$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4a5fbc1-b2e1-3b8f-8f4d-041f94365bc2.roa File: d4a5fbc1-b2e1-3b8f-8f4d-041f94365bc2.roa (raw, json) Hash identifier: 9f4upP11M6cSbBpJgiOFGUBBQKwOgVNQdvbYvlqBgcE= Subject key identifier: 56:65:30:C0:45:5A:D9:30:A1:F3:FF:25:E5:8F:D6:10:71:F6:72:95 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD310887FD2A699D6B50C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4a5fbc1-b2e1-3b8f-8f4d-041f94365bc2.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:31:08:87:fd:2a:69:9d:6b:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=5e9ebbb3-9206-48db-85bf-5144586d90c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:58:f2:f5:4f:0b:60:2b:bd:66:50:3d:51: 02:6a:18:d7:ed:54:81:64:b3:e8:e3:c3:76:f4:00: 81:ac:aa:ec:0d:50:99:37:3d:d7:96:a0:f7:9e:91: dc:58:4c:7b:ab:3e:83:27:c5:47:0d:ab:f8:d6:a3: e1:2b:9e:7e:a6:b3:8c:45:d7:67:c7:1c:bf:17:d3: e2:55:e9:f2:36:00:13:e3:f5:f6:a9:85:73:54:f3: 4f:27:8d:82:9b:0c:eb:44:c1:04:9f:fc:6d:ea:27: 44:f7:d3:79:cf:97:e9:73:16:77:ac:6c:d7:5c:1f: 2b:5c:bf:b3:c4:28:93:5b:a3:4d:91:59:b0:20:e8: 97:93:5e:f3:bd:b2:12:ec:bf:68:f0:03:c9:d6:9f: 7e:01:90:8d:51:c1:43:2b:b2:eb:1b:3a:7b:8b:64: 91:89:2e:ea:3b:29:2b:01:ed:83:39:52:08:2a:60: c1:2c:f9:88:6a:16:d6:7d:f3:72:e7:65:12:57:ca: d6:4b:79:ca:2b:52:13:55:a0:ab:cf:44:c4:c9:48: de:57:e6:b0:5e:28:3b:c4:88:16:06:88:f5:0f:cb: 56:d3:53:b1:9b:1e:96:64:bf:a8:ca:9b:76:a2:d4: b7:f1:93:49:0e:98:9c:3d:c1:e1:6c:8b:cf:9f:2b: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:65:30:C0:45:5A:D9:30:A1:F3:FF:25:E5:8F:D6:10:71:F6:72:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4a5fbc1-b2e1-3b8f-8f4d-041f94365bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d2:3d:0b:71:bb:a5:19:b5:2a:eb:a4:78:94:31:a5:eb:dc: 04:27:58:61:cc:10:c3:48:c2:9f:87:8e:aa:55:65:69:97:ff: f1:b9:27:47:d2:76:4a:e0:a5:2f:31:1a:34:b3:9c:c0:e5:c0: ef:57:ea:1f:aa:e7:a8:60:aa:8a:de:1e:6d:d9:16:c9:97:5a: 67:ab:dd:70:34:5f:c0:15:42:1e:f9:36:6a:e0:45:2a:04:94: 1e:af:87:91:14:b2:3f:08:f1:a9:c7:3d:d1:7f:d5:c4:07:8f: c5:a9:06:f7:70:ab:e0:b7:de:4e:f5:af:7c:de:fd:90:f0:87: de:e1:77:c3:5f:7b:65:6f:c1:f5:fb:87:76:3a:16:b8:af:d5: 4b:c2:9f:8e:9e:3f:e1:41:41:86:e8:ac:e9:12:c7:62:69:f0: be:0e:2b:aa:b6:22:e6:ee:92:fb:8c:88:93:ab:67:7b:36:ba: 1c:76:97:75:1c:43:5b:90:20:d5:6a:d4:48:9f:79:1c:a4:ef: 29:fd:4c:be:1c:c7:40:dc:06:0b:d3:ab:8b:e5:e7:61:2c:fc: d9:bb:91:cf:f5:e4:7e:a5:2c:40:11:59:9b:18:d1:7b:f8:56: c3:4d:55:88:a3:0b:4a:5a:a9:e5:34:2e:e2:30:c3:f3:78:47: 09:7e:c0:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TEIh/0qaZ1rUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NWU5ZWJiYjMtOTIwNi00OGRiLTg1YmYtNTE0NDU4NmQ5MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGRY8vVPC2ArvWZQPVECahjX7VSBZLPo48N2 9ACBrKrsDVCZNz3XlqD3npHcWEx7qz6DJ8VHDav41qPhK55+prOMRddnxxy/F9Pi VenyNgAT4/X2qYVzVPNPJ42CmwzrRMEEn/xt6idE99N5z5fpcxZ3rGzXXB8rXL+z xCiTW6NNkVmwIOiXk17zvbIS7L9o8APJ1p9+AZCNUcFDK7LrGzp7i2SRiS7qOykr Ae2DOVIIKmDBLPmIahbWffNy52USV8rWS3nKK1ITVaCrz0TEyUjeV+awXig7xIgW Boj1D8tW01Oxmx6WZL+oypt2otS38ZNJDpicPcHhbIvPnyuaowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZlMMBFWtkwofP/JeWP1hBx9nKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDRhNWZiYzEtYjJlMS0z YjhmLThmNGQtMDQxZjk0MzY1YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbSPQtxu6UZtSrrpHiUMaXr3AQnWGHMEMNIwp+HjqpVZWmX//G5J0fS dkrgpS8xGjSznMDlwO9X6h+q56hgqoreHm3ZFsmXWmer3XA0X8AVQh75NmrgRSoE lB6vh5EUsj8I8anHPdF/1cQHj8WpBvdwq+C33k71r3ze/ZDwh97hd8Nfe2VvwfX7 h3Y6Friv1UvCn46eP+FBQYborOkSx2Jp8L4OK6q2IubukvuMiJOrZ3s2uhx2l3Uc Q1uQINVq1EifeRyk7yn9TL4cx0DcBgvTq4vl52Es/Nm7kc/15H6lLEARWZsY0Xv4 VsNNVYijC0paqeU0LuIww/N4Rwl+wB0= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:45 2025 by rpki-client