$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99e99c01-71d7-38b0-b504-024bec7c6183.roa File: 99e99c01-71d7-38b0-b504-024bec7c6183.roa (raw, json) Hash identifier: 0Om1AeHJkENsKknqJZDm3D6LIywDpIrSaO/uVQbQAYM= Subject key identifier: E4:8D:6C:F0:BE:B7:19:16:FD:F9:67:04:BD:96:1F:D1:DC:CF:3D:4F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97ACA8937D42EFC2223540 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99e99c01-71d7-38b0-b504-024bec7c6183.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ac:a8:93:7d:42:ef:c2:22:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=c7fb050b-453c-4c23-95af-b761aedef009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:26:a9:1f:6f:61:f9:c2:7e:ed:7b:b7:e8:0a: 79:db:af:cb:91:63:bb:23:24:8b:8b:28:ff:f9:a9: 88:35:10:ca:4b:bc:3e:ef:2c:fe:81:15:bd:e0:7d: 3a:b4:9c:fd:e0:ba:d1:13:cc:88:01:b5:50:7c:81: 21:79:88:7a:eb:07:51:df:7e:19:a2:f9:99:f6:a9: f8:07:80:84:ed:d2:84:96:63:da:ef:83:71:db:24: b3:39:5f:bd:24:a3:b7:22:a4:83:78:44:c3:7a:ff: 03:c0:be:18:d9:89:90:cb:85:d6:a0:12:3a:ae:7e: 83:b1:eb:f4:30:b1:78:62:3e:b4:7f:2d:6b:57:c7: f7:bd:9e:97:9f:f1:4d:9b:f6:da:62:74:8c:cb:20: 1e:c9:61:a8:86:b4:3f:52:a7:8a:8d:b1:f0:ff:fc: bc:1a:9a:9e:56:28:e6:11:3b:a0:e3:b6:18:6e:7c: 0f:1d:71:40:e2:1f:65:ea:ed:4b:8f:b0:6d:5b:d6: 17:94:56:98:2c:2b:91:e0:33:db:72:99:34:b4:87: bf:68:14:84:83:bc:c9:5a:61:c0:10:2e:31:b6:18: 29:3a:03:67:e7:4c:70:c0:1d:d0:b6:56:a5:55:fe: 07:fe:88:b9:6f:24:00:d0:ca:0b:96:2c:fa:e0:38: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8D:6C:F0:BE:B7:19:16:FD:F9:67:04:BD:96:1F:D1:DC:CF:3D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99e99c01-71d7-38b0-b504-024bec7c6183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4d:88:d3:19:15:7d:b2:4a:ac:37:e4:e6:4b:c3:7f:50:c0: 1a:2c:b0:75:7c:df:d8:80:22:48:04:83:03:cb:59:b9:79:85: 68:27:11:3c:db:9a:a0:9b:6d:bc:62:bd:17:ac:a4:bc:62:dd: 9e:9f:68:6d:00:b7:ad:b8:f2:e7:da:f7:d0:b9:6c:b8:ab:bc: e7:1f:77:97:03:c6:08:2c:95:f5:34:5d:5e:af:cc:c9:86:63: 92:c2:43:b0:2d:b3:09:ad:7b:79:4d:20:32:cc:63:27:b2:c0: 62:50:09:a1:df:44:d2:3a:26:20:1e:a5:f4:e1:c0:96:27:ec: 76:6a:e0:60:17:27:4b:5f:dc:8c:a9:cc:b8:c2:e7:91:30:0f: 37:6b:a0:e6:12:b3:60:77:7a:5c:2d:b5:24:9c:04:6e:6f:04: da:31:ea:ac:80:be:fd:62:aa:e9:2b:a0:b9:62:b3:bd:3d:a1: df:bf:e0:77:03:5e:99:34:9b:30:cb:90:90:83:12:05:3b:a2: f1:48:a1:3e:cf:b4:98:ec:e4:83:76:3c:4d:fb:75:6d:73:59: 03:a0:67:61:d5:db:38:7e:4e:26:f4:e0:e8:a2:3b:08:45:4d: 25:60:1b:d5:d9:41:e1:36:5b:f6:32:35:2a:ce:f1:c8:61:41: 7c:66:14:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6yok31C78IiNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YzdmYjA1MGItNDUzYy00YzIzLTk1YWYtYjc2MWFlZGVmMDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCapH29h+cJ+7Xu36Ap526/LkWO7IySLiyj/ +amINRDKS7w+7yz+gRW94H06tJz94LrRE8yIAbVQfIEheYh66wdR334ZovmZ9qn4 B4CE7dKElmPa74Nx2ySzOV+9JKO3IqSDeETDev8DwL4Y2YmQy4XWoBI6rn6Dsev0 MLF4Yj60fy1rV8f3vZ6Xn/FNm/baYnSMyyAeyWGohrQ/UqeKjbHw//y8GpqeVijm ETug47YYbnwPHXFA4h9l6u1Lj7BtW9YXlFaYLCuR4DPbcpk0tIe/aBSEg7zJWmHA EC4xthgpOgNn50xwwB3QtlalVf4H/oi5byQA0MoLliz64DjGMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSNbPC+txkW/flnBL2WH9Hczz1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTllOTljMDEtNzFkNy0z OGIwLWI1MDQtMDI0YmVjN2M2MTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJNiNMZFX2ySqw35OZLw39QwBossHV839iAIkgEgwPLWbl5hWgnETzb mqCbbbxivRespLxi3Z6faG0At6248ufa99C5bLirvOcfd5cDxggslfU0XV6vzMmG Y5LCQ7Atswmte3lNIDLMYyeywGJQCaHfRNI6JiAepfThwJYn7HZq4GAXJ0tf3Iyp zLjC55EwDzdroOYSs2B3elwttSScBG5vBNox6qyAvv1iqukroLlis709od+/4HcD Xpk0mzDLkJCDEgU7ovFIoT7PtJjs5IN2PE37dW1zWQOgZ2HV2zh+Tib04OiiOwhF TSVgG9XZQeE2W/YyNSrO8chhQXxmFKM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:50 2025 by rpki-client