$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2e14a63-0616-3d10-939b-1a56a7ff3282.roa File: c2e14a63-0616-3d10-939b-1a56a7ff3282.roa (raw, json) Hash identifier: TpZGzVMUsvIlpm1Q7/x/XstF2Gne0+MdS/OIqE6a5wA= Subject key identifier: 47:1A:E1:75:8F:97:E5:29:F1:0F:C8:AD:F4:3B:56:FA:49:87:F9:4F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932877F19973488B31BF948 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2e14a63-0616-3d10-939b-1a56a7ff3282.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:87:7f:19:97:34:88:b3:1b:f9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=558ffb79-f618-49ea-bd08-756642835414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:13:55:4e:ef:c3:d9:66:66:b3:e6:f4:e9: 6f:e0:85:8a:71:32:60:27:f1:60:de:bf:67:4b:ee: f8:79:58:44:85:0b:a2:15:ac:8d:b6:83:22:a9:ef: cf:a0:e9:6b:a6:54:6c:f6:c7:61:75:e3:9a:73:25: 1f:73:ca:24:60:88:59:7b:3a:cf:91:25:3d:e5:5e: 6c:46:ec:26:58:55:05:f4:38:b1:09:38:c2:f2:55: e1:96:8c:d6:99:9f:53:10:52:ec:c8:af:07:c4:27: 57:b7:1a:97:a6:67:4f:88:a2:fb:d7:77:c9:3a:94: bf:99:31:0e:0e:85:f8:14:5f:de:f6:e7:c6:01:2a: 57:75:78:7b:a9:41:cf:7c:d8:e3:12:05:ed:03:6e: dd:c3:41:d1:03:bb:f3:1d:10:86:46:dc:af:81:98: 09:e0:a5:ae:df:db:7b:18:7e:11:a5:9c:2d:6f:ea: 4a:8b:7e:3f:1c:3f:14:3f:2a:6c:c1:80:1a:c8:47: e9:55:59:87:f6:a4:7e:0a:9a:13:b0:73:ad:75:08: 29:65:a6:77:1b:8f:4b:74:6b:7f:94:f6:32:0c:2b: d9:17:02:8a:c1:ed:0c:58:5f:89:88:c2:e8:a2:21: 32:5b:1e:7b:3a:ae:c1:93:7c:43:e8:e4:11:3a:ab: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1A:E1:75:8F:97:E5:29:F1:0F:C8:AD:F4:3B:56:FA:49:87:F9:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2e14a63-0616-3d10-939b-1a56a7ff3282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:2a:1d:dd:ce:36:f4:b8:99:5e:10:5f:ae:bc:d1:1f:99:0e: 65:6a:09:bf:63:eb:21:3a:19:2f:11:11:2a:b7:46:0a:12:2f: 64:33:3f:74:89:96:9e:57:bf:6b:58:20:d7:a6:0a:f3:e8:0e: 88:5e:6b:a0:89:67:44:f2:bb:34:31:d7:28:53:8a:d7:ea:b3: 7f:00:3d:c3:27:fe:f0:c9:96:19:9f:ae:36:91:ca:92:a8:67: 0d:6b:fd:94:f1:ca:62:f3:0e:6d:1b:7a:f3:fe:c8:4d:11:f3: 60:60:d9:26:2c:5c:94:26:ee:30:6d:71:27:8c:65:b8:fd:1a: f6:6c:06:51:da:49:bc:b6:41:e7:19:b8:8d:4e:e6:84:10:d0: d0:ca:39:0d:52:55:c2:f0:d6:e7:30:b7:d5:34:d1:2f:19:5b: b0:1d:6b:36:0c:7d:8d:ad:e0:b2:96:81:23:f3:cf:63:8c:d0: 14:d0:ee:25:e3:f4:e7:7d:d5:b8:74:d7:0d:f6:75:b6:83:af: 34:8c:ac:d5:86:da:3a:ae:88:70:ea:0f:2d:f4:b1:3f:e4:d1: 61:de:e1:b7:7a:6c:52:23:07:a9:2c:f4:23:f8:0b:77:ea:5f: 94:30:e7:58:ca:1b:08:64:01:bb:4c:d4:4c:05:53:d8:8e:57: 86:e3:0e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMod/GZc0iLMb+UgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NTU4ZmZiNzktZjYxOC00OWVhLWJkMDgtNzU2NjQyODM1NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiITVU7vw9lmZrPm9Olv4IWKcTJgJ/Fg3r9n S+74eVhEhQuiFayNtoMiqe/PoOlrplRs9sdhdeOacyUfc8okYIhZezrPkSU95V5s RuwmWFUF9DixCTjC8lXhlozWmZ9TEFLsyK8HxCdXtxqXpmdPiKL713fJOpS/mTEO DoX4FF/e9ufGASpXdXh7qUHPfNjjEgXtA27dw0HRA7vzHRCGRtyvgZgJ4KWu39t7 GH4RpZwtb+pKi34/HD8UPypswYAayEfpVVmH9qR+CpoTsHOtdQgpZaZ3G49LdGt/ lPYyDCvZFwKKwe0MWF+JiMLooiEyWx57Oq7Bk3xD6OQROqvIHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEca4XWPl+Up8Q/IrfQ7VvpJh/lPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzJlMTRhNjMtMDYxNi0z ZDEwLTkzOWItMWE1NmE3ZmYzMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUqHd3ONvS4mV4QX6680R+ZDmVqCb9j6yE6GS8RESq3RgoSL2QzP3SJ lp5Xv2tYINemCvPoDohea6CJZ0TyuzQx1yhTitfqs38APcMn/vDJlhmfrjaRypKo Zw1r/ZTxymLzDm0bevP+yE0R82Bg2SYsXJQm7jBtcSeMZbj9GvZsBlHaSby2QecZ uI1O5oQQ0NDKOQ1SVcLw1ucwt9U00S8ZW7AdazYMfY2t4LKWgSPzz2OM0BTQ7iXj 9Od91bh01w32dbaDrzSMrNWG2jquiHDqDy30sT/k0WHe4bd6bFIjB6ks9CP4C3fq X5Qw51jKGwhkAbtM1EwFU9iOV4bjDiE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:16 2025 by rpki-client