$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1852458-4fa2-348f-9ad5-ce08348234ab.roa File: d1852458-4fa2-348f-9ad5-ce08348234ab.roa (raw, json) Hash identifier: R9xeZyioH7dzt/UybxXcqs1DRAaoRaeeP8q6Cr4ereE= Subject key identifier: 37:AA:93:7D:BE:F7:C8:4C:93:85:45:FD:7C:42:B9:30:86:1F:BD:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328FB44C1F1458D3A70E40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1852458-4fa2-348f-9ad5-ce08348234ab.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8f:b4:4c:1f:14:58:d3:a7:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=6f79670e-d897-4a93-81aa-217a1b2a9726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:d5:fc:76:da:03:18:6d:da:c1:96:99:de: 5f:67:86:86:66:cd:1f:02:37:03:ed:f5:e2:a7:f8: 78:9a:2a:56:0e:16:72:16:78:36:2b:f4:71:5f:e6: a7:ba:fd:79:0a:46:81:0e:34:45:78:d7:56:5f:d6: 73:9e:a5:c2:ef:af:ea:04:fd:bc:57:1c:5e:6b:de: 9b:82:a3:94:94:45:e5:8f:05:82:8d:be:cc:de:a1: 5a:ba:83:d9:49:66:c8:04:f9:d3:a7:d6:d7:5a:ee: 59:81:46:c2:e6:27:77:43:1d:6c:4a:cb:24:01:73: 55:56:96:32:30:c9:4a:b8:a0:36:41:ce:1d:9f:05: 17:cb:73:65:e9:cb:e0:fb:dc:54:5d:25:d5:bf:7d: aa:6f:0a:96:30:d9:76:c5:9d:74:07:71:58:8f:26: ad:48:c8:2a:35:57:07:38:f2:bf:46:53:6f:3e:f6: 6e:08:00:84:1c:33:6d:3a:6d:62:7d:4a:d1:f8:5d: dd:5e:b3:70:fa:55:45:92:58:83:ad:03:ef:bf:12: 97:86:4e:68:86:a0:d2:ad:48:fe:a8:3f:be:17:b1: 2c:ea:e2:e4:41:f7:8d:20:96:ff:3d:2d:e7:81:ae: d2:b6:29:52:91:02:8d:30:e4:2f:ba:96:22:4d:da: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AA:93:7D:BE:F7:C8:4C:93:85:45:FD:7C:42:B9:30:86:1F:BD:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1852458-4fa2-348f-9ad5-ce08348234ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2c:2c:6e:56:57:2f:12:51:c6:31:82:25:1e:49:5f:91:24: b8:4c:76:15:ad:0d:8f:41:7b:65:5e:be:bf:f8:a8:55:88:b5: 68:1c:a1:2d:ec:65:2e:30:23:e1:67:01:bc:a2:60:02:b2:0f: db:76:c3:d5:3d:cf:84:70:aa:6f:36:be:64:b0:56:93:d3:90: ba:dd:70:bb:40:6c:2b:ae:c8:07:f0:fe:71:0c:79:8d:55:d2: ef:25:ef:7d:85:66:29:05:c1:a7:95:33:eb:0d:08:8f:33:4a: 89:07:1a:81:e0:d4:22:11:c2:b4:4e:10:93:92:7e:0d:6a:19: 98:a0:4b:0d:38:1e:f7:14:6a:21:89:aa:e3:07:fc:64:e9:34: 07:2b:c6:24:47:b0:b5:66:7f:65:96:fb:ea:f8:a0:f4:cc:2d: af:11:bd:cd:5b:f5:03:54:f5:a7:98:57:2b:32:29:c1:28:f4: 84:36:d9:1b:50:80:3b:81:b4:46:21:11:81:bf:20:ed:2f:4e: 7c:86:49:97:84:2b:13:ee:25:15:19:ab:17:06:bd:30:35:18: 21:32:89:fa:18:d8:63:20:ce:89:f2:32:98:82:de:06:ef:a4: e7:76:b2:01:d6:26:63:94:cd:ac:5f:29:34:1d:7b:bb:98:17: ab:59:c0:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo+0TB8UWNOnDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NmY3OTY3MGUtZDg5Ny00YTkzLTgxYWEtMjE3YTFiMmE5NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGrV/HbaAxht2sGWmd5fZ4aGZs0fAjcD7fXi p/h4mipWDhZyFng2K/RxX+anuv15CkaBDjRFeNdWX9ZznqXC76/qBP28Vxxea96b gqOUlEXljwWCjb7M3qFauoPZSWbIBPnTp9bXWu5ZgUbC5id3Qx1sSsskAXNVVpYy MMlKuKA2Qc4dnwUXy3Nl6cvg+9xUXSXVv32qbwqWMNl2xZ10B3FYjyatSMgqNVcH OPK/RlNvPvZuCACEHDNtOm1ifUrR+F3dXrNw+lVFkliDrQPvvxKXhk5ohqDSrUj+ qD++F7Es6uLkQfeNIJb/PS3nga7StilSkQKNMOQvupYiTdrDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeqk32+98hMk4VF/XxCuTCGH71HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDE4NTI0NTgtNGZhMi0z NDhmLTlhZDUtY2UwODM0ODIzNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4sLG5WVy8SUcYxgiUeSV+RJLhMdhWtDY9Be2Vevr/4qFWItWgcoS3s ZS4wI+FnAbyiYAKyD9t2w9U9z4Rwqm82vmSwVpPTkLrdcLtAbCuuyAfw/nEMeY1V 0u8l732FZikFwaeVM+sNCI8zSokHGoHg1CIRwrROEJOSfg1qGZigSw04HvcUaiGJ quMH/GTpNAcrxiRHsLVmf2WW++r4oPTMLa8Rvc1b9QNU9aeYVysyKcEo9IQ22RtQ gDuBtEYhEYG/IO0vTnyGSZeEKxPuJRUZqxcGvTA1GCEyifoY2GMgzonyMpiC3gbv pOd2sgHWJmOUzaxfKTQde7uYF6tZwOg= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:53 2025 by rpki-client