$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8c2a844-ec1e-3e82-92e3-314d85bec573.roa File: c8c2a844-ec1e-3e82-92e3-314d85bec573.roa (raw, json) Hash identifier: L7cuRTB+o6H6pvlLumJXql0gVaSms9LEO5QtwBWFy7s= Subject key identifier: 17:5C:FB:E6:7C:6D:DE:B2:C5:1A:C6:25:CF:A7:10:7A:61:D8:02:67 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1C172E746002DB60C100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8c2a844-ec1e-3e82-92e3-314d85bec573.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1c:17:2e:74:60:02:db:60:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=d497c0b3-bb6e-4b27-bf09-5ee900009ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f8:24:76:c1:b9:d6:21:56:ca:95:5a:24:2a: d3:50:6d:7d:aa:32:e6:2f:29:a8:e4:a1:de:18:e8: 26:c1:7e:3d:e8:1a:a5:57:a3:bc:cc:4c:d0:c7:ed: c9:a3:15:71:68:3f:ee:ed:f3:46:f7:79:e9:f9:ba: 20:3c:70:9e:ac:cd:03:1d:f9:66:fa:b5:66:fc:4d: 54:96:08:a2:f0:bc:26:39:df:40:48:30:08:6e:f6: a8:d5:81:b8:5c:a9:9a:af:2e:08:66:3d:66:d6:c0: 58:59:bc:3f:e3:6a:71:24:92:d1:17:07:93:3e:86: f5:a9:b8:16:f4:10:ec:a9:f2:b8:dc:23:d5:c6:a6: 9b:6e:46:f5:30:fb:cc:dd:74:6a:a6:e8:af:ee:81: 1e:0f:1d:66:e8:a8:e7:98:c1:ff:1f:fc:f3:89:52: cd:44:b6:ec:0b:0b:f3:19:35:86:d7:7d:61:53:80: b6:b2:ad:ca:86:21:f8:2b:22:c1:27:c9:44:fe:93: 92:25:f6:5f:38:34:90:95:5f:4d:1c:2d:d6:e7:cd: c2:f2:16:85:d6:e9:6a:a4:e6:34:7f:9f:45:4b:55: 92:b5:90:2e:93:95:bc:ad:d0:d5:c7:5a:89:ed:47: 45:73:d1:cf:92:8a:b6:dd:bb:3a:6b:fb:73:e7:fd: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5C:FB:E6:7C:6D:DE:B2:C5:1A:C6:25:CF:A7:10:7A:61:D8:02:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8c2a844-ec1e-3e82-92e3-314d85bec573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:0a:47:25:31:b6:d0:fb:9c:c3:c8:ab:27:22:ef:fb:19:1f: 95:8e:da:8a:48:ce:b9:33:0a:c7:00:59:ea:86:61:d1:91:2e: b0:69:61:49:65:17:77:7f:0a:d2:6f:2d:bb:43:fe:fc:ef:97: a5:60:14:03:6d:f2:06:50:fc:75:7b:8a:6c:3f:27:c0:71:00: ea:54:3d:ee:be:c1:ac:5c:8a:6f:79:f0:3b:ae:07:61:e7:31: af:18:a6:44:9a:c6:b5:da:ff:d4:e8:8b:1e:02:3c:2f:05:f4: 88:6e:b6:d1:75:e7:78:53:7f:c3:5f:11:d9:74:1b:81:d0:18: 58:d9:f8:44:3c:7c:42:92:4e:c6:e3:ce:4b:23:b4:54:6e:01: 26:1c:ae:e0:ab:7c:6b:0f:28:bb:aa:3e:c4:81:e7:c2:40:e2: 5c:35:de:f9:b2:21:9e:23:ff:bf:b1:da:53:52:25:ff:17:29: b2:f6:10:a7:99:75:1d:23:c6:a4:b8:f9:8d:5f:52:bf:10:b6: cd:4e:b6:b8:bb:29:e2:24:1e:b0:54:81:88:62:50:72:7c:fd: 7d:17:67:e5:48:cf:5d:2e:03:7a:65:8d:bc:88:26:0a:5e:19: 2f:2c:03:ad:9c:05:8d:c0:22:f3:8b:29:92:63:69:d2:e0:d0: 57:75:62:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RwXLnRgAttgwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZDQ5N2MwYjMtYmI2ZS00YjI3LWJmMDktNWVlOTAwMDA5ZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PgkdsG51iFWypVaJCrTUG19qjLmLymo5KHe GOgmwX496BqlV6O8zEzQx+3JoxVxaD/u7fNG93np+bogPHCerM0DHflm+rVm/E1U lgii8LwmOd9ASDAIbvao1YG4XKmary4IZj1m1sBYWbw/42pxJJLRFweTPob1qbgW 9BDsqfK43CPVxqabbkb1MPvM3XRqpuiv7oEeDx1m6KjnmMH/H/zziVLNRLbsCwvz GTWG131hU4C2sq3KhiH4KyLBJ8lE/pOSJfZfODSQlV9NHC3W583C8haF1ulqpOY0 f59FS1WStZAuk5W8rdDVx1qJ7UdFc9HPkoq23bs6a/tz5/2wLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdc++Z8bd6yxRrGJc+nEHph2AJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzhjMmE4NDQtZWMxZS0z ZTgyLTkyZTMtMzE0ZDg1YmVjNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgKRyUxttD7nMPIqyci7/sZH5WO2opIzrkzCscAWeqGYdGRLrBpYUll F3d/CtJvLbtD/vzvl6VgFANt8gZQ/HV7imw/J8BxAOpUPe6+waxcim958DuuB2Hn Ma8YpkSaxrXa/9Toix4CPC8F9IhuttF153hTf8NfEdl0G4HQGFjZ+EQ8fEKSTsbj zksjtFRuASYcruCrfGsPKLuqPsSB58JA4lw13vmyIZ4j/7+x2lNSJf8XKbL2EKeZ dR0jxqS4+Y1fUr8Qts1Otri7KeIkHrBUgYhiUHJ8/X0XZ+VIz10uA3pljbyIJgpe GS8sA62cBY3AIvOLKZJjadLg0Fd1Ygc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:42 2025 by rpki-client