$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb01411f-a6c7-32d6-9f2e-cc71de7cbbf9.roa File: cb01411f-a6c7-32d6-9f2e-cc71de7cbbf9.roa (raw, json) Hash identifier: w8cmx352VIGdwBpCnewuMnVojjkReISWyPy+JhspB0k= Subject key identifier: 23:02:A4:5B:47:CB:1F:49:E9:25:C6:66:F1:AC:B9:CC:23:A5:92:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932876F680960128D42B980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb01411f-a6c7-32d6-9f2e-cc71de7cbbf9.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:87:6f:68:09:60:12:8d:42:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=a1fcb0af-aaba-407b-b5a5-795a6e5f4ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:77:d4:f3:cd:ea:d6:79:59:f1:07:00:ae: 7b:51:72:69:f6:fe:10:e0:95:7e:9f:06:f9:8d:8a: ce:13:3b:3b:ea:7f:f4:ae:6d:d5:f1:b3:79:84:7a: 71:6d:7b:8c:cc:07:c8:60:97:62:32:da:ab:b9:1e: ef:0d:5c:bf:93:bc:33:50:17:e7:48:d6:f3:23:78: 18:61:9f:f4:bc:4b:77:e1:2f:60:aa:4a:9f:0f:38: 77:98:47:75:2e:e5:77:2b:b0:e0:4a:cf:fd:86:08: f4:7f:a7:e7:48:b9:33:b3:42:17:86:11:c4:78:11: 52:fe:21:f8:bf:7b:be:ff:1c:04:64:f0:85:e4:06: 23:0e:b4:36:78:8c:b5:06:ff:5a:7c:8a:68:6d:fb: b5:2b:57:f0:8d:7c:0c:4d:1f:0c:24:36:de:ed:0a: 49:1a:59:1e:25:13:77:fa:40:1b:fd:9e:cf:b1:2b: a3:11:e6:f4:dc:7d:80:9d:26:95:6b:5f:33:71:b8: e9:9c:27:c9:3f:58:4d:8a:e4:4d:34:50:09:f5:52: e6:3d:87:c3:64:74:12:64:4b:8a:d7:d2:df:21:42: 2f:25:18:72:b6:17:b4:f4:e4:fb:ba:6b:ea:af:a0: b7:14:3a:da:3d:5c:a2:04:11:cc:8b:4c:a5:c0:9b: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:02:A4:5B:47:CB:1F:49:E9:25:C6:66:F1:AC:B9:CC:23:A5:92:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb01411f-a6c7-32d6-9f2e-cc71de7cbbf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e2:1f:46:62:20:6f:05:f7:89:51:56:08:22:4e:cb:a2:4a: db:bd:92:a5:fd:ba:3b:ec:21:51:e3:a4:35:be:ad:a7:08:3b: 94:89:84:65:d2:92:14:a1:fe:f3:63:56:fd:04:bd:0b:66:e1: c4:60:5e:80:57:7f:ce:89:26:9d:1e:84:7d:8e:37:c5:63:17: 0e:1e:b1:9f:93:82:90:ea:81:05:57:58:3d:89:f7:f9:bf:5d: c7:65:a4:27:14:96:51:16:a8:13:3a:b3:c7:d6:a4:4c:84:64: 11:67:81:87:8e:11:d1:22:33:17:b8:1d:5e:38:4d:b5:f5:59: 50:46:55:e5:62:ae:f3:3f:76:fe:84:4a:af:20:09:4a:61:86: 13:cd:27:b5:43:ab:f6:d0:3d:c2:ff:94:e8:63:8a:c0:13:24: 24:9e:ca:a4:78:9b:dc:5c:82:ff:39:dd:cd:08:61:48:a5:a9: 93:b2:66:37:62:7e:11:68:05:c1:3c:1c:58:98:aa:40:35:db: fe:38:2f:1c:08:d9:31:27:ff:66:7d:39:de:e4:a2:3d:f4:a6: f2:76:32:6f:41:3f:d6:a7:f7:c3:64:da:6e:b2:b0:7f:94:f6: ee:1e:f5:d9:1e:13:29:02:7f:bc:ba:a9:17:c6:9e:8a:1a:d9: 9a:d5:da:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupModvaAlgEo1CuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YTFmY2IwYWYtYWFiYS00MDdiLWI1YTUtNzk1YTZlNWY0YWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxx31PPN6tZ5WfEHAK57UXJp9v4Q4JV+nwb5 jYrOEzs76n/0rm3V8bN5hHpxbXuMzAfIYJdiMtqruR7vDVy/k7wzUBfnSNbzI3gY YZ/0vEt34S9gqkqfDzh3mEd1LuV3K7DgSs/9hgj0f6fnSLkzs0IXhhHEeBFS/iH4 v3u+/xwEZPCF5AYjDrQ2eIy1Bv9afIpobfu1K1fwjXwMTR8MJDbe7QpJGlkeJRN3 +kAb/Z7PsSujEeb03H2AnSaVa18zcbjpnCfJP1hNiuRNNFAJ9VLmPYfDZHQSZEuK 19LfIUIvJRhythe09OT7umvqr6C3FDraPVyiBBHMi0ylwJuwFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMCpFtHyx9J6SXGZvGsucwjpZKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2IwMTQxMWYtYTZjNy0z MmQ2LTlmMmUtY2M3MWRlN2NiYmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDiH0ZiIG8F94lRVggiTsuiStu9kqX9ujvsIVHjpDW+racIO5SJhGXS khSh/vNjVv0EvQtm4cRgXoBXf86JJp0ehH2ON8VjFw4esZ+TgpDqgQVXWD2J9/m/ XcdlpCcUllEWqBM6s8fWpEyEZBFngYeOEdEiMxe4HV44TbX1WVBGVeVirvM/dv6E Sq8gCUphhhPNJ7VDq/bQPcL/lOhjisATJCSeyqR4m9xcgv853c0IYUilqZOyZjdi fhFoBcE8HFiYqkA12/44LxwI2TEn/2Z9Od7koj30pvJ2Mm9BP9an98Nk2m6ysH+U 9u4e9dkeEykCf7y6qRfGnooa2ZrV2uc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:38 2025 by rpki-client