$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa File: e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa (raw, json) Hash identifier: LCGNYdCHVNbOYt7JROg4c+O4KT96MeesJhxPmACtIkw= Subject key identifier: 59:C5:F7:46:E1:CA:0F:82:97:63:3F:D3:9D:55:BA:51:30:D3:FE:D3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD308F9FBD116114D4C5A2 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:30:8f:9f:bd:11:61:14:d4:c5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=a03bba6a-0722-4e04-a3a3-80e73198fc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:3d:64:a1:98:d5:a6:fe:4f:aa:2e:f5:46: 8d:d7:97:e8:7e:eb:77:c6:06:a1:c0:b1:5e:f5:f7: d4:17:48:21:e5:a9:ba:00:8b:2d:51:3e:94:5d:7e: 73:eb:4c:18:9a:04:1e:a5:17:bb:e8:25:04:ad:a6: 82:1e:62:16:e2:c2:ca:20:49:6f:ef:ec:30:88:31: 3e:36:db:3e:d7:66:9c:23:f8:ee:85:6a:81:8e:d0: ce:3c:e1:a2:1a:c1:5a:27:01:3a:2d:35:45:4d:0d: 36:c2:b0:c0:43:a4:9d:2c:7e:89:6a:a9:a5:c4:52: c2:ce:b5:1d:1c:0c:30:2e:fc:6d:69:27:96:59:23: a8:c5:3b:e6:de:e6:cb:1c:33:a9:0c:36:80:f4:86: 1c:20:3e:e6:c2:bf:f1:c7:47:49:31:44:73:16:5e: 30:f1:33:ed:d2:0c:67:58:c9:94:12:9b:a6:46:06: df:9b:a8:d6:87:a0:5b:d9:86:71:87:3c:e8:a3:f4: 05:f1:0f:08:67:51:8e:5b:72:e8:6b:6d:b9:10:b2: 0f:a6:7c:0f:aa:a9:60:54:a5:6b:6c:5f:39:41:ec: 1f:28:9e:af:9a:8f:5f:60:bc:d3:f8:03:c4:4c:eb: 63:5f:5d:55:52:9f:7c:c2:3e:a4:03:08:22:14:a8: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C5:F7:46:E1:CA:0F:82:97:63:3F:D3:9D:55:BA:51:30:D3:FE:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:48:03:b2:7e:cc:1d:52:82:a8:e7:de:cb:dc:87:3c:42:8c: 90:98:58:94:a3:6f:ed:00:01:1c:2d:ab:20:77:fd:56:5e:f5: 7d:35:1f:66:c7:67:5b:47:6e:cb:5a:66:16:59:ed:0c:2c:30: d0:2a:f9:5b:bf:6a:ff:fa:fe:c2:22:65:ab:22:62:e2:99:2e: da:f3:27:fc:94:2d:ca:dc:cf:8c:fb:3f:d4:fb:f2:94:e9:3c: fe:ac:34:3f:54:28:18:72:50:49:67:36:76:f5:a4:8c:01:57: 6b:fd:bf:74:18:1e:b6:4e:99:71:c2:78:2b:40:35:08:55:3b: a7:8e:5b:6f:15:5b:58:1b:8c:da:6c:60:d8:8c:70:29:8b:5b: 98:fb:ea:c3:01:c8:f4:9f:e8:e6:1b:b1:23:34:55:50:86:b0: 6e:5f:b5:18:46:85:60:01:6d:8a:59:ba:ed:05:e2:e4:5d:ee: da:5b:ad:6b:15:58:bb:42:e5:02:3d:3b:62:81:dc:9a:e6:7c: 29:d6:5c:90:30:d6:8b:a0:42:a3:08:ce:85:3c:cf:cd:50:01: 65:21:87:d4:0b:12:7a:e9:6b:cc:2e:1d:d7:9e:f2:cc:76:f1: b1:a6:1e:05:db:de:e0:2b:14:a0:65:06:2a:aa:81:04:cd:28: 3f:81:0e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TCPn70RYRTUxaIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YTAzYmJhNmEtMDcyMi00ZTA0LWEzYTMtODBlNzMxOThmYzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/o9ZKGY1ab+T6ou9UaN15fofut3xgahwLFe 9ffUF0gh5am6AIstUT6UXX5z60wYmgQepRe76CUEraaCHmIW4sLKIElv7+wwiDE+ Nts+12acI/juhWqBjtDOPOGiGsFaJwE6LTVFTQ02wrDAQ6SdLH6JaqmlxFLCzrUd HAwwLvxtaSeWWSOoxTvm3ubLHDOpDDaA9IYcID7mwr/xx0dJMURzFl4w8TPt0gxn WMmUEpumRgbfm6jWh6Bb2YZxhzzoo/QF8Q8IZ1GOW3Loa225ELIPpnwPqqlgVKVr bF85QewfKJ6vmo9fYLzT+APETOtjX11VUp98wj6kAwgiFKjYxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnF90bhyg+Cl2M/051VulEw0/7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTFkYjFlZjUtODg3NS0z N2IwLWE4N2QtNWYzZjFhYmQxNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrES8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRIA7J+zB1Sgqjn3svchzxCjJCYWJSjb+0AARwtqyB3/VZe9X01H2bH Z1tHbstaZhZZ7QwsMNAq+Vu/av/6/sIiZasiYuKZLtrzJ/yULcrcz4z7P9T78pTp PP6sND9UKBhyUElnNnb1pIwBV2v9v3QYHrZOmXHCeCtANQhVO6eOW28VW1gbjNps YNiMcCmLW5j76sMByPSf6OYbsSM0VVCGsG5ftRhGhWABbYpZuu0F4uRd7tpbrWsV WLtC5QI9O2KB3JrmfCnWXJAw1ougQqMIzoU8z81QAWUhh9QLEnrpa8wuHdee8sx2 8bGmHgXb3uArFKBlBiqqgQTNKD+BDow= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:07 2025 by rpki-client