGlP9eHII5FZl Ox9/tzJpZ41sJR7bbrLqQItDgnEBs4BR4H/NtbUoth3cK5acL+pvn/esRRe5NWcw dfcccYgdo2zygxjAR1WVkPmDbEoRFaEI/Xug2DcAcXWn+pmUtMh87nXLxenckwym 3dCDral5ydtTiwwT2geYvFnvpHYhesQn/EcW30MB88SUTtU3eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcxPDummtZrysZymqO3wetJZOTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTMyMWIwMDgtMGYyMi0z ZDgwLThjMTItYzE1MTQ1NmNkMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFxQLmrvM1j1wSt7tg2wf9JgLUeeUTiS7FPWdIRXjHN+hCbBDRxVRPa A0p0Qe7mrM0yo3FobLkN0GYs+p0BzOAcMMGokMAfQ2CoD+Xlgjj7t2JpfIKtCe/t PobMgByDTyExwqW3JCDKVwVsduUjZCbMpVuk/N6iYxxX9URyzIxsPN+u7/MDMlGA pyfUa1cYiftIX/pjekul/5ogBMtyA9ocIW/aLg8pUopH+Ye5YHEESMucI8jNgYuu 6Isksy7SB0Lrj7bkQ40ACoyIZWkbGENf4UeKbM082+5nr4drZGZubRYekvrWbumy k7zDqE2+q5S1GGnR7D9i6ctNYpkUDZw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:26 2025 by rpki-client