$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b9922387-a4e2-35b5-90e0-45cc29682dd9.roa File: b9922387-a4e2-35b5-90e0-45cc29682dd9.roa (raw, json) Hash identifier: p5ZfbdwQLOtZfLejkfJrMg610CW1uyxT0sW3WWDNhjI= Subject key identifier: D5:B1:0D:E3:4D:7D:EB:D4:FA:F1:FF:FD:75:D3:82:51:DB:41:25:87 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328F38B5E6FF4C67803100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b9922387-a4e2-35b5-90e0-45cc29682dd9.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8f:38:b5:e6:ff:4c:67:80:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=b732986e-0f51-4313-b000-53d65022724a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:f2:22:23:2c:74:db:40:25:92:a7:51:95: cd:84:ec:30:6a:2a:12:27:98:b3:a4:1d:37:e2:1c: 12:da:3c:48:d9:e7:72:6d:ae:a5:37:20:04:48:3b: ae:5b:b9:ee:bb:7b:28:88:28:11:7b:3d:3c:62:26: e6:03:cf:e2:77:19:50:e4:c6:3e:df:ef:ed:95:f7: 3e:57:3a:4b:e0:d3:fa:a6:c2:c7:03:ec:39:3a:49: 94:20:7b:51:05:77:1e:34:5e:33:20:64:8e:a7:99: 08:5d:92:51:cb:7b:7e:86:6f:35:cc:e7:ed:ee:6a: 2c:18:25:24:5c:fb:9c:7a:45:46:8c:94:b5:1d:52: ae:5d:53:54:e1:06:3f:55:9f:06:aa:1c:d2:53:ee: 44:e8:7d:2c:b0:15:0b:07:1c:d8:67:ec:3d:97:52: 38:73:86:dc:3e:f8:0f:99:c7:b0:3e:40:80:f3:06: 7e:c5:ee:43:97:61:e9:72:f9:4e:c4:b8:fc:52:85: de:ef:38:31:22:1d:ea:29:a9:90:f1:0f:50:8b:45: e6:ae:a1:10:b5:08:16:fa:7f:8f:75:fc:3d:b6:a3: 4c:6a:9c:7a:bf:1f:f4:dd:7b:dd:cf:a9:89:c8:32: f8:72:1e:c8:93:a0:62:04:3b:44:c8:57:be:ad:23: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:0D:E3:4D:7D:EB:D4:FA:F1:FF:FD:75:D3:82:51:DB:41:25:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b9922387-a4e2-35b5-90e0-45cc29682dd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1e:f9:59:c4:2f:19:49:12:2a:8d:1a:44:1e:94:16:87:b5: b4:1e:e3:24:7d:f4:3d:3b:14:44:69:4f:0b:b1:28:86:91:f6: fb:9e:ac:d7:dc:81:0d:ae:6c:88:54:c0:50:24:63:f6:07:12: b9:cb:e8:a5:de:6e:64:42:b7:32:18:24:7c:12:32:64:42:42: aa:ab:ae:19:1e:48:8d:53:16:49:16:e5:5f:8c:2c:4d:98:f0: 67:58:d2:a0:98:30:57:c6:c5:0a:cc:a0:e3:06:0b:55:b8:f4: f6:ef:db:e6:aa:29:05:e4:0e:34:1c:4b:e8:82:9a:0b:06:70: 5d:b0:b2:51:96:55:e2:93:bb:65:7d:43:f5:83:34:8d:08:78: 82:76:15:9b:0e:3c:2d:c5:09:40:f3:92:77:b4:47:3f:b3:e5: 3e:cf:9f:1f:c9:10:18:54:39:61:db:94:b5:2f:a5:4d:d4:ee: ef:a6:fe:8d:aa:51:32:6f:46:fb:07:8f:9f:01:74:57:67:5b: b2:22:10:e5:b9:5b:01:85:b2:8f:b1:49:b2:e5:f9:d6:fa:bd: e1:b7:fa:ad:b7:72:97:66:9e:9a:1a:e4:38:40:d5:71:98:a6: 05:93:7b:36:f5:79:6f:c7:83:66:6e:61:f0:c4:66:ce:ff:02: 73:57:91:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo84teb/TGeAMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YjczMjk4NmUtMGY1MS00MzEzLWIwMDAtNTNkNjUwMjI3MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc7yIiMsdNtAJZKnUZXNhOwwaioSJ5izpB03 4hwS2jxI2edyba6lNyAESDuuW7nuu3soiCgRez08YibmA8/idxlQ5MY+3+/tlfc+ VzpL4NP6psLHA+w5OkmUIHtRBXceNF4zIGSOp5kIXZJRy3t+hm81zOft7mosGCUk XPucekVGjJS1HVKuXVNU4QY/VZ8GqhzSU+5E6H0ssBULBxzYZ+w9l1I4c4bcPvgP mcewPkCA8wZ+xe5Dl2HpcvlOxLj8UoXe7zgxIh3qKamQ8Q9Qi0XmrqEQtQgW+n+P dfw9tqNMapx6vx/03Xvdz6mJyDL4ch7Ik6BiBDtEyFe+rSNtTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWxDeNNfevU+vH//XXTglHbQSWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjk5MjIzODctYTRlMi0z NWI1LTkwZTAtNDVjYzI5NjgyZGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4e+VnELxlJEiqNGkQelBaHtbQe4yR99D07FERpTwuxKIaR9vuerNfc gQ2ubIhUwFAkY/YHErnL6KXebmRCtzIYJHwSMmRCQqqrrhkeSI1TFkkW5V+MLE2Y 8GdY0qCYMFfGxQrMoOMGC1W49Pbv2+aqKQXkDjQcS+iCmgsGcF2wslGWVeKTu2V9 Q/WDNI0IeIJ2FZsOPC3FCUDzkne0Rz+z5T7Pnx/JEBhUOWHblLUvpU3U7u+m/o2q UTJvRvsHj58BdFdnW7IiEOW5WwGFso+xSbLl+db6veG3+q23cpdmnpoa5DhA1XGY pgWTezb1eW/Hg2ZuYfDEZs7/AnNXkVM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:03 2025 by rpki-client