$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eef9491d-b47b-3ed4-a258-10dc7d2a2850.roa File: eef9491d-b47b-3ed4-a258-10dc7d2a2850.roa (raw, json) Hash identifier: lJIO4WWBLiBlFlwu6OPyGDSjrhAT/Ck5bUxGThhtNwc= Subject key identifier: 7F:4E:1B:7D:1E:44:96:74:60:CF:25:F3:C2:B1:BF:70:ED:61:4B:12 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFF5A36CD7444600EB4A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eef9491d-b47b-3ed4-a258-10dc7d2a2850.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ff:5a:36:cd:74:44:60:0e:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=fba7170b-882b-4e65-9035-9c6202256931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:be:d4:7f:a2:5d:62:b2:f2:b9:da:a4:74: 98:a4:75:bd:2f:97:cf:94:3d:72:de:76:80:0f:7f: a4:a3:1f:aa:c7:2b:89:91:7c:9a:28:6a:b6:c7:7a: 04:ab:f5:44:f7:06:7e:a3:bf:2d:ac:8c:ff:52:86: 2b:8a:c0:25:43:05:a0:92:67:b4:b8:e2:82:8f:6b: f5:19:e1:aa:90:95:6c:01:33:a0:45:8d:e3:47:11: 21:d2:df:6d:cc:e0:ce:5e:ba:fa:c2:11:dd:88:36: 27:c4:e9:7a:e1:6c:5e:76:11:f9:3b:6c:38:26:2a: 4b:e6:f3:d8:18:bf:67:a2:c2:b4:4b:c2:46:40:d2: a3:da:79:78:15:75:d9:31:26:a1:91:84:3d:3a:58: d3:ef:d4:12:19:e1:ae:a5:e2:cf:ed:87:7c:38:ce: 78:d8:5d:16:8d:05:93:dd:f2:ce:07:c8:9c:8e:89: 02:ca:b0:1d:b2:53:05:7e:0d:f9:53:6e:10:c3:24: 0a:df:92:42:e6:7a:b6:9d:f6:09:0b:c2:e3:4b:7d: c3:96:d3:4d:90:ed:ce:aa:9f:7a:6f:03:e7:91:16: 27:b2:9c:5d:07:b5:03:15:0a:76:5d:b8:51:36:a2: 01:e3:b7:8b:74:6b:3e:df:ac:17:70:66:bd:8d:78: a6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4E:1B:7D:1E:44:96:74:60:CF:25:F3:C2:B1:BF:70:ED:61:4B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eef9491d-b47b-3ed4-a258-10dc7d2a2850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c7:9c:65:76:ba:1f:42:bc:c4:63:36:7a:bd:b2:7f:0f:64: d4:dd:0a:58:4c:ff:ca:dc:81:58:c0:4b:13:d1:81:0d:a6:5d: a6:6e:c8:90:06:3b:c6:a5:5b:81:ad:06:ee:4e:af:c9:1b:a7: dc:f0:95:74:26:95:f5:c6:e4:ef:b2:9a:8b:45:39:41:b5:49: bd:d1:3f:d6:d1:b1:15:07:f3:d4:89:e7:b8:c5:3f:9c:97:f8: cd:ff:db:b2:8b:6b:bf:9f:76:1e:5b:d5:a7:21:89:0e:8d:25: 10:8c:c6:39:3c:0d:01:c7:18:ac:a9:a1:69:fe:60:a2:56:a9: ae:d8:7b:29:23:5d:55:a0:53:07:e2:10:4d:28:a8:bd:d9:cc: c4:da:d7:a9:87:db:57:dd:f2:9a:0e:8b:a7:0e:f5:18:85:6d: 60:25:dd:9b:e2:79:f4:69:5e:75:0d:e2:a3:c6:c3:5f:d0:f7: c1:c6:36:9f:9d:e1:6c:cb:45:b7:fd:35:0a:d4:61:62:3b:90: e4:7f:f0:9b:7a:5c:7d:f9:d5:81:52:97:c1:5e:93:46:7d:cd: 2a:92:4d:4d:69:3a:c1:5a:a1:8d:d1:0b:9e:1b:c2:32:69:10: 58:ca:0f:73:91:25:57:ed:88:14:ab:77:31:30:58:a1:1f:52: 23:cf:68:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP9aNs10RGAOtKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZmJhNzE3MGItODgyYi00ZTY1LTkwMzUtOWM2MjAyMjU2OTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ea+1H+iXWKy8rnapHSYpHW9L5fPlD1y3naA D3+kox+qxyuJkXyaKGq2x3oEq/VE9wZ+o78trIz/UoYrisAlQwWgkme0uOKCj2v1 GeGqkJVsATOgRY3jRxEh0t9tzODOXrr6whHdiDYnxOl64WxedhH5O2w4JipL5vPY GL9nosK0S8JGQNKj2nl4FXXZMSahkYQ9OljT79QSGeGupeLP7Yd8OM542F0WjQWT 3fLOB8icjokCyrAdslMFfg35U24QwyQK35JC5nq2nfYJC8LjS33DltNNkO3Oqp96 bwPnkRYnspxdB7UDFQp2XbhRNqIB47eLdGs+36wXcGa9jXimsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9OG30eRJZ0YM8l88Kxv3DtYUsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWVmOTQ5MWQtYjQ3Yi0z ZWQ0LWEyNTgtMTBkYzdkMmEyODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzHnGV2uh9CvMRjNnq9sn8PZNTdClhM/8rcgVjASxPRgQ2mXaZuyJAG O8alW4GtBu5Or8kbp9zwlXQmlfXG5O+ymotFOUG1Sb3RP9bRsRUH89SJ57jFP5yX +M3/27KLa7+fdh5b1achiQ6NJRCMxjk8DQHHGKypoWn+YKJWqa7YeykjXVWgUwfi EE0oqL3ZzMTa16mH21fd8poOi6cO9RiFbWAl3ZviefRpXnUN4qPGw1/Q98HGNp+d 4WzLRbf9NQrUYWI7kOR/8Jt6XH351YFSl8Fek0Z9zSqSTU1pOsFaoY3RC54bwjJp EFjKD3ORJVftiBSrdzEwWKEfUiPPaAE= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:39 2025 by rpki-client