$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8962d4-6998-363c-995d-41f1a8571cbc.roa File: ae8962d4-6998-363c-995d-41f1a8571cbc.roa (raw, json) Hash identifier: kt/zsnximTcZ4VIp1DUZ1kUoZEpXOMxDi4RcXIpHU9I= Subject key identifier: 8F:09:A8:82:4F:09:DC:DC:45:E3:34:7F:D2:17:74:3F:54:24:50:D9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1A90D4878A36D388ED80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8962d4-6998-363c-995d-41f1a8571cbc.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1a:90:d4:87:8a:36:d3:88:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=a33d009f-95c1-4212-862b-e152b31a875d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b3:3a:eb:34:a1:3d:95:00:b6:52:3e:50:ef: df:ca:22:21:be:1b:1f:ef:29:1c:0c:92:ee:54:1f: 93:57:65:d4:ac:4d:f4:46:2f:e3:19:6b:63:a4:1d: de:d1:96:b8:e9:98:5d:f2:7d:65:75:c6:1c:f3:5d: be:01:64:6b:0a:da:8b:12:b3:6b:8d:b1:89:46:53: f0:3e:6b:4a:bf:14:40:26:bc:5b:ef:04:db:52:1d: 92:9a:77:55:fa:e3:d0:ab:93:c7:24:77:79:0f:50: 67:75:e5:f9:34:b5:31:1d:d4:d7:10:d9:5a:95:a2: b0:1d:fd:ec:94:ac:2e:79:d5:24:72:70:eb:3c:53: 4d:b8:7b:80:1c:2e:f1:18:a3:f1:8e:6c:af:5e:85: 8f:aa:c6:18:5a:2e:e3:8c:7e:57:20:23:44:99:c6: 40:ae:b7:ed:aa:cb:eb:f5:7e:04:7a:e9:c4:fe:db: b5:f4:27:b7:4b:fc:e4:0a:1b:99:99:96:3f:f9:ca: 4e:2d:74:52:95:ea:d4:17:66:c6:34:88:00:05:1a: a9:22:a3:5e:41:48:35:f7:4b:57:31:de:7e:b6:cd: 2a:b3:8e:d9:1b:0f:e7:62:81:5e:48:e8:a6:f4:09: bd:36:79:29:3e:27:c0:d2:35:e2:1e:b3:f5:21:ce: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:09:A8:82:4F:09:DC:DC:45:E3:34:7F:D2:17:74:3F:54:24:50:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8962d4-6998-363c-995d-41f1a8571cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:be:2d:ee:39:c5:38:85:a5:2a:95:48:13:e2:96:4e:f5:05: 7e:f1:42:c6:39:10:86:49:29:2d:a0:2e:e7:f9:99:f7:9f:46: f1:bf:99:60:ab:f7:fb:44:d6:51:e1:53:4a:b3:28:78:48:19: a0:14:6a:01:4d:32:4d:93:90:4c:64:75:6e:f0:3f:c3:6f:b9: ae:b6:9f:f5:4e:0f:63:80:a9:3f:d5:bc:4e:d0:47:9f:8e:1b: 6f:ac:cb:52:7f:a6:95:9b:53:f0:0a:38:17:04:9d:c7:f2:00: b0:b4:8d:00:db:fa:6a:54:93:cc:60:9b:18:d4:88:d2:c2:d4: fa:1f:7b:eb:c8:10:d6:f6:4a:21:02:23:70:68:5b:2f:e4:99: 58:71:25:23:5b:69:46:ae:48:bf:05:8c:ee:08:2b:20:85:60: db:3b:69:82:f5:fb:8e:62:53:4b:5d:6d:ae:8a:b6:b6:9c:62: 54:6e:95:ae:c2:72:32:d0:17:9c:2a:9b:97:b9:a1:00:4e:e2: d4:d8:51:02:61:89:84:6b:45:b0:1a:aa:ae:80:21:d9:a3:6e: 04:e9:ba:2e:8b:8f:67:eb:68:4e:02:f3:7d:ad:cb:d4:95:ca: 56:74:a2:c5:f3:fc:7b:92:3e:1b:c9:71:3f:2f:45:83:de:5a: 07:9d:58:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RqQ1IeKNtOI7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YTMzZDAwOWYtOTVjMS00MjEyLTg2MmItZTE1MmIzMWE4NzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLM66zShPZUAtlI+UO/fyiIhvhsf7ykcDJLu VB+TV2XUrE30Ri/jGWtjpB3e0Za46Zhd8n1ldcYc812+AWRrCtqLErNrjbGJRlPw PmtKvxRAJrxb7wTbUh2SmndV+uPQq5PHJHd5D1BndeX5NLUxHdTXENlalaKwHf3s lKwuedUkcnDrPFNNuHuAHC7xGKPxjmyvXoWPqsYYWi7jjH5XICNEmcZArrftqsvr 9X4EeunE/tu19Ce3S/zkChuZmZY/+cpOLXRSlerUF2bGNIgABRqpIqNeQUg190tX Md5+ts0qs47ZGw/nYoFeSOim9Am9NnkpPifA0jXiHrP1Ic4ZDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8JqIJPCdzcReM0f9IXdD9UJFDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU4OTYyZDQtNjk5OC0z NjNjLTk5NWQtNDFmMWE4NTcxY2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa+Le45xTiFpSqVSBPilk71BX7xQsY5EIZJKS2gLuf5mfefRvG/mWCr 9/tE1lHhU0qzKHhIGaAUagFNMk2TkExkdW7wP8Nvua62n/VOD2OAqT/VvE7QR5+O G2+sy1J/ppWbU/AKOBcEncfyALC0jQDb+mpUk8xgmxjUiNLC1Pofe+vIENb2SiEC I3BoWy/kmVhxJSNbaUauSL8FjO4IKyCFYNs7aYL1+45iU0tdba6KtracYlRula7C cjLQF5wqm5e5oQBO4tTYUQJhiYRrRbAaqq6AIdmjbgTpui6Lj2fraE4C832ty9SV ylZ0osXz/HuSPhvJcT8vRYPeWgedWDo= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:12 2025 by rpki-client