$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93b6027c-af5f-3e3d-a6b3-cbbfd53cd99b.roa File: 93b6027c-af5f-3e3d-a6b3-cbbfd53cd99b.roa (raw, json) Hash identifier: hAJvEP/DZtwbn2KfbDmAoor6gWY6oVQzMwYOFrxmSYM= Subject key identifier: F2:91:C0:34:4E:90:21:66:FA:36:D3:20:DB:46:C6:90:B0:DE:48:81 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AEDB456AC13B7A416160 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93b6027c-af5f-3e3d-a6b3-cbbfd53cd99b.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ae:db:45:6a:c1:3b:7a:41:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=b5ed3cd4-c9cd-49e4-a131-593f2c2b0e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:1f:70:b6:59:0a:1e:6f:a7:13:36:95:c0: 43:81:a0:02:76:25:8b:cb:b9:42:19:63:71:48:2c: 74:19:58:ca:c8:0f:09:df:13:36:02:4a:a8:45:3d: d6:7b:17:6f:6d:ba:40:8c:72:19:d5:32:09:4c:75: 53:ac:72:8c:0c:da:ad:47:23:20:af:24:3e:23:de: 94:ff:59:76:56:7b:09:ab:5d:51:c9:75:db:3a:05: 9a:13:72:80:82:b9:6a:ff:0b:3f:9d:b3:2e:1c:3b: 4b:0e:44:db:16:94:37:8d:41:bc:8c:16:7a:a2:a8: 55:9c:16:59:52:c0:70:a9:60:22:ef:8a:59:48:19: 10:3d:78:82:2d:b6:7e:7b:59:1e:c0:75:b0:2d:f1: 19:ec:08:63:95:9c:62:ad:c6:dc:56:d4:5b:09:55: ec:31:e5:92:c6:9e:df:b2:7b:32:1f:18:e9:61:bf: a1:01:15:de:f1:c8:b4:14:59:00:1f:71:2d:16:a8: 26:4d:6f:cd:44:b6:c0:07:e2:93:6c:bc:f2:74:de: 74:47:40:24:9f:11:ca:c9:b2:d1:a2:5f:8c:7e:37: 18:e8:24:53:64:02:09:29:d8:8c:20:80:e4:bc:09: ab:5c:8a:bc:04:26:b5:fe:2a:44:04:21:67:11:f7: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:91:C0:34:4E:90:21:66:FA:36:D3:20:DB:46:C6:90:B0:DE:48:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93b6027c-af5f-3e3d-a6b3-cbbfd53cd99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c8:31:f4:eb:4d:0a:db:23:c5:a2:de:2d:c6:40:ae:89:0f: f8:f2:d9:d9:23:54:9a:ee:44:01:c2:b6:8e:01:a2:ff:0f:82: 3f:24:4c:a2:b3:6e:81:1c:12:fa:6f:d8:b5:b6:c2:41:f8:58: 74:2a:d2:54:1c:f0:6f:cf:92:3a:1c:a9:99:1d:8b:f3:77:20: f8:fc:4d:76:f3:b9:eb:21:03:04:32:b9:69:79:82:7e:da:83: f7:89:18:8e:14:af:eb:44:f7:7f:4c:39:1c:81:22:9b:fb:f4: 18:63:b7:48:b3:6a:a3:0f:4a:06:23:41:1f:7a:fb:5c:25:4b: 88:72:d9:3a:d1:02:5e:9b:86:5c:aa:13:46:11:82:0f:ac:6e: 7e:dd:26:d0:2a:5a:db:77:50:b9:d4:1b:bb:4c:b3:2c:fc:e0: 53:ae:e8:d5:83:6c:b6:83:ab:9e:10:97:7b:c5:f1:5f:b6:2a: 17:1d:2c:26:44:b2:8c:fa:a1:a6:d6:21:b5:72:a6:cd:a4:96: b3:58:00:a8:5b:00:61:16:b0:ad:d8:8b:24:73:e2:bd:37:48: 8c:f7:3e:d0:12:22:c1:ac:62:89:7d:ba:40:0f:2e:40:50:2a: fd:3a:52:ad:66:9c:4a:4c:61:f3:e5:98:c2:dc:8f:a3:70:42: 10:7d:73:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql67bRWrBO3pBYWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YjVlZDNjZDQtYzljZC00OWU0LWExMzEtNTkzZjJjMmIwZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0wfcLZZCh5vpxM2lcBDgaACdiWLy7lCGWNx SCx0GVjKyA8J3xM2AkqoRT3WexdvbbpAjHIZ1TIJTHVTrHKMDNqtRyMgryQ+I96U /1l2VnsJq11RyXXbOgWaE3KAgrlq/ws/nbMuHDtLDkTbFpQ3jUG8jBZ6oqhVnBZZ UsBwqWAi74pZSBkQPXiCLbZ+e1kewHWwLfEZ7AhjlZxircbcVtRbCVXsMeWSxp7f snsyHxjpYb+hARXe8ci0FFkAH3EtFqgmTW/NRLbAB+KTbLzydN50R0AknxHKybLR ol+MfjcY6CRTZAIJKdiMIIDkvAmrXIq8BCa1/ipEBCFnEfc30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKRwDROkCFm+jbTINtGxpCw3kiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTNiNjAyN2MtYWY1Zi0z ZTNkLWE2YjMtY2JiZmQ1M2NkOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTIMfTrTQrbI8Wi3i3GQK6JD/jy2dkjVJruRAHCto4Bov8Pgj8kTKKz boEcEvpv2LW2wkH4WHQq0lQc8G/PkjocqZkdi/N3IPj8TXbzueshAwQyuWl5gn7a g/eJGI4Ur+tE939MORyBIpv79Bhjt0izaqMPSgYjQR96+1wlS4hy2TrRAl6bhlyq E0YRgg+sbn7dJtAqWtt3ULnUG7tMsyz84FOu6NWDbLaDq54Ql3vF8V+2KhcdLCZE soz6oabWIbVyps2klrNYAKhbAGEWsK3YiyRz4r03SIz3PtASIsGsYol9ukAPLkBQ Kv06Uq1mnEpMYfPlmMLcj6NwQhB9c1s= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:46 2025 by rpki-client