$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/964f948a-47d5-38a7-a527-3dc65c67434c.roa File: 964f948a-47d5-38a7-a527-3dc65c67434c.roa (raw, json) Hash identifier: xh7rjsLfOkp3kf6LjjiCm73GiSl3OkNEqj2z43wcHDE= Subject key identifier: 72:80:39:59:8E:50:33:9B:CE:5E:69:0A:0C:32:D0:4F:92:0F:25:FE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFC4E2B814D2DFAFDCD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/964f948a-47d5-38a7-a527-3dc65c67434c.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fc:4e:2b:81:4d:2d:fa:fd:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=d5caaada-227b-4943-a8e5-208e1849ed00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:72:c7:60:60:63:82:1e:03:b5:f4:31:26: 02:92:f0:7a:d3:3a:8b:02:76:db:98:b9:5a:17:45: ee:3a:1f:5e:27:de:1e:c7:bd:59:63:6d:a1:f8:db: 6a:b0:e9:32:5b:63:90:08:df:4d:12:14:25:4a:8e: 3e:f4:e1:b8:ab:66:73:6e:17:85:86:99:7b:1a:7a: 4b:e4:26:2c:ba:6b:8f:03:71:23:aa:5f:c3:5e:f5: 89:0b:13:0b:65:0b:c7:1b:77:32:4e:0b:02:d5:23: 3c:e1:17:87:05:48:84:19:bb:30:d2:6a:da:a1:9d: f7:9e:f1:35:d8:61:9b:79:49:67:08:7a:e1:3b:7d: 60:02:5c:25:1d:6a:53:fa:c5:c0:d3:38:f0:b3:65: a8:d2:ce:ca:21:c6:3e:32:6e:77:93:06:b7:39:18: f7:1d:a9:74:f4:40:03:e3:f8:8f:09:0e:a2:29:9d: a9:c6:fb:55:19:a0:67:cc:e8:80:82:b2:4f:c8:8c: 2b:e1:88:0a:c7:61:5e:30:a6:ad:39:fd:94:4b:20: 1c:89:11:01:fc:6a:bb:f9:79:3f:30:a1:bc:a4:d0: a7:65:82:40:ad:cd:97:81:62:47:00:90:83:30:f1: 4c:c5:bf:06:da:fb:5b:ae:70:7d:f1:d9:58:48:53: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:80:39:59:8E:50:33:9B:CE:5E:69:0A:0C:32:D0:4F:92:0F:25:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/964f948a-47d5-38a7-a527-3dc65c67434c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:cd:5d:6a:c8:95:b1:bb:f7:ff:52:99:6a:68:92:1e:fb:ab: 1b:e1:92:57:f0:cd:71:1e:dd:0e:a0:b2:ad:e8:58:f5:d9:5a: 7f:45:f1:df:1c:ed:25:53:a5:67:10:1f:b9:95:09:b3:a9:af: b0:55:36:6b:01:84:25:6d:2f:82:a5:e9:e1:29:aa:f9:e3:0b: db:39:bc:25:f3:40:60:04:f2:26:f5:67:38:97:a1:b4:be:05: b1:06:55:f5:0f:9c:cf:eb:b6:0d:68:c6:eb:ba:a4:fe:3d:2d: 85:a6:42:fd:68:79:e9:b6:a2:68:24:50:05:7f:bb:48:b0:3f: b4:7b:92:39:79:f1:37:57:9c:5e:eb:12:5c:81:27:4c:83:8b: aa:8d:61:16:e7:22:00:8c:14:12:08:58:ee:e5:e9:68:bc:1f: 34:d0:bb:42:26:bd:1e:2f:8a:ec:7d:fa:81:6b:c8:11:89:52: b9:8f:2e:03:e7:d9:a6:fa:51:b6:d5:01:bd:ba:04:13:5a:4e: e1:ae:ca:ac:da:da:cb:cf:73:76:29:43:b6:c9:c7:cb:10:15: 5a:6b:a5:0b:4e:d1:3d:40:f2:59:a8:18:66:32:db:59:c6:3f: 3c:b1:e1:ba:bf:6e:5e:30:72:aa:26:db:9e:6c:00:bc:46:31: bb:23:dc:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPxOK4FNLfr9zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDVjYWFhZGEtMjI3Yi00OTQzLWE4ZTUtMjA4ZTE4NDllZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3dyx2BgY4IeA7X0MSYCkvB60zqLAnbbmLla F0XuOh9eJ94ex71ZY22h+NtqsOkyW2OQCN9NEhQlSo4+9OG4q2ZzbheFhpl7GnpL 5CYsumuPA3Ejql/DXvWJCxMLZQvHG3cyTgsC1SM84ReHBUiEGbsw0mraoZ33nvE1 2GGbeUlnCHrhO31gAlwlHWpT+sXA0zjws2Wo0s7KIcY+Mm53kwa3ORj3Hal09EAD 4/iPCQ6iKZ2pxvtVGaBnzOiAgrJPyIwr4YgKx2FeMKatOf2USyAciREB/Gq7+Xk/ MKG8pNCnZYJArc2XgWJHAJCDMPFMxb8G2vtbrnB98dlYSFObPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKAOVmOUDObzl5pCgwy0E+SDyX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTY0Zjk0OGEtNDdkNS0z OGE3LWE1MjctM2RjNjVjNjc0MzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7NXWrIlbG79/9SmWpokh77qxvhklfwzXEe3Q6gsq3oWPXZWn9F8d8c 7SVTpWcQH7mVCbOpr7BVNmsBhCVtL4Kl6eEpqvnjC9s5vCXzQGAE8ib1ZziXobS+ BbEGVfUPnM/rtg1oxuu6pP49LYWmQv1oeem2omgkUAV/u0iwP7R7kjl58TdXnF7r ElyBJ0yDi6qNYRbnIgCMFBIIWO7l6Wi8HzTQu0ImvR4viux9+oFryBGJUrmPLgPn 2ab6UbbVAb26BBNaTuGuyqza2svPc3YpQ7bJx8sQFVprpQtO0T1A8lmoGGYy21nG Pzyx4bq/bl4wcqom255sALxGMbsj3K8= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:44 2025 by rpki-client