$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9550300-8dc1-3b01-a381-98b5a6e76317.roa File: a9550300-8dc1-3b01-a381-98b5a6e76317.roa (raw, json) Hash identifier: XIO9q6EfKpER4TE/UWVqEvnE7CbC4GiToqP4VjfIz9w= Subject key identifier: 5A:E2:ED:5F:33:7C:D5:99:23:45:F1:E8:D9:81:5F:27:BE:FF:63:81 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0571DA690B8E09392800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9550300-8dc1-3b01-a381-98b5a6e76317.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:05:71:da:69:0b:8e:09:39:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=905e90f3-97a3-48d7-ad5b-2e5d8a0e7d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:2a:1a:33:f1:a1:76:43:55:d9:13:e6:4b: 8f:37:ad:b1:52:92:a4:2e:78:5b:a1:f8:0a:31:fc: 2f:32:70:77:f2:09:62:92:50:db:2f:94:0b:73:b4: a3:7b:65:d0:12:0b:7f:9f:17:6d:65:09:07:29:25: 4f:b7:7a:da:50:ae:2a:cb:f4:b9:df:a9:04:51:f1: 7c:75:c5:30:c9:08:fa:bd:9f:9e:43:5b:4e:1a:49: 36:40:c3:60:4c:04:13:6d:5e:ab:70:4d:af:97:08: e5:b8:61:b4:e6:c6:c5:2c:9c:d5:a4:30:70:e1:a6: 32:ef:69:b7:a5:0f:31:d2:04:96:ac:41:b0:cc:d0: 51:d0:ee:e5:f2:69:ee:8e:69:1b:e4:74:e3:1f:1f: 59:21:b8:2d:a2:b8:68:27:1b:9e:d6:ff:5f:0b:a4: 7f:73:4c:69:d6:40:6a:fb:32:01:a2:4e:20:bb:34: f3:9b:e9:49:26:5f:5f:71:29:91:da:7e:db:9f:79: 2b:d9:e5:3d:b2:1f:33:5f:d6:4f:3d:8d:0d:7d:42: e6:fa:0d:01:74:54:48:a1:83:44:1c:c3:32:73:9f: 50:cd:29:3f:73:77:e2:f1:33:dd:38:97:b1:0b:81: 57:99:11:4b:41:1b:a0:b5:30:6f:75:b4:40:c9:c3: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E2:ED:5F:33:7C:D5:99:23:45:F1:E8:D9:81:5F:27:BE:FF:63:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9550300-8dc1-3b01-a381-98b5a6e76317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2e:55:24:1c:0a:a7:b7:a0:df:06:f9:fa:f9:61:f2:81:91: 55:3f:27:4c:48:99:72:4e:1d:1f:f4:3a:41:39:95:a3:28:08: 86:72:67:2b:e4:27:87:ab:dc:e3:ad:58:eb:4f:6c:cc:3d:c2: 33:db:d4:05:c1:bb:a0:87:e6:a7:4a:c5:0c:b1:6b:bf:90:41: fd:f8:a5:9d:0e:ad:97:17:3a:d1:56:8b:dd:f9:e1:54:5c:29: 39:6b:c6:0e:a8:52:55:63:92:db:c0:e4:d0:41:82:a7:47:c0: 97:e3:76:b4:67:80:e2:17:66:94:62:26:f9:49:ab:62:b6:ce: 2a:16:a3:19:4b:2e:c4:c1:1d:b8:b2:55:d3:a5:5d:04:b1:14: c1:52:23:7e:22:f5:64:c2:76:74:46:21:f8:94:bb:f4:34:53: 2c:67:41:23:35:aa:50:24:f7:b6:16:a3:4d:cc:ba:69:b0:ae: f3:3c:9f:ba:fb:15:8c:1a:66:90:d7:9d:9c:ba:0b:51:07:f1: 3b:7f:f8:72:9a:5f:a7:a7:96:06:74:ce:c0:0c:47:05:05:59: 9c:11:65:2d:c0:c4:2d:b5:80:31:10:ff:e1:52:ec:e9:5a:f4: 61:3f:eb:fe:c7:99:39:ce:bb:aa:a7:63:f0:7f:60:d9:e6:54: 81:40:bb:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQVx2mkLjgk5KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OTA1ZTkwZjMtOTdhMy00OGQ3LWFkNWItMmU1ZDhhMGU3ZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzsqGjPxoXZDVdkT5kuPN62xUpKkLnhbofgK MfwvMnB38gliklDbL5QLc7Sje2XQEgt/nxdtZQkHKSVPt3raUK4qy/S536kEUfF8 dcUwyQj6vZ+eQ1tOGkk2QMNgTAQTbV6rcE2vlwjluGG05sbFLJzVpDBw4aYy72m3 pQ8x0gSWrEGwzNBR0O7l8mnujmkb5HTjHx9ZIbgtorhoJxue1v9fC6R/c0xp1kBq +zIBok4guzTzm+lJJl9fcSmR2n7bn3kr2eU9sh8zX9ZPPY0NfULm+g0BdFRIoYNE HMMyc59QzSk/c3fi8TPdOJexC4FXmRFLQRugtTBvdbRAycMPlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFri7V8zfNWZI0Xx6NmBXye+/2OBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTk1NTAzMDAtOGRjMS0z YjAxLWEzODEtOThiNWE2ZTc2MzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAuVSQcCqe3oN8G+fr5YfKBkVU/J0xImXJOHR/0OkE5laMoCIZyZyvk J4er3OOtWOtPbMw9wjPb1AXBu6CH5qdKxQyxa7+QQf34pZ0OrZcXOtFWi9354VRc KTlrxg6oUlVjktvA5NBBgqdHwJfjdrRngOIXZpRiJvlJq2K2zioWoxlLLsTBHbiy VdOlXQSxFMFSI34i9WTCdnRGIfiUu/Q0UyxnQSM1qlAk97YWo03MummwrvM8n7r7 FYwaZpDXnZy6C1EH8Tt/+HKaX6enlgZ0zsAMRwUFWZwRZS3AxC21gDEQ/+FS7Ola 9GE/6/7HmTnOu6qnY/B/YNnmVIFAu9U= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:37 2025 by rpki-client