$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa File: ef9a051b-46da-3f87-ba2d-2803e8af972c.roa (raw, json) Hash identifier: 2GZxYm80olC4ePHINgsnrni9PlzWGs1qPGSxxO7pmEk= Subject key identifier: B1:EE:E1:57:D1:BB:05:8E:B5:23:4C:92:BA:D1:7F:96:8E:A1:34:D6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD30D3F5F3E7730F7D2500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:30:d3:f5:f3:e7:73:0f:7d:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=c12574a7-a4af-41e5-ac93-2735a1122e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8e:fe:33:21:28:78:ea:b5:10:41:9a:d7:72: d4:14:3e:b6:4c:f9:60:04:b4:50:73:d5:70:9a:de: 9e:74:88:03:cc:b4:23:0e:db:a8:7f:a0:57:38:28: 6e:e1:70:9d:a1:b1:86:90:9d:f8:d4:0e:2b:9f:45: 53:4d:44:2d:c2:f7:ac:8e:d4:1b:ce:53:ee:32:f0: 4e:17:9f:66:a3:af:5f:34:91:6b:c7:bf:ad:4a:ac: 49:1a:12:c0:c8:bc:80:c5:fa:81:18:e4:b5:6d:c5: a4:60:51:78:27:03:bd:ce:44:a3:99:52:d6:d9:8c: 8f:eb:05:6a:61:77:db:20:a9:c5:10:ac:b7:fb:e2: 46:e9:8f:94:00:44:64:ab:d7:5b:31:50:9e:85:4f: e3:3a:cd:31:a5:2c:68:1b:02:32:a0:2c:13:bd:ac: a4:ac:7a:e4:bf:d5:ab:70:56:2f:a6:36:c9:d1:d9: 82:04:25:eb:68:9f:76:af:fc:b7:64:38:fb:97:d3: aa:32:6f:11:cf:81:c9:cf:85:fc:d6:e8:08:50:a9: d1:76:47:0e:bb:6f:96:6c:c8:2b:c1:99:2f:5c:b5: 95:84:d9:2c:70:ff:b3:ab:fe:8b:85:4f:a9:8e:ab: 40:22:b4:22:c6:6a:ee:ee:bb:6e:2d:17:c1:9a:7f: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EE:E1:57:D1:BB:05:8E:B5:23:4C:92:BA:D1:7F:96:8E:A1:34:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:62:e4:06:6c:99:28:99:48:de:4a:e4:a8:b6:48:2b:da:30: 0a:d0:08:11:50:50:67:20:9a:41:77:b4:69:90:d5:a8:20:51: d3:a8:e3:b5:62:4c:0e:93:95:22:7e:d0:20:d4:3b:c6:62:44: dd:d7:a8:36:dd:99:70:22:98:ec:16:4a:56:f2:2c:a2:a5:91: 6f:a4:e2:0d:bc:1e:c7:8c:c3:4c:07:c0:90:b7:1c:95:7b:cb: bf:19:30:1d:2d:42:33:8d:bd:1c:21:bf:69:3f:ef:33:9f:33: 60:2b:75:11:a9:15:be:36:cb:bc:da:32:44:76:20:1c:6b:79: 14:84:2f:f5:58:63:4b:d7:bd:2c:11:1c:32:70:cd:db:95:27: a5:5d:55:58:cc:a7:b6:68:c6:fd:bd:08:98:87:f2:af:1a:5d: 21:2c:eb:5c:b7:90:4c:8b:0d:90:d9:bc:c8:f6:7d:78:c8:45: 78:d4:8c:59:aa:00:de:8b:70:c8:e3:af:e3:dd:c6:32:f4:d5: bb:f4:f5:96:00:30:67:d9:97:83:f2:da:b1:20:80:96:84:17: 80:75:79:12:e0:2f:7b:c2:1f:cf:90:ee:4a:b3:3d:d1:59:86: 32:1f:36:6c:ed:37:44:73:ef:3a:60:c3:0c:78:fa:47:ea:a7: c4:ad:d9:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TDT9fPncw99JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YzEyNTc0YTctYTRhZi00MWU1LWFjOTMtMjczNWExMTIyZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I7+MyEoeOq1EEGa13LUFD62TPlgBLRQc9Vw mt6edIgDzLQjDtuof6BXOChu4XCdobGGkJ341A4rn0VTTUQtwvesjtQbzlPuMvBO F59mo69fNJFrx7+tSqxJGhLAyLyAxfqBGOS1bcWkYFF4JwO9zkSjmVLW2YyP6wVq YXfbIKnFEKy3++JG6Y+UAERkq9dbMVCehU/jOs0xpSxoGwIyoCwTvaykrHrkv9Wr cFYvpjbJ0dmCBCXraJ92r/y3ZDj7l9OqMm8Rz4HJz4X81ugIUKnRdkcOu2+WbMgr wZkvXLWVhNkscP+zq/6LhU+pjqtAIrQixmru7rtuLRfBmn8Y6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHu4VfRuwWOtSNMkrrRf5aOoTTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWY5YTA1MWItNDZkYS0z Zjg3LWJhMmQtMjgwM2U4YWY5NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVi5AZsmSiZSN5K5Ki2SCvaMArQCBFQUGcgmkF3tGmQ1aggUdOo47Vi TA6TlSJ+0CDUO8ZiRN3XqDbdmXAimOwWSlbyLKKlkW+k4g28HseMw0wHwJC3HJV7 y78ZMB0tQjONvRwhv2k/7zOfM2ArdRGpFb42y7zaMkR2IBxreRSEL/VYY0vXvSwR HDJwzduVJ6VdVVjMp7Zoxv29CJiH8q8aXSEs61y3kEyLDZDZvMj2fXjIRXjUjFmq AN6LcMjjr+PdxjL01bv09ZYAMGfZl4Py2rEggJaEF4B1eRLgL3vCH8+Q7kqzPdFZ hjIfNmztN0Rz7zpgwwx4+kfqp8St2UY= -----END CERTIFICATE-----Generated at Sat Nov 1 15:25:23 2025 by rpki-client