$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca350f89-da27-3eac-a40d-0e3e377f42ea.roa File: ca350f89-da27-3eac-a40d-0e3e377f42ea.roa (raw, json) Hash identifier: vhI3meSppQ2YYfdtsqg3UsIctxB3cjwAhZkiBn3MmhI= Subject key identifier: 08:32:11:EC:2C:1A:DE:1F:A4:85:5D:D1:05:F8:6F:92:B1:D6:E3:A2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93280D267FFB83716F2E0E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca350f89-da27-3eac-a40d-0e3e377f42ea.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:80:d2:67:ff:b8:37:16:f2:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=9a1e36b4-6fdf-4d66-a4d6-0a06b71710a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3f:26:7a:3e:4e:aa:cb:7e:7b:60:94:69:4b: 1d:86:3b:c0:6e:90:99:fa:72:9a:02:fd:98:10:a2: 54:dd:fd:6b:4a:eb:95:a0:83:8e:68:33:83:c8:37: d1:47:10:54:2e:e0:46:82:38:38:3b:ca:c1:1b:01: d4:42:d9:8c:49:d7:99:1e:54:7f:36:5b:d5:ea:16: 9f:7c:d2:84:60:99:94:de:af:4d:31:e0:b1:67:e2: 4e:6b:a4:1a:51:a3:5c:ec:71:f7:e2:60:ee:9e:fd: 11:7f:9b:47:23:2f:6b:ac:06:8e:4b:cb:62:18:9c: 24:2d:c1:8d:0f:7a:85:6f:2f:1d:5a:e5:fa:45:7f: ac:a4:ae:71:e1:55:08:79:19:23:18:6a:05:9b:e7: 67:2a:3e:de:d9:1b:da:d2:92:f5:29:e8:f5:e0:80: 35:fc:31:a1:39:ed:ce:15:ad:56:02:7e:81:07:bb: 68:d2:a7:49:d1:45:db:22:dd:76:22:6b:f9:0d:f7: 58:64:89:99:14:ac:b6:15:cf:5b:f3:dc:0c:07:c9: e5:ab:95:29:39:a8:0f:de:86:b7:c2:a8:ae:10:15: 2d:35:f2:bc:5f:5a:b0:ec:e3:cf:ca:d6:b3:9a:93: 8a:65:76:82:25:bb:0c:0f:4e:96:4f:58:00:e5:66: 6b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:11:EC:2C:1A:DE:1F:A4:85:5D:D1:05:F8:6F:92:B1:D6:E3:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca350f89-da27-3eac-a40d-0e3e377f42ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:45:aa:01:15:a3:fc:fd:6e:a7:32:70:d1:b1:84:4f:1d:85: 38:e4:5d:06:e5:e0:2b:f7:b5:23:83:37:d5:4e:1d:0f:16:d2: 57:3a:55:a2:4f:3e:4e:77:d0:49:85:65:24:57:a8:fa:52:aa: c4:34:91:c0:db:f8:ce:f9:ba:a9:af:43:3e:9a:2d:79:ec:01: d2:9f:76:d8:e7:6f:b3:dd:15:89:fa:3b:60:30:17:ec:42:cb: ee:9b:14:2a:88:a4:22:c8:9c:3d:d7:60:5a:d3:ed:03:24:db: e5:f3:63:51:af:be:13:89:e2:58:b5:eb:d6:94:64:e8:11:f2: be:08:60:bb:4f:d9:38:b2:e5:4b:78:dc:b2:db:ed:a8:fa:ee: 40:49:41:44:9b:9b:38:10:7f:83:8c:94:3c:bb:79:06:c5:21: 50:b8:ae:5c:92:3b:fb:e0:b6:2e:77:b0:d4:d1:85:9a:f1:54: 60:7b:08:30:da:8d:d9:1c:4f:f3:d0:41:b7:d3:ea:dd:26:d8: 3a:93:f4:a7:75:a7:47:20:1a:0b:39:49:dc:1e:c0:e9:71:95: 3b:3d:ca:3e:0c:da:8b:f2:27:e1:84:32:2c:3d:b8:09:bc:81: 70:49:96:f9:a3:9d:3e:5b:5b:ef:02:af:ab:5f:ba:db:f6:cb: e3:94:20:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoDSZ/+4Nxby4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OWExZTM2YjQtNmZkZi00ZDY2LWE0ZDYtMGEwNmI3MTcxMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT8mej5Oqst+e2CUaUsdhjvAbpCZ+nKaAv2Y EKJU3f1rSuuVoIOOaDODyDfRRxBULuBGgjg4O8rBGwHUQtmMSdeZHlR/NlvV6haf fNKEYJmU3q9NMeCxZ+JOa6QaUaNc7HH34mDunv0Rf5tHIy9rrAaOS8tiGJwkLcGN D3qFby8dWuX6RX+spK5x4VUIeRkjGGoFm+dnKj7e2Rva0pL1Kej14IA1/DGhOe3O Fa1WAn6BB7to0qdJ0UXbIt12Imv5DfdYZImZFKy2Fc9b89wMB8nlq5UpOagP3oa3 wqiuEBUtNfK8X1qw7OPPytazmpOKZXaCJbsMD06WT1gA5WZrUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgyEewsGt4fpIVd0QX4b5Kx1uOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2EzNTBmODktZGEyNy0z ZWFjLWE0MGQtMGUzZTM3N2Y0MmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRFqgEVo/z9bqcycNGxhE8dhTjkXQbl4Cv3tSODN9VOHQ8W0lc6VaJP Pk530EmFZSRXqPpSqsQ0kcDb+M75uqmvQz6aLXnsAdKfdtjnb7PdFYn6O2AwF+xC y+6bFCqIpCLInD3XYFrT7QMk2+XzY1GvvhOJ4li169aUZOgR8r4IYLtP2Tiy5Ut4 3LLb7aj67kBJQUSbmzgQf4OMlDy7eQbFIVC4rlySO/vgti53sNTRhZrxVGB7CDDa jdkcT/PQQbfT6t0m2DqT9Kd1p0cgGgs5SdwewOlxlTs9yj4M2ovyJ+GEMiw9uAm8 gXBJlvmjnT5bW+8Cr6tfutv2y+OUIAU= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:52 2025 by rpki-client