$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa File: ae6fa773-9177-396c-a066-b77fbe30b7ba.roa (raw, json) Hash identifier: xYY9twpm138WzfJ3ac9JVNXEfyoXkM5rhcFkOEqhRmY= Subject key identifier: AE:49:53:6F:A5:00:7C:90:7F:E9:C3:00:93:54:00:CA:67:F4:B8:AF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1AD8642879ACDD9D7840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1a:d8:64:28:79:ac:dd:9d:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=ce0d5c90-344d-4d64-898b-ed7abec8d4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:70:d1:3f:38:11:56:df:bf:c1:7f:0a:03: 2d:c4:a5:75:5f:bf:a8:3c:c8:6f:73:8a:8e:49:72: 7e:77:13:6c:b1:37:3f:5c:39:c7:d0:9a:d7:1a:2c: 29:37:25:90:fc:b4:81:5b:9b:64:85:16:f2:65:3b: 07:8a:5e:d7:34:0e:04:f3:e9:5d:77:4c:19:d2:aa: b5:0b:e4:ed:eb:bc:d2:26:6c:6b:2b:12:e8:e6:f4: 18:a9:f1:e8:f9:a9:23:e3:ee:a8:be:ca:4a:66:9b: aa:11:13:f5:eb:fa:3a:a8:8d:3a:8f:5f:0b:83:9b: b5:e2:15:f4:c1:bf:09:fe:7a:5a:be:f3:00:b7:2d: 50:ac:d9:f4:1d:00:3b:94:74:d2:d6:d8:f7:ae:b7: 38:91:d9:78:bc:0d:0d:c9:cc:76:9b:e9:43:9a:10: a2:81:ae:38:2f:77:f3:b8:9d:f5:c7:93:f6:b7:b2: 89:ed:fe:75:a3:ef:86:22:f1:29:6a:5e:1c:80:8d: 5f:8b:fa:a8:7c:88:fd:cf:07:97:e7:07:35:a2:3d: 9a:00:af:66:03:a8:e2:d5:b3:82:12:6e:05:d1:65: 50:7a:b1:04:d4:5a:40:44:49:3a:c9:53:85:64:70: 92:a6:96:ae:5c:e3:1e:b1:d0:50:9f:92:8d:cb:28: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:49:53:6F:A5:00:7C:90:7F:E9:C3:00:93:54:00:CA:67:F4:B8:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:58:d7:1d:57:92:eb:59:4b:e1:f8:ce:85:bb:10:d2:8a:5b: b1:44:7a:c8:64:49:89:07:ed:67:89:bb:f5:da:18:81:7d:2c: 7b:7a:45:ef:ba:82:5f:5d:78:7d:c6:aa:73:12:5e:fc:80:f6: ec:a5:30:03:02:4a:d4:03:f8:77:70:05:36:81:5f:eb:b0:ba: dc:19:22:c7:5e:da:70:27:36:e8:21:4e:61:0c:4c:43:94:4c: aa:22:fb:8f:9e:1c:13:83:13:a5:54:97:7b:c2:04:c1:10:e3: 34:18:89:42:13:ce:66:05:1c:77:fb:28:b8:e7:94:d7:52:ef: 3f:2e:94:7e:20:0d:06:5f:87:2e:ac:aa:0a:cd:f4:d2:59:29: 27:d2:df:bc:9f:30:f4:1e:cb:f9:e4:eb:95:cc:7f:b7:83:12: c2:98:50:3c:1b:b6:bd:11:ee:5b:8f:96:5f:3a:b4:65:0a:26: 1e:ba:52:cf:87:6f:89:0a:06:4e:ea:51:31:54:58:15:00:00: ba:0a:fe:39:93:41:40:12:cb:b7:77:1b:0d:66:a5:bc:a9:00: c2:63:7a:0c:5e:43:84:cd:98:de:eb:2b:22:85:27:13:25:32: 9b:a8:a5:d1:a1:b6:e8:1c:02:6b:cb:b6:27:9c:26:39:6c:ee: aa:0e:e9:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RrYZCh5rN2deEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Y2UwZDVjOTAtMzQ0ZC00ZDY0LTg5OGItZWQ3YWJlYzhkNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw11w0T84EVbfv8F/CgMtxKV1X7+oPMhvc4qO SXJ+dxNssTc/XDnH0JrXGiwpNyWQ/LSBW5tkhRbyZTsHil7XNA4E8+ldd0wZ0qq1 C+Tt67zSJmxrKxLo5vQYqfHo+akj4+6ovspKZpuqERP16/o6qI06j18Lg5u14hX0 wb8J/npavvMAty1QrNn0HQA7lHTS1tj3rrc4kdl4vA0Nycx2m+lDmhCiga44L3fz uJ31x5P2t7KJ7f51o++GIvEpal4cgI1fi/qofIj9zweX5wc1oj2aAK9mA6ji1bOC Em4F0WVQerEE1FpAREk6yVOFZHCSppauXOMesdBQn5KNyyhW/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5JU2+lAHyQf+nDAJNUAMpn9LivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU2ZmE3NzMtOTE3Ny0z OTZjLWEwNjYtYjc3ZmJlMzBiN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrETEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJY1x1XkutZS+H4zoW7ENKKW7FEeshkSYkH7WeJu/XaGIF9LHt6Re+6 gl9deH3GqnMSXvyA9uylMAMCStQD+HdwBTaBX+uwutwZIsde2nAnNughTmEMTEOU TKoi+4+eHBODE6VUl3vCBMEQ4zQYiUITzmYFHHf7KLjnlNdS7z8ulH4gDQZfhy6s qgrN9NJZKSfS37yfMPQey/nk65XMf7eDEsKYUDwbtr0R7luPll86tGUKJh66Us+H b4kKBk7qUTFUWBUAALoK/jmTQUASy7d3Gw1mpbypAMJjegxeQ4TNmN7rKyKFJxMl MpuopdGhtugcAmvLtiecJjls7qoO6RM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:18 2025 by rpki-client