$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e27afd34-df25-37ca-9da6-48a3b015beb6.roa File: e27afd34-df25-37ca-9da6-48a3b015beb6.roa (raw, json) Hash identifier: BZNaYkG6UOEn1YifVCpu2DK6RFSnDT4Rsnq6gn/5Dzg= Subject key identifier: 1E:83:B3:69:9F:5F:FD:1D:E4:4C:BD:61:59:A8:54:08:8A:72:5F:68 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD313E3958DA65A9A24800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e27afd34-df25-37ca-9da6-48a3b015beb6.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:31:3e:39:58:da:65:a9:a2:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=a7ea00d1-01be-4c63-9b26-b1d9560ee65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:81:87:c4:8a:dd:c6:b9:21:22:a2:b4:c7:e2: e1:0d:57:0a:db:0c:38:2c:f1:9c:9c:84:58:6e:2f: 34:f2:47:33:89:57:67:d3:c9:09:04:cd:2e:d0:20: 0a:7f:a7:37:4c:dd:2f:99:c0:7f:fd:17:60:bd:f2: 4a:79:84:be:9f:23:cd:4a:78:4d:54:f4:f7:83:13: 21:78:8f:22:21:c4:58:05:53:4e:d7:5d:6e:a5:ef: c3:8a:5b:d5:42:8d:45:9f:12:df:d5:b9:8f:0f:ca: 5a:ad:75:1d:33:3e:70:80:e9:79:47:55:f4:e7:51: 58:44:07:85:07:09:87:61:93:26:c9:51:ea:fa:e3: ac:95:c0:12:9d:3a:ac:c3:dd:a1:00:52:bb:db:af: d4:4e:d2:07:ec:33:12:38:ff:f9:fe:f7:78:73:b7: 57:48:f9:bd:8f:b5:e6:2c:1d:d5:11:a8:30:f1:4d: 12:e7:39:35:55:35:9f:1e:15:e6:bc:ae:bf:a6:c0: 9f:11:54:43:4b:3e:c4:ad:5b:ff:8d:be:9b:04:6d: f3:ae:f9:cf:86:18:68:78:58:6a:0a:4d:0e:34:c4: 1e:f5:d6:a7:0f:82:e4:cc:f0:3c:5b:f1:dc:e6:33: d8:b6:d1:85:4c:09:26:fb:bc:65:c8:03:23:7a:95: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:83:B3:69:9F:5F:FD:1D:E4:4C:BD:61:59:A8:54:08:8A:72:5F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e27afd34-df25-37ca-9da6-48a3b015beb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:e9:d6:6a:9d:6f:ba:8a:33:f4:d0:8d:8d:0b:36:8b:e6:1d: b0:80:b3:01:59:f7:51:b6:ee:f6:0e:d6:f7:e1:58:9d:6b:33: 27:e4:25:13:dd:46:e2:f4:01:cb:21:45:66:0a:72:a6:d4:2c: e8:3d:38:2c:f6:ca:54:14:4f:5a:f4:ec:5c:8e:ed:d3:00:aa: 5c:43:e3:bf:00:f0:d3:89:33:34:3a:c7:b7:2c:38:d8:a7:8a: 9b:89:3f:10:11:3f:f3:5f:9c:a3:fe:97:8d:cc:ee:0f:b4:4d: d1:b8:24:90:3e:f5:f4:c3:19:09:54:65:11:7c:be:30:a6:e2: 7a:ac:e5:e7:2b:f4:aa:ad:d2:5f:3f:c0:4b:88:1b:4e:3b:d5: 5a:ef:01:c8:ee:91:ad:de:17:b7:89:17:60:6b:dd:45:de:6d: 74:36:56:3c:81:80:84:b6:76:e3:2a:c4:53:c2:da:b6:37:00: 52:2c:46:3f:b8:86:56:1c:d5:05:cc:64:18:0b:64:dd:fe:54: d4:65:f8:0b:98:1a:08:3c:8e:22:7a:e0:7d:34:ab:29:0a:8e: aa:8f:80:8b:5c:cc:41:c0:dc:c5:a1:8d:6c:19:a1:5a:42:a7: 50:e8:e9:2b:01:cb:16:b3:10:52:1b:ca:1c:10:1d:65:04:7d: 60:be:4f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TE+OVjaZamiSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YTdlYTAwZDEtMDFiZS00YzYzLTliMjYtYjFkOTU2MGVlNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4GHxIrdxrkhIqK0x+LhDVcK2ww4LPGcnIRY bi808kcziVdn08kJBM0u0CAKf6c3TN0vmcB//RdgvfJKeYS+nyPNSnhNVPT3gxMh eI8iIcRYBVNO111upe/DilvVQo1FnxLf1bmPD8parXUdMz5wgOl5R1X051FYRAeF BwmHYZMmyVHq+uOslcASnTqsw92hAFK726/UTtIH7DMSOP/5/vd4c7dXSPm9j7Xm LB3VEagw8U0S5zk1VTWfHhXmvK6/psCfEVRDSz7ErVv/jb6bBG3zrvnPhhhoeFhq Ck0ONMQe9danD4LkzPA8W/Hc5jPYttGFTAkm+7xlyAMjepXFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6Ds2mfX/0d5Ey9YVmoVAiKcl9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTI3YWZkMzQtZGYyNS0z N2NhLTlkYTYtNDhhM2IwMTViZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbp1mqdb7qKM/TQjY0LNovmHbCAswFZ91G27vYO1vfhWJ1rMyfkJRPd RuL0AcshRWYKcqbULOg9OCz2ylQUT1r07FyO7dMAqlxD478A8NOJMzQ6x7csONin ipuJPxARP/NfnKP+l43M7g+0TdG4JJA+9fTDGQlUZRF8vjCm4nqs5ecr9Kqt0l8/ wEuIG0471VrvAcjuka3eF7eJF2Br3UXebXQ2VjyBgIS2duMqxFPC2rY3AFIsRj+4 hlYc1QXMZBgLZN3+VNRl+AuYGgg8jiJ64H00qykKjqqPgItczEHA3MWhjWwZoVpC p1Do6SsByxazEFIbyhwQHWUEfWC+T3U= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:26 2025 by rpki-client