$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcc4f5df-4369-3fb3-8eca-db322b1b446d.roa File: bcc4f5df-4369-3fb3-8eca-db322b1b446d.roa (raw, json) Hash identifier: HLOFLfvoLmiz3dVd66RCHQX6xmMu/hKwnDKuPOwPkTw= Subject key identifier: 73:75:FC:F9:90:15:A5:A1:D2:EC:42:AD:2B:65:47:70:92:E8:70:80 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1C2908EC0C4B6586ECE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcc4f5df-4369-3fb3-8eca-db322b1b446d.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1c:29:08:ec:0c:4b:65:86:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=bc864c94-1c2d-45a8-8a3d-d0437b516afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:22:2d:87:11:c1:b0:3a:21:af:d2:56:21: 25:37:fc:31:6f:b6:57:4a:a9:f6:2d:6f:4e:24:6f: 39:f2:d5:c0:1c:49:f0:2a:13:a6:e6:64:a9:5d:53: 3e:4d:44:17:55:a9:c9:7f:8a:18:69:e2:69:32:d4: 4d:c0:b0:0e:9e:1a:56:1d:4c:3f:67:c5:dc:da:92: 03:ee:5d:d0:b2:d0:7e:1f:ec:88:54:f2:d2:fd:d6: dd:6f:1e:02:3a:7b:9c:f3:2d:e9:70:3c:d2:21:a3: 13:8e:72:fd:52:61:40:ef:6a:ab:52:7d:7e:fe:82: b6:37:9e:1b:31:45:8d:be:fe:0e:17:47:7c:df:fc: b2:24:d6:ca:7b:da:24:d2:ae:8a:8a:4e:4a:dc:3f: cc:88:6d:e6:9c:cf:33:23:1f:48:5b:74:2c:25:12: 00:50:13:68:6e:e1:d9:f3:8c:c9:f1:59:da:9a:a7: 01:01:f8:49:3a:de:89:37:85:42:0f:27:93:aa:d9: 13:fd:da:21:5e:fa:37:03:fd:03:8d:f0:82:06:f5: 03:b9:25:e5:ae:45:1d:a1:a3:47:7a:e4:18:66:f6: 3b:9b:d0:96:f9:18:0f:3e:a4:d8:57:92:0b:ca:83: 56:41:e8:59:13:13:ad:fe:c6:6a:27:d8:b5:85:06: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:75:FC:F9:90:15:A5:A1:D2:EC:42:AD:2B:65:47:70:92:E8:70:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bcc4f5df-4369-3fb3-8eca-db322b1b446d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e2:ec:88:2a:79:09:db:eb:5b:cf:67:d3:41:9f:06:32:bd: 77:6e:fc:91:59:53:3f:24:3c:e3:5d:bf:c5:10:6f:5f:b9:4f: b8:f1:e9:0f:5c:41:5f:7d:89:85:32:d0:4a:95:13:e2:92:24: e6:25:c8:06:d3:89:25:c7:87:b9:d2:bd:ef:2d:50:7f:8f:da: 31:99:2c:3a:d7:08:59:1c:e0:5d:4b:9a:36:73:3f:43:33:6b: 95:9d:2f:25:5e:90:28:bd:a9:c2:cb:9d:28:25:86:86:eb:64: d9:1b:29:7c:ca:c9:67:d5:c4:90:5d:35:79:e2:bd:c7:3e:33: 23:67:8f:95:c2:cb:50:63:f1:6c:70:b7:94:b2:5f:2b:44:6d: d9:44:93:8e:19:f1:d1:46:de:27:2d:bb:fd:58:07:ab:63:5a: 16:80:c0:48:88:e3:ed:90:43:3e:00:0d:13:03:77:44:9c:fd: 64:f1:f6:e6:48:f6:91:cc:d5:58:60:29:cc:80:41:e4:b5:63: 9e:ef:2f:0e:18:96:54:30:64:32:99:0a:65:d7:83:ea:55:a5: 5b:12:9e:90:60:f2:1c:77:ed:b2:84:89:7f:ed:4a:22:1d:0c: 32:51:b7:c2:c5:96:b4:64:e5:e3:a0:ae:8e:85:80:55:8c:8a: be:7e:40:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RwpCOwMS2WG7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YmM4NjRjOTQtMWMyZC00NWE4LThhM2QtZDA0MzdiNTE2YWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoIiLYcRwbA6Ia/SViElN/wxb7ZXSqn2LW9O JG858tXAHEnwKhOm5mSpXVM+TUQXVanJf4oYaeJpMtRNwLAOnhpWHUw/Z8Xc2pID 7l3QstB+H+yIVPLS/dbdbx4COnuc8y3pcDzSIaMTjnL9UmFA72qrUn1+/oK2N54b MUWNvv4OF0d83/yyJNbKe9ok0q6Kik5K3D/MiG3mnM8zIx9IW3QsJRIAUBNobuHZ 84zJ8VnamqcBAfhJOt6JN4VCDyeTqtkT/dohXvo3A/0DjfCCBvUDuSXlrkUdoaNH euQYZvY7m9CW+RgPPqTYV5ILyoNWQehZExOt/sZqJ9i1hQbwSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN1/PmQFaWh0uxCrStlR3CS6HCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmNjNGY1ZGYtNDM2OS0z ZmIzLThlY2EtZGIzMjJiMWI0NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfi7IgqeQnb61vPZ9NBnwYyvXdu/JFZUz8kPONdv8UQb1+5T7jx6Q9c QV99iYUy0EqVE+KSJOYlyAbTiSXHh7nSve8tUH+P2jGZLDrXCFkc4F1LmjZzP0Mz a5WdLyVekCi9qcLLnSglhobrZNkbKXzKyWfVxJBdNXnivcc+MyNnj5XCy1Bj8Wxw t5SyXytEbdlEk44Z8dFG3ictu/1YB6tjWhaAwEiI4+2QQz4ADRMDd0Sc/WTx9uZI 9pHM1VhgKcyAQeS1Y57vLw4YllQwZDKZCmXXg+pVpVsSnpBg8hx37bKEiX/tSiId DDJRt8LFlrRk5eOgro6FgFWMir5+QIM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:53 2025 by rpki-client