$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa File: 9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa (raw, json) Hash identifier: 7eH60Vx4wBbEekI6NUHFLbCqoQ+IFn7rDmzPAVGdIZA= Subject key identifier: CE:73:4B:A7:30:F5:40:A9:42:7F:D8:52:81:AC:7A:D1:7A:B8:4F:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA39D3680A5284FAEA4D38080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 13335 IP address blocks: 172.68.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:36:80:a5:28:4f:ae:a4:d3:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=9884c7de-3665-4842-85bf-6aaac2342436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c8:b4:30:4a:34:73:97:4f:d0:fc:28:4c:fe: e5:e6:01:dd:16:80:68:0d:ba:99:19:b8:5e:a6:4d: 06:e9:8f:87:6a:60:7e:db:cb:ef:c3:f8:8b:e5:b1: 5f:12:ea:39:4e:83:85:19:b6:e9:02:29:ea:c5:2e: 43:21:5e:66:af:65:03:b3:b9:59:47:04:a9:83:66: 46:b1:17:28:b8:84:94:c6:92:94:82:f3:9f:2e:cb: 86:4c:15:bc:7a:c0:34:43:ee:2c:72:48:70:19:2c: 78:46:b8:c4:7f:ec:da:f7:86:7a:59:c8:56:5f:84: 61:4a:04:8f:36:58:12:35:22:ce:42:f9:b9:a8:ae: 25:02:92:f9:6a:e3:13:1b:37:1c:54:dd:fd:f5:18: 19:fa:3b:30:d5:58:56:49:11:85:64:ac:b9:59:14: 92:5a:b4:18:2f:68:f1:19:65:a3:15:57:f2:ed:e7: 1f:58:6e:6c:8d:6f:ed:b3:5f:95:bf:d0:c1:11:85: 21:ca:14:24:cd:ed:8f:b0:c5:71:8e:45:2e:2f:73: 95:95:dc:5b:f3:7b:6a:d7:45:c0:de:a6:a9:7c:82: 5d:6f:c3:32:26:95:18:11:d7:12:dc:32:41:69:93: c1:4f:e5:36:45:e6:c5:bf:60:a3:33:2f:71:ba:34: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:73:4B:A7:30:F5:40:A9:42:7F:D8:52:81:AC:7A:D1:7A:B8:4F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:95:82:0d:e0:27:c9:7b:ba:a1:81:40:8a:f3:60:4b:e3:ab: a8:1c:10:60:4b:c3:b5:74:c9:51:29:84:e5:49:78:be:b8:df: f8:b1:23:d3:c4:0c:fe:82:48:2b:ce:f9:25:5d:a8:40:b5:e8: 92:64:7a:8b:0e:9b:7a:02:3e:4e:ac:10:55:8f:f7:28:c4:79: 15:1b:b9:af:6f:f9:29:75:8d:b4:04:46:7c:5b:d3:f3:32:fb: 90:6e:00:b6:b0:2e:10:9e:8a:9a:80:06:1d:69:9c:e4:77:96: e9:29:74:b4:a7:b4:ac:75:b3:e7:c1:07:b9:99:49:cf:ec:68: eb:ed:8a:e0:5b:c5:a2:7f:d8:b0:99:20:67:20:15:d2:e4:f9: 18:81:4b:77:9f:8e:af:aa:f0:ec:e7:11:80:a7:8b:ae:6f:d5: 30:97:2f:26:41:39:37:6a:e5:ca:e4:82:ec:80:75:63:7c:2f: 11:d2:0d:ae:5a:79:3c:95:81:c6:4d:7e:5b:54:aa:72:a7:45: 91:6e:42:e8:d8:0f:e1:66:3d:f2:e7:a4:0d:ee:cc:a5:e7:ae: e8:a0:6f:f4:89:37:45:98:ab:cf:70:54:64:a0:4e:d6:61:6d: 9e:81:dc:ea:a4:da:61:c4:82:2c:f2:af:79:e4:89:47:ed:1a: a7:4d:25:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTaApShPrqTTgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTg4NGM3ZGUtMzY2NS00ODQyLTg1YmYtNmFhYWMyMzQyNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAici0MEo0c5dP0PwoTP7l5gHdFoBoDbqZGbhe pk0G6Y+HamB+28vvw/iL5bFfEuo5ToOFGbbpAinqxS5DIV5mr2UDs7lZRwSpg2ZG sRcouISUxpKUgvOfLsuGTBW8esA0Q+4sckhwGSx4RrjEf+za94Z6WchWX4RhSgSP NlgSNSLOQvm5qK4lApL5auMTGzccVN399RgZ+jsw1VhWSRGFZKy5WRSSWrQYL2jx GWWjFVfy7ecfWG5sjW/ts1+Vv9DBEYUhyhQkze2PsMVxjkUuL3OVldxb83tq10XA 3qapfIJdb8MyJpUYEdcS3DJBaZPBT+U2RebFv2CjMy9xujReWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5zS6cw9UCpQn/YUoGsetF6uE9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWQ5NzA2MWQtYjJjNS0z YjhiLTkwMDktZjU5NmYwYWM3ZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmVgg3gJ8l7uqGBQIrzYEvjq6gcEGBLw7V0yVEphOVJeL643/ixI9PE DP6CSCvO+SVdqEC16JJkeosOm3oCPk6sEFWP9yjEeRUbua9v+Sl1jbQERnxb0/My +5BuALawLhCeipqABh1pnOR3lukpdLSntKx1s+fBB7mZSc/saOvtiuBbxaJ/2LCZ IGcgFdLk+RiBS3efjq+q8OznEYCni65v1TCXLyZBOTdq5crkguyAdWN8LxHSDa5a eTyVgcZNfltUqnKnRZFuQujYD+FmPfLnpA3uzKXnruigb/SJN0WYq89wVGSgTtZh bZ6B3Oqk2mHEgizyr3nkiUftGqdNJYA= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:13 2025 by rpki-client