$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5d4701b-ffd4-3e77-a16f-208f836800af.roa File: d5d4701b-ffd4-3e77-a16f-208f836800af.roa (raw, json) Hash identifier: JNlVgpE/KmueDdZxcg5spR+eNTblHK9uKaGjN07NuCU= Subject key identifier: 38:5F:A4:84:AB:C8:3D:7E:7E:54:6A:C5:31:1D:5E:F2:2B:FD:C4:F3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327D50AE0547DFD65AFE60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5d4701b-ffd4-3e77-a16f-208f836800af.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.64.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7d:50:ae:05:47:df:d6:5a:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=bcff3f29-fb23-4d12-9841-4e55a3472763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:c8:92:53:0f:7a:7c:33:04:fa:3b:74:d5: b5:a9:21:97:34:79:10:b2:47:f9:1c:df:68:29:7f: 23:be:fc:fc:a0:e2:be:64:e4:1e:51:bf:5c:b8:1e: 8c:ce:63:7e:24:ad:9b:d8:6a:6b:2b:0d:53:74:a7: 8b:6d:57:38:59:b7:b2:6f:b0:20:df:ab:0b:92:ea: 9b:93:fc:d3:40:1e:9d:7f:31:41:3a:75:84:79:8c: 33:04:de:9d:93:1c:20:14:15:aa:65:47:40:90:66: 67:db:d1:b7:61:e9:10:43:f1:30:51:2f:5e:af:b7: 69:01:d7:da:1e:88:7c:0d:06:5c:a2:36:79:a4:85: 67:0e:a3:be:2d:a0:cb:51:07:92:73:54:45:0d:ab: 5a:9c:ac:44:6e:f2:e6:82:be:4c:89:d5:43:e3:35: 8d:e8:f8:53:e4:0b:6f:b6:a0:88:15:4b:04:9c:37: 5d:d7:0e:68:00:91:3a:5b:73:92:ad:6d:48:18:84: 46:77:8f:c7:e0:a0:77:3b:26:4f:76:3c:95:20:2d: d4:af:09:e9:af:18:f2:27:23:1e:da:3b:59:c0:55: 56:77:7d:4f:24:a0:5c:86:77:a4:62:f2:c6:59:a8: 07:de:9b:cd:1b:a5:52:35:07:98:8b:c7:bd:5d:42: 7a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5F:A4:84:AB:C8:3D:7E:7E:54:6A:C5:31:1D:5E:F2:2B:FD:C4:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5d4701b-ffd4-3e77-a16f-208f836800af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:89:02:c4:7e:86:cd:f6:16:00:c9:d5:ee:38:72:b9:9b:c0: 04:92:6e:92:7e:27:89:fb:81:b4:b3:90:dc:8b:35:19:a8:3c: ed:e7:12:e8:a1:40:98:b5:93:8f:6f:34:53:c2:0b:39:c3:03: d8:59:2b:29:ff:85:ea:9f:f1:91:13:6d:5b:04:a6:b1:1e:c0: a3:d3:1b:a6:cc:48:af:d7:bc:d3:7e:ab:c0:83:6a:84:21:f7: 9e:d9:e7:63:7a:6d:12:7b:93:5d:ec:57:0e:82:5c:b0:75:26: af:ff:4b:88:a6:85:9d:fb:41:07:6b:11:3b:a8:4d:9b:fe:07: 2d:e2:c6:34:dd:e9:df:9b:e1:43:c2:82:01:e5:fe:04:37:0a: 13:c0:db:3d:df:06:e8:81:7e:33:d8:4b:b9:fb:b1:f4:2d:e8: 4c:77:e6:bb:36:e3:6a:22:73:9b:be:04:9b:fa:3c:6b:6e:2e: cb:27:ae:b2:4c:a2:b9:d1:4d:a4:e1:e5:8b:0d:75:8d:58:5f: 7f:46:e8:88:33:e1:13:8f:27:53:e3:b5:ad:8b:95:82:b4:30: 47:ee:5f:6f:1d:4c:aa:68:1b:67:55:f1:3c:cf:09:d6:47:cf: 8b:76:75:b4:be:9a:a5:05:90:89:ae:a8:eb:1f:ae:d7:9f:75: 97:9a:7a:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMn1QrgVH39Za/mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YmNmZjNmMjktZmIyMy00ZDEyLTk4NDEtNGU1NWEzNDcyNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi7IklMPenwzBPo7dNW1qSGXNHkQskf5HN9o KX8jvvz8oOK+ZOQeUb9cuB6MzmN+JK2b2GprKw1TdKeLbVc4Wbeyb7Ag36sLkuqb k/zTQB6dfzFBOnWEeYwzBN6dkxwgFBWqZUdAkGZn29G3YekQQ/EwUS9er7dpAdfa Hoh8DQZcojZ5pIVnDqO+LaDLUQeSc1RFDatanKxEbvLmgr5MidVD4zWN6PhT5Atv tqCIFUsEnDdd1w5oAJE6W3OSrW1IGIRGd4/H4KB3OyZPdjyVIC3UrwnprxjyJyMe 2jtZwFVWd31PJKBchnekYvLGWagH3pvNG6VSNQeYi8e9XUJ6QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhfpISryD1+flRqxTEdXvIr/cTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDVkNDcwMWItZmZkNC0z ZTc3LWExNmYtMjA4ZjgzNjgwMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqJAsR+hs32FgDJ1e44crmbwASSbpJ+J4n7gbSzkNyLNRmoPO3nEuih QJi1k49vNFPCCznDA9hZKyn/heqf8ZETbVsEprEewKPTG6bMSK/XvNN+q8CDaoQh 957Z52N6bRJ7k13sVw6CXLB1Jq//S4imhZ37QQdrETuoTZv+By3ixjTd6d+b4UPC ggHl/gQ3ChPA2z3fBuiBfjPYS7n7sfQt6Ex35rs242oic5u+BJv6PGtuLssnrrJM ornRTaTh5YsNdY1YX39G6Igz4ROPJ1Pjta2LlYK0MEfuX28dTKpoG2dV8TzPCdZH z4t2dbS+mqUFkImuqOsfrtefdZeaetk= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:10 2025 by rpki-client