$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa File: 9881220c-9ede-3293-a734-f3010f86829e.roa (raw, json) Hash identifier: gSUx7ZprqVkB3BPPbIvVrBVEXOyTv65dy1qFHKo1/y8= Subject key identifier: 96:DC:A7:C3:B7:60:BD:D2:E8:FD:71:A2:C7:F9:BE:26:0C:92:C3:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93284257E5F64B43C7C10E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:84:25:7e:5f:64:b4:3c:7c:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ae82beb2-ce71-469e-ac17-95404afd78f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:9c:dd:a8:a3:fd:a3:68:86:11:32:bf:aa: c9:29:39:96:da:8d:a8:94:eb:ce:0a:cc:2e:e7:f4: ca:29:a9:a1:d6:b0:f0:bd:48:a7:75:15:62:97:b4: 54:4b:69:c2:9a:7e:37:0a:a5:80:9c:59:5c:44:33: a8:91:88:92:92:a4:36:15:4d:f6:f8:c6:56:a9:80: 4a:06:4d:4e:ab:ef:f2:db:4c:8f:6d:47:10:cf:d5: 4f:66:68:06:18:ab:58:7b:36:09:23:86:37:29:b1: d3:5e:ae:d5:f0:d1:9c:9f:33:5c:e9:20:81:1f:a7: f8:9d:cc:9b:20:f0:d7:aa:6a:14:be:80:01:e9:de: 35:5c:68:4c:d4:f2:59:3f:d0:f4:b8:fd:72:24:0c: 2c:e3:69:35:af:21:67:12:61:41:3a:54:3e:6c:46: 59:a1:ba:b5:a7:83:cb:5c:17:76:05:d4:3b:2d:6e: 6a:b5:d0:0f:72:f1:92:51:94:56:f8:7c:69:85:40: 1f:6f:bf:c6:c1:6a:cf:2a:a2:63:7d:32:05:7f:c7: 81:ae:ff:64:e9:ee:92:b5:bb:18:6e:f3:89:62:f3: 44:f5:37:dd:91:3d:85:90:37:4a:1f:4c:25:5f:b7: ad:a7:14:15:fa:f5:9d:ad:a6:4e:87:4a:a3:b5:eb: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:A7:C3:B7:60:BD:D2:E8:FD:71:A2:C7:F9:BE:26:0C:92:C3:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:66:e9:90:96:04:87:2e:a8:a6:ed:82:94:a0:94:83:36:62: 5d:f3:10:d7:c1:c9:12:9e:8a:8e:21:ee:0d:05:d0:7e:d9:0f: a3:25:70:ec:48:1c:4a:9d:39:a0:66:f7:dd:ed:bb:6c:7b:86: ab:48:e2:07:ea:bb:cf:47:87:15:c9:3c:da:c5:f1:8b:3e:77: e7:85:c8:1d:68:92:92:d1:61:b6:61:1b:bf:a1:5b:4d:1c:56: 5b:fb:e0:82:56:03:c7:00:bf:d5:e1:6d:64:6a:3a:65:40:74: 0d:fd:cf:5b:8e:85:ae:61:0f:42:97:90:3a:d2:8f:9a:a8:04: 8b:e6:d9:c4:72:a8:b6:11:a4:11:bc:46:df:20:a8:22:a3:00: df:5f:e5:31:54:25:f9:c7:73:46:85:1b:21:bd:90:9a:83:66: 2d:96:84:41:6f:8c:c4:ce:92:3d:44:29:c1:c6:1f:c8:67:69: 94:b1:92:ef:b0:95:ec:a6:18:66:5d:61:3f:b7:0e:12:4a:06: 69:ea:f2:89:6e:34:b4:ad:66:f2:22:75:0d:a5:bf:f6:ce:fc: 3b:eb:3d:5f:2e:5d:0d:56:0d:d7:a1:8d:93:f8:67:3c:4a:4e: 13:96:06:13:a7:c1:af:22:6d:9c:94:6d:26:db:db:b3:80:43: 52:68:26:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoQlfl9ktDx8EOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YWU4MmJlYjItY2U3MS00NjllLWFjMTctOTU0MDRhZmQ3OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ2c3aij/aNohhEyv6rJKTmW2o2olOvOCswu 5/TKKamh1rDwvUindRVil7RUS2nCmn43CqWAnFlcRDOokYiSkqQ2FU32+MZWqYBK Bk1Oq+/y20yPbUcQz9VPZmgGGKtYezYJI4Y3KbHTXq7V8NGcnzNc6SCBH6f4ncyb IPDXqmoUvoAB6d41XGhM1PJZP9D0uP1yJAws42k1ryFnEmFBOlQ+bEZZobq1p4PL XBd2BdQ7LW5qtdAPcvGSUZRW+HxphUAfb7/GwWrPKqJjfTIFf8eBrv9k6e6StbsY bvOJYvNE9TfdkT2FkDdKH0wlX7etpxQV+vWdraZOh0qjteub/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbcp8O3YL3S6P1xosf5viYMksMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg4MTIyMGMtOWVkZS0z MjkzLWE3MzQtZjMwMTBmODY4MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNm6ZCWBIcuqKbtgpSglIM2Yl3zENfByRKeio4h7g0F0H7ZD6MlcOxI HEqdOaBm993tu2x7hqtI4gfqu89HhxXJPNrF8Ys+d+eFyB1okpLRYbZhG7+hW00c Vlv74IJWA8cAv9XhbWRqOmVAdA39z1uOha5hD0KXkDrSj5qoBIvm2cRyqLYRpBG8 Rt8gqCKjAN9f5TFUJfnHc0aFGyG9kJqDZi2WhEFvjMTOkj1EKcHGH8hnaZSxku+w leymGGZdYT+3DhJKBmnq8oluNLStZvIidQ2lv/bO/DvrPV8uXQ1WDdehjZP4ZzxK ThOWBhOnwa8ibZyUbSbb27OAQ1JoJu0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:24 2025 by rpki-client