$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa File: c3e3b8c0-be07-3843-b18d-6586f47d2704.roa (raw, json) Hash identifier: 7aRoLp1rq+11zJw3zywNd+yxQ8O6k37uxC6B/AgKdgo= Subject key identifier: 27:78:C4:49:74:10:06:69:FB:C6:66:A4:43:F3:29:2F:07:C9:06:26 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1B11D7D30BAFFA83A5D8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1b:11:d7:d3:0b:af:fa:83:a5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=8183f19c-356d-4a34-903d-ccc917b10696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:0f:60:6b:e2:f4:0c:2c:5a:24:11:ba:b8: 72:00:4b:a9:c6:15:3b:f6:60:e0:f3:9e:74:00:57: b6:df:7c:36:25:5e:d1:7e:4e:10:a5:38:8d:5b:c9: 29:9c:33:6e:27:80:9c:1e:c2:07:20:52:c3:2f:74: 91:49:ea:35:0c:cf:57:68:5b:cb:ee:c2:4c:82:86: dd:e5:21:bf:d6:75:b4:02:6b:cc:5f:9e:52:8e:2b: 41:b0:de:38:f0:a2:ac:75:07:80:c6:d9:dd:97:ff: 36:32:8a:26:60:a2:81:3e:d2:20:e0:77:4e:c0:39: bf:8b:ac:3f:b5:db:02:36:0e:c1:c5:87:38:44:ec: 12:64:8d:94:88:48:88:f7:b9:25:ce:0e:d6:b2:fd: 5d:1f:e7:bf:73:98:92:bb:ee:2b:0a:37:c2:d8:65: 77:63:87:9d:67:f6:16:e7:3b:df:8e:01:15:be:77: 45:cf:82:de:42:68:76:61:1d:74:40:31:ad:75:05: 35:a2:69:b9:ab:14:9b:4c:da:fe:15:3d:f2:12:3d: 0f:54:b2:6a:fc:30:6a:bb:40:c5:9a:19:12:7f:d8: 23:81:b1:bf:ae:f4:44:8a:a5:14:2b:66:19:1c:29: e3:ce:34:d9:1b:10:d6:86:28:1f:d6:39:05:c6:b0: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:78:C4:49:74:10:06:69:FB:C6:66:A4:43:F3:29:2F:07:C9:06:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e1:9b:4d:a9:01:0a:85:14:59:4d:94:95:7a:1c:27:c8:0a: ff:80:32:ea:f4:f6:c2:d3:50:2c:81:e7:0a:37:2f:c1:96:cf: ca:0f:30:0e:13:b1:c7:f9:4c:a2:a4:65:35:c8:73:2b:86:2c: d4:5f:55:8b:0f:fe:d3:d7:cf:da:33:7e:4e:21:40:e8:f0:d3: 14:30:3c:7b:4c:ec:17:7a:37:5f:38:88:3a:52:e7:cf:5a:f6: f4:ca:69:81:77:ce:ba:53:3d:b9:a9:73:5b:ad:2f:75:f0:43: bb:3f:eb:63:ee:6a:6d:90:dc:2b:52:23:3c:57:d2:d3:c5:78: 3b:c2:b0:c6:64:ab:95:75:fe:2f:26:6c:39:77:1f:a8:93:fc: fe:47:6a:f3:38:00:6d:a6:9c:50:75:cb:b2:84:bb:76:e4:52: 5a:3e:38:f6:31:1e:2a:d1:2b:50:e0:f6:e3:c6:37:cc:c2:41: 71:88:69:6b:e5:71:65:59:59:f2:49:13:6f:3b:a4:ff:5c:8a: b4:78:aa:df:eb:d2:8d:0d:8d:29:cd:4c:60:38:04:7f:72:3d: 41:b2:16:11:cb:f4:14:f9:04:ea:98:1e:89:07:57:57:b7:b3: a3:de:3a:5c:aa:3e:f1:d3:29:3d:7b:58:0f:8d:61:0e:da:6e: 31:33:52:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RsR19MLr/qDpdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ODE4M2YxOWMtMzU2ZC00YTM0LTkwM2QtY2NjOTE3YjEwNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptEPYGvi9AwsWiQRurhyAEupxhU79mDg8550 AFe233w2JV7Rfk4QpTiNW8kpnDNuJ4CcHsIHIFLDL3SRSeo1DM9XaFvL7sJMgobd 5SG/1nW0AmvMX55SjitBsN448KKsdQeAxtndl/82MoomYKKBPtIg4HdOwDm/i6w/ tdsCNg7BxYc4ROwSZI2UiEiI97klzg7Wsv1dH+e/c5iSu+4rCjfC2GV3Y4edZ/YW 5zvfjgEVvndFz4LeQmh2YR10QDGtdQU1omm5qxSbTNr+FT3yEj0PVLJq/DBqu0DF mhkSf9gjgbG/rvREiqUUK2YZHCnjzjTZGxDWhigf1jkFxrCjLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCd4xEl0EAZp+8ZmpEPzKS8HyQYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNlM2I4YzAtYmUwNy0z ODQzLWIxOGQtNjU4NmY0N2QyNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvhm02pAQqFFFlNlJV6HCfICv+AMur09sLTUCyB5wo3L8GWz8oPMA4T scf5TKKkZTXIcyuGLNRfVYsP/tPXz9ozfk4hQOjw0xQwPHtM7Bd6N184iDpS589a 9vTKaYF3zrpTPbmpc1utL3XwQ7s/62Puam2Q3CtSIzxX0tPFeDvCsMZkq5V1/i8m bDl3H6iT/P5HavM4AG2mnFB1y7KEu3bkUlo+OPYxHirRK1Dg9uPGN8zCQXGIaWvl cWVZWfJJE287pP9cirR4qt/r0o0NjSnNTGA4BH9yPUGyFhHL9BT5BOqYHokHV1e3 s6PeOlyqPvHTKT17WA+NYQ7abjEzUjo= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:03 2025 by rpki-client