$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9d99fac-c6d1-32d2-b980-ad974e633160.roa File: c9d99fac-c6d1-32d2-b980-ad974e633160.roa (raw, json) Hash identifier: fSevrj+AbytbIA8OW1HXPRA3iZaD1i1wQq+sgQV8/9A= Subject key identifier: 5A:AE:14:81:1D:2B:81:E4:ED:FF:84:9B:FD:B9:DA:11:59:0B:35:D3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B2E5C42188444A4E5A0680780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9d99fac-c6d1-32d2-b980-ad974e633160.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.68.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:42:18:84:44:a4:e5:a0:68:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=5ca5562c-2a4e-44c3-9e75-82755b082789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:52:60:93:49:16:7a:9c:c2:52:36:8f:3e: ee:cb:0c:db:df:86:44:f0:5d:65:0b:31:3c:6f:e3: 3e:fc:67:11:bc:34:10:7a:87:03:9e:f4:76:a6:87: b7:cc:d3:66:2a:5d:ae:84:15:0a:a0:90:9d:db:8f: 74:ec:9d:3c:64:db:e2:eb:75:7e:2c:12:49:5c:d4: 7b:86:a3:56:5f:8b:fe:1b:5c:f1:a0:29:01:66:64: fe:f4:e5:4d:8a:cd:b3:84:0e:35:d0:75:fa:a2:aa: 57:f9:88:49:ae:f7:64:97:e9:35:96:62:7b:93:65: 0d:88:1f:82:8c:c9:4a:d1:5f:73:ed:42:de:bc:4a: 2a:98:ef:36:b4:91:9c:69:c2:ab:6f:ac:29:70:1d: 10:1e:70:61:65:a8:d0:56:1f:a2:25:9b:84:a3:93: 22:96:39:88:94:45:5e:dd:cb:d5:38:5e:ce:69:1e: 9e:2d:ab:42:05:fa:bb:d5:5c:09:ee:51:b6:ea:0c: 06:c9:4e:20:67:44:d0:14:ad:6a:b9:08:95:4e:3d: bf:1d:d8:5c:a1:b1:c1:a3:55:52:bb:91:14:05:4b: 85:2b:8d:19:99:08:79:ef:63:40:59:1e:9a:67:cb: b8:09:41:c6:3a:06:02:14:77:5e:51:26:1d:d1:21: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AE:14:81:1D:2B:81:E4:ED:FF:84:9B:FD:B9:DA:11:59:0B:35:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9d99fac-c6d1-32d2-b980-ad974e633160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:a4:b5:24:67:9b:93:52:b7:5b:6a:48:69:2b:94:8e:f0:46: 2a:5c:08:93:1a:60:eb:1c:7a:5a:fe:3b:50:5a:3f:1b:6d:c5: 62:76:2a:1c:70:64:6d:53:73:f7:aa:a2:ff:d0:69:63:34:63: 21:6d:ee:04:10:2b:9d:0c:a8:d2:25:a0:25:f9:be:fb:ed:9a: 1c:7b:f7:e6:dd:06:49:d7:92:bd:a5:82:b9:46:f9:cd:f4:d9: 87:a2:19:57:37:a3:d3:c9:1a:d1:5b:70:75:a6:d2:b6:f9:75: 34:ab:76:73:c2:11:38:6a:4c:71:ae:1a:76:62:e9:0a:4b:a8: 0d:2b:25:7e:e7:a3:7b:07:cf:41:47:06:2e:ad:91:a4:0f:e7: 12:f7:60:ca:d8:3f:4d:45:a1:ea:39:c9:ed:a6:23:20:12:c9: 46:eb:69:40:84:2d:59:88:95:3c:13:e5:a0:8d:24:80:b8:ce: 8e:91:c5:55:43:7c:99:0b:04:1e:ee:90:f9:05:07:05:84:36: 6c:e8:e2:b6:1c:ab:8f:41:8d:9d:f4:ee:f7:33:c4:77:d0:2b: 68:0e:75:0c:08:fc:f7:1f:ad:94:e4:d3:73:bc:9a:d0:35:97: fb:20:0a:bd:af:4d:3f:52:7e:d1:38:6a:69:75:ef:15:27:bd: e4:72:74:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEIYhESk5aBoB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NWNhNTU2MmMtMmE0ZS00NGMzLTllNzUtODI3NTViMDgyNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggxSYJNJFnqcwlI2jz7uywzb34ZE8F1lCzE8 b+M+/GcRvDQQeocDnvR2poe3zNNmKl2uhBUKoJCd24907J08ZNvi63V+LBJJXNR7 hqNWX4v+G1zxoCkBZmT+9OVNis2zhA410HX6oqpX+YhJrvdkl+k1lmJ7k2UNiB+C jMlK0V9z7ULevEoqmO82tJGcacKrb6wpcB0QHnBhZajQVh+iJZuEo5MiljmIlEVe 3cvVOF7OaR6eLatCBfq71VwJ7lG26gwGyU4gZ0TQFK1quQiVTj2/HdhcobHBo1VS u5EUBUuFK40ZmQh572NAWR6aZ8u4CUHGOgYCFHdeUSYd0SE2OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFquFIEdK4Hk7f+Em/252hFZCzXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzlkOTlmYWMtYzZkMS0z MmQyLWI5ODAtYWQ5NzRlNjMzMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSktSRnm5NSt1tqSGkrlI7wRipcCJMaYOscelr+O1BaPxttxWJ2Khxw ZG1Tc/eqov/QaWM0YyFt7gQQK50MqNIloCX5vvvtmhx79+bdBknXkr2lgrlG+c30 2YeiGVc3o9PJGtFbcHWm0rb5dTSrdnPCEThqTHGuGnZi6QpLqA0rJX7no3sHz0FH Bi6tkaQP5xL3YMrYP01Foeo5ye2mIyASyUbraUCELVmIlTwT5aCNJIC4zo6RxVVD fJkLBB7ukPkFBwWENmzo4rYcq49BjZ307vczxHfQK2gOdQwI/PcfrZTk03O8mtA1 l/sgCr2vTT9SftE4aml17xUnveRydLk= -----END CERTIFICATE-----Generated at Sat Nov 1 15:23:40 2025 by rpki-client