$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf6212ce-7f1a-382a-9f01-f6d19134ea2c.roa File: bf6212ce-7f1a-382a-9f01-f6d19134ea2c.roa (raw, json) Hash identifier: eU/yXG30iAMSLNw08t4UM5QsgNcWVZqNOv7jovc4W4U= Subject key identifier: 82:FD:00:77:B1:F8:14:80:BA:0D:0F:0D:E0:F8:E6:41:F2:13:AD:AC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AD220190351181EA5700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf6212ce-7f1a-382a-9f01-f6d19134ea2c.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ad:22:01:90:35:11:81:ea:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=3a703b77-f98a-4371-897e-4654e4f8fd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:48:46:f1:8e:c4:f5:1e:07:ac:7f:b0:e4:b4: 41:d6:11:b2:f8:3e:51:bb:58:0e:f6:5d:11:59:51: f2:c8:22:77:59:c5:fc:d7:d7:7a:81:5e:da:c1:2f: 20:49:7b:1c:a2:4c:01:e6:ba:3d:86:64:e4:78:90: db:40:6c:99:dd:86:bb:a0:b2:85:1f:be:11:5f:f5: ac:6b:c5:71:5f:6c:09:7a:63:bc:11:8d:0b:d0:66: ad:c4:ff:a3:5d:bb:cd:3f:d9:7d:b4:62:fe:ae:91: cd:64:f5:b9:f1:91:84:03:81:d2:c8:85:19:9e:88: bf:e7:39:9f:a2:61:7b:9f:e7:e3:21:69:3d:bf:b0: ca:31:45:95:64:ee:1a:ef:1d:da:43:5a:5d:a8:ed: fb:77:f1:b4:56:86:75:60:d4:59:37:d1:ef:0b:6d: 08:47:18:2c:c0:59:0a:71:08:62:41:6f:c0:da:90: 04:e4:9c:e1:b6:fb:18:e2:82:d1:9d:72:73:c0:dc: f3:b9:9e:2c:37:a9:91:da:4c:a3:bb:9e:5e:35:5b: d6:ac:3c:9e:13:fd:b9:d6:8f:16:42:67:12:73:47: 16:04:e4:a7:f3:c0:17:4a:41:8c:55:ca:5f:26:a4: 74:78:cc:43:0c:b7:8e:cc:db:3a:69:14:e1:e9:59: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FD:00:77:B1:F8:14:80:BA:0D:0F:0D:E0:F8:E6:41:F2:13:AD:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf6212ce-7f1a-382a-9f01-f6d19134ea2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4b:42:70:47:d6:50:cb:16:b6:09:83:d9:aa:c7:86:4f:02: 81:d0:df:b5:f6:8c:3f:1f:92:6e:02:a5:69:15:45:72:7c:c5: fc:11:33:0e:34:30:82:67:2e:4c:49:63:d0:0d:3e:eb:1f:e8: 01:65:77:6e:2e:d8:cb:eb:07:57:ab:a6:74:e2:a5:ac:9b:32: 73:03:1f:8e:b9:66:40:3d:9c:00:bc:73:bc:5e:f3:ac:af:3a: 5a:0f:9c:24:49:f8:cf:36:30:75:7d:e3:3b:20:2b:1d:7f:11: 56:90:cb:62:a9:cb:14:c8:53:f4:c6:54:0e:63:89:c3:9e:3f: 69:e5:8d:29:2e:29:30:08:0d:5d:8c:7b:ec:6d:6c:7a:5b:c6: 54:e2:bb:e9:dd:ec:00:20:5e:e9:0a:99:1c:d7:2b:a6:09:9a: 24:0d:a4:b2:15:2f:b8:12:dd:66:bc:e9:45:00:07:2c:02:5d: 82:d7:36:38:4d:47:ee:8b:07:fc:11:03:c9:60:f0:53:5d:9a: 4c:96:aa:12:28:cc:23:ac:5a:db:e4:7b:8a:69:b1:e0:36:88: 0d:6d:e5:de:4c:ae:e9:4d:42:16:4d:23:f0:5c:5f:81:b0:38: d7:e5:3f:e3:49:02:19:7d:54:eb:c9:3c:35:8e:55:58:7b:f4: a9:da:18:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql60iAZA1EYHqVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk M2E3MDNiNzctZjk4YS00MzcxLTg5N2UtNDY1NGU0ZjhmZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60hG8Y7E9R4HrH+w5LRB1hGy+D5Ru1gO9l0R WVHyyCJ3WcX819d6gV7awS8gSXscokwB5ro9hmTkeJDbQGyZ3Ya7oLKFH74RX/Ws a8VxX2wJemO8EY0L0GatxP+jXbvNP9l9tGL+rpHNZPW58ZGEA4HSyIUZnoi/5zmf omF7n+fjIWk9v7DKMUWVZO4a7x3aQ1pdqO37d/G0VoZ1YNRZN9HvC20IRxgswFkK cQhiQW/A2pAE5JzhtvsY4oLRnXJzwNzzuZ4sN6mR2kyju55eNVvWrDyeE/251o8W QmcSc0cWBOSn88AXSkGMVcpfJqR0eMxDDLeOzNs6aRTh6VnMfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL9AHex+BSAug0PDeD45kHyE62sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmY2MjEyY2UtN2YxYS0z ODJhLTlmMDEtZjZkMTkxMzRlYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhLQnBH1lDLFrYJg9mqx4ZPAoHQ37X2jD8fkm4CpWkVRXJ8xfwRMw40 MIJnLkxJY9ANPusf6AFld24u2MvrB1erpnTipaybMnMDH465ZkA9nAC8c7xe86yv OloPnCRJ+M82MHV94zsgKx1/EVaQy2KpyxTIU/TGVA5jicOeP2nljSkuKTAIDV2M e+xtbHpbxlTiu+nd7AAgXukKmRzXK6YJmiQNpLIVL7gS3Wa86UUABywCXYLXNjhN R+6LB/wRA8lg8FNdmkyWqhIozCOsWtvke4ppseA2iA1t5d5MrulNQhZNI/BcX4Gw ONflP+NJAhl9VOvJPDWOVVh79KnaGJU= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:22 2025 by rpki-client