$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a86e2875-6486-34db-98be-d50c611a23a2.roa File: a86e2875-6486-34db-98be-d50c611a23a2.roa (raw, json) Hash identifier: pIGu2i4aqDjxQLRZrdOByHktofxs68fTnHepxbfWyUI= Subject key identifier: A5:0A:DD:7F:8C:30:10:11:9F:64:8F:56:25:95:62:F2:CA:5E:28:C1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328F5ADAE82669A19BE580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a86e2875-6486-34db-98be-d50c611a23a2.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8f:5a:da:e8:26:69:a1:9b:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=c3ad4087-fe6a-4afe-8266-834a1d4b93fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f1:8c:b2:78:e5:d4:3d:7a:6b:5d:d0:b5:95: a3:c0:31:60:49:a8:0b:7b:f7:60:96:42:bd:fc:55: 10:a6:0b:b5:13:b6:5a:9b:78:cf:78:46:73:e6:31: b6:2f:b1:7c:f6:5a:e6:92:73:d0:93:5c:9e:cb:8d: 73:77:c6:4c:1e:75:88:48:37:f1:a8:7f:32:1b:f8: 39:c2:14:f4:ad:e9:f2:f5:e2:1d:e1:66:64:14:21: 62:4e:13:31:d0:78:f7:c4:4e:dc:ae:cc:1b:7d:b4: e1:91:98:cd:3c:80:77:5f:a3:77:46:a6:1e:d4:73: 3c:4d:8b:59:e9:f2:cd:cf:8f:c7:19:0b:1e:10:61: 9c:bf:60:50:e6:06:72:5f:82:a5:a4:f9:13:fc:a8: 96:91:6e:f2:76:e0:63:14:99:81:c9:3c:ef:1b:f2: fd:07:85:4d:d3:e9:c7:d7:97:8a:19:41:55:c2:45: 26:22:3d:fd:2c:dd:5c:71:0a:cf:e1:51:ca:66:09: 5b:0e:75:36:8f:f2:ae:0b:5d:36:31:27:d0:1d:a8: 82:3e:af:db:b3:3c:f9:b9:fd:e6:8f:31:c8:d5:ce: ad:64:a2:b1:bb:ec:a1:3a:9c:ce:5e:d5:89:82:83: 5e:99:80:e5:36:ff:6d:de:30:e9:b8:aa:55:cb:97: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0A:DD:7F:8C:30:10:11:9F:64:8F:56:25:95:62:F2:CA:5E:28:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a86e2875-6486-34db-98be-d50c611a23a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0d:7a:6c:c5:f1:89:9b:32:e0:b2:4a:ae:8b:47:42:f3:97: d5:b7:d2:5a:3a:63:0d:22:a3:eb:60:3e:41:ed:45:ec:7b:a0: f4:21:9e:1e:ab:9c:90:b0:c9:0c:7b:64:e8:06:2d:1c:dd:e4: d2:63:72:ff:5d:d0:a6:06:31:a6:3a:cc:86:bc:86:f9:9a:da: c8:ee:df:af:b2:d0:94:90:9a:54:ea:1b:9f:b3:c7:47:10:36: a2:30:6a:ca:7c:e6:75:18:a8:59:58:fc:45:f4:19:d9:85:ea: 1e:ea:ae:c7:a3:f4:d4:1e:55:ff:2f:75:16:d9:19:9f:43:5c: 1a:d9:aa:7c:6c:0c:6f:fa:a5:9a:f1:11:17:fb:37:71:86:d3: a2:9a:d6:b1:7f:61:8b:b5:03:81:92:f5:1f:b4:70:7a:a6:5b: a3:08:3a:04:34:6b:09:6f:15:9d:dc:23:61:04:23:07:97:36: f7:11:36:14:d6:53:b9:f7:98:40:b6:5b:8c:98:71:47:cf:71: 60:22:e6:8f:24:13:31:c6:b9:a4:34:a4:af:a7:5d:70:77:2b: 60:42:d4:66:0e:74:81:dc:fd:1a:90:40:7a:0d:ff:61:35:9d: a3:88:04:b7:4f:0e:55:18:ed:23:6d:f9:b1:89:29:f2:23:64: ba:14:4c:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo9a2ugmaaGb5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YzNhZDQwODctZmU2YS00YWZlLTgyNjYtODM0YTFkNGI5M2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvGMsnjl1D16a13QtZWjwDFgSagLe/dglkK9 /FUQpgu1E7Zam3jPeEZz5jG2L7F89lrmknPQk1yey41zd8ZMHnWISDfxqH8yG/g5 whT0reny9eId4WZkFCFiThMx0Hj3xE7crswbfbThkZjNPIB3X6N3RqYe1HM8TYtZ 6fLNz4/HGQseEGGcv2BQ5gZyX4KlpPkT/KiWkW7yduBjFJmByTzvG/L9B4VN0+nH 15eKGUFVwkUmIj39LN1ccQrP4VHKZglbDnU2j/KuC102MSfQHaiCPq/bszz5uf3m jzHI1c6tZKKxu+yhOpzOXtWJgoNemYDlNv9t3jDpuKpVy5fgVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUK3X+MMBARn2SPViWVYvLKXijBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg2ZTI4NzUtNjQ4Ni0z NGRiLTk4YmUtZDUwYzYxMWEyM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwNemzF8YmbMuCySq6LR0Lzl9W30lo6Yw0io+tgPkHtRex7oPQhnh6r nJCwyQx7ZOgGLRzd5NJjcv9d0KYGMaY6zIa8hvma2sju36+y0JSQmlTqG5+zx0cQ NqIwasp85nUYqFlY/EX0GdmF6h7qrsej9NQeVf8vdRbZGZ9DXBrZqnxsDG/6pZrx ERf7N3GG06Ka1rF/YYu1A4GS9R+0cHqmW6MIOgQ0awlvFZ3cI2EEIweXNvcRNhTW U7n3mEC2W4yYcUfPcWAi5o8kEzHGuaQ0pK+nXXB3K2BC1GYOdIHc/RqQQHoN/2E1 naOIBLdPDlUY7SNt+bGJKfIjZLoUTHM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:32 2025 by rpki-client