$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a76a1c24-97bf-3635-bd45-2355138a3b66.roa File: a76a1c24-97bf-3635-bd45-2355138a3b66.roa (raw, json) Hash identifier: P8dE+BpXQOG6Wyr59K/Pb+ojnynRYqDAl6nOE0Fx094= Subject key identifier: 47:98:7C:A4:75:80:DB:46:46:BE:36:83:1C:74:63:1D:B8:A9:B6:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93282D5F61EBB54208CC340 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a76a1c24-97bf-3635-bd45-2355138a3b66.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:82:d5:f6:1e:bb:54:20:8c:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=38db0f7e-a54d-47b8-8d67-5bbdcf4fc791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:7e:45:4a:07:4a:f6:b2:76:93:3f:b9:0f: ae:32:dc:aa:22:04:a2:f2:76:8c:3c:b3:89:d5:da: 27:83:90:26:c1:dd:e2:e0:81:df:6d:17:de:99:f8: 5e:c7:5a:90:d8:7f:97:7b:38:8b:14:d6:3e:b2:37: 88:bf:b6:a8:11:47:87:dd:bf:23:43:7f:8f:15:c9: 49:69:c1:c0:4f:64:3d:de:a7:ae:a3:da:34:89:6e: bb:c0:d1:05:5a:b7:36:d5:b0:59:38:24:10:e7:07: fc:ce:8c:b6:d7:e4:f0:ed:4d:5a:df:1a:0f:7a:1a: a6:30:44:90:2f:6f:a1:cf:21:6b:12:71:d1:cc:e0: 8d:cb:07:04:ac:42:d3:d9:f1:c6:a3:0e:e9:15:4a: 41:bb:04:cf:01:99:96:0e:f6:89:47:6c:52:40:a8: 94:a6:a6:00:6e:4a:3e:96:7b:a0:50:0e:b4:d0:e5: 6a:13:96:da:0a:47:93:50:32:08:dd:3f:2a:f3:08: 2a:f4:84:72:0f:be:c3:de:0a:12:d3:ce:b8:84:c9: 17:20:0a:41:22:fb:11:eb:b3:f1:6b:a5:94:f5:de: 22:d8:5b:ec:92:50:0a:eb:0a:c3:91:16:55:47:32: cf:04:a5:fd:5e:24:ff:b0:8b:ba:09:da:ff:e9:b1: fd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:98:7C:A4:75:80:DB:46:46:BE:36:83:1C:74:63:1D:B8:A9:B6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a76a1c24-97bf-3635-bd45-2355138a3b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8a:c6:0e:b2:57:ad:02:ff:1a:87:5e:31:04:ea:8f:73:c4: 15:52:5f:e8:f9:f3:7c:54:66:14:54:ee:b7:a6:02:c2:39:37: bf:5c:75:17:9a:3d:0d:bc:a3:9d:d8:1a:2a:d4:80:e2:7f:b2: a2:e7:78:eb:37:7c:7b:36:ef:44:66:fc:49:37:63:27:05:dd: 33:f5:fa:b6:37:75:bb:65:ce:e2:f0:07:c3:2f:3b:b4:fc:dd: ed:f9:2a:5f:56:bd:f6:9e:de:a1:e4:81:4b:14:9b:f2:61:66: de:8b:85:16:93:aa:35:5f:4d:76:fd:99:38:38:d9:21:9b:48: c1:ae:62:9d:9d:53:d3:a8:e3:b0:47:e9:9c:ea:12:e2:4e:7a: 9c:ef:81:cb:f5:04:ac:95:13:ff:48:b9:32:57:60:08:f0:f6: 2a:b1:bc:75:4f:a8:23:c5:27:6a:4f:a3:5a:a3:de:3f:3b:f3: b6:d2:fd:89:e3:73:93:e1:6d:be:82:ad:8f:20:5e:95:da:a1: 4b:c5:09:a1:e7:07:41:f9:c3:9b:a3:1e:18:9f:6c:ec:e1:83: 74:9b:cc:26:fe:5d:48:12:fe:f8:17:2d:b0:6b:b1:ac:43:3a: 3a:70:f6:56:8f:dd:51:67:4e:df:a8:c3:a2:29:8e:6a:89:8f: ab:55:0e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoLV9h67VCCMw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MzhkYjBmN2UtYTU0ZC00N2I4LThkNjctNWJiZGNmNGZjNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVZ+RUoHSvaydpM/uQ+uMtyqIgSi8naMPLOJ 1dong5Amwd3i4IHfbRfemfhex1qQ2H+XeziLFNY+sjeIv7aoEUeH3b8jQ3+PFclJ acHAT2Q93qeuo9o0iW67wNEFWrc21bBZOCQQ5wf8zoy21+Tw7U1a3xoPehqmMESQ L2+hzyFrEnHRzOCNywcErELT2fHGow7pFUpBuwTPAZmWDvaJR2xSQKiUpqYAbko+ lnugUA600OVqE5baCkeTUDII3T8q8wgq9IRyD77D3goS0864hMkXIApBIvsR67Px a6WU9d4i2FvsklAK6wrDkRZVRzLPBKX9XiT/sIu6Cdr/6bH9owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeYfKR1gNtGRr42gxx0Yx24qbaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTc2YTFjMjQtOTdiZi0z NjM1LWJkNDUtMjM1NTEzOGEzYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKKxg6yV60C/xqHXjEE6o9zxBVSX+j583xUZhRU7remAsI5N79cdRea PQ28o53YGirUgOJ/sqLneOs3fHs270Rm/Ek3YycF3TP1+rY3dbtlzuLwB8MvO7T8 3e35Kl9Wvfae3qHkgUsUm/JhZt6LhRaTqjVfTXb9mTg42SGbSMGuYp2dU9Oo47BH 6ZzqEuJOepzvgcv1BKyVE/9IuTJXYAjw9iqxvHVPqCPFJ2pPo1qj3j8787bS/Ynj c5Phbb6CrY8gXpXaoUvFCaHnB0H5w5ujHhifbOzhg3SbzCb+XUgS/vgXLbBrsaxD Ojpw9laP3VFnTt+ow6IpjmqJj6tVDg4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:30 2025 by rpki-client