$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa File: efd0da62-170f-3a0e-b80d-9db169fdb224.roa (raw, json) Hash identifier: hQsfmhjTV40P2jar1nBsb/103Crbswm1oHUu36YQNl4= Subject key identifier: A8:42:1D:8C:A5:0D:CA:C0:92:C0:F6:24:98:20:2A:0C:61:39:AD:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BABFD1BC2111472B4A2CB4480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:1b:c2:11:14:72:b4:a2:cb:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=f84cd010-e7c2-4c1f-b6f6-8191fbedc1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:ac:96:f4:d3:bd:a8:64:45:01:1a:77:02: 6a:17:26:2f:fe:17:d1:d4:7d:34:2c:5f:d0:89:23: 89:41:51:01:71:72:93:d8:67:3c:c5:e1:28:30:07: 01:5c:ab:ba:0e:02:f8:33:45:5b:13:81:ea:15:b1: b0:56:c3:6a:15:ab:d0:b6:ee:6d:12:d7:24:13:ab: 3a:89:0c:d4:c0:28:9d:c3:a1:fe:52:5b:a6:55:98: 8b:5c:2e:9e:01:66:70:5b:5f:62:e0:f5:5e:ec:dc: ad:74:38:2d:34:11:47:73:1b:43:9f:f7:a7:eb:30: de:90:e6:99:be:d3:9d:83:c8:ba:68:3f:b1:87:90: ea:0c:cc:a0:76:47:af:b5:41:46:f1:d5:ce:8f:64: 14:87:c4:09:51:64:eb:e2:7e:67:5c:de:14:61:bf: 23:6f:95:d0:1c:0d:9f:72:aa:bb:c0:c8:f3:b0:f9: d6:b2:ff:cc:b0:4f:fd:d4:ad:00:a2:d0:c8:df:8e: cf:bb:3e:cc:5d:95:e3:c0:29:19:c5:8c:f9:45:83: 04:ef:78:c4:7d:18:d9:a0:36:f6:48:5c:ec:30:e7: 4a:d1:3e:fd:d5:50:4e:2a:97:d1:5e:7c:98:92:16: 54:31:01:da:a5:4b:c3:02:52:e5:28:1e:c7:86:cf: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:42:1D:8C:A5:0D:CA:C0:92:C0:F6:24:98:20:2A:0C:61:39:AD:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:00:a9:4c:26:3f:0e:0e:f9:28:b8:6a:bb:1a:4a:9b:e9:12: b0:7a:0c:c0:8a:f5:fd:1f:c9:c2:c6:8b:b4:1e:f2:af:b8:53: 10:56:92:f0:53:64:d6:f4:cf:e3:d5:a0:af:b2:6e:78:be:22: 5e:f0:e6:40:ad:5a:72:a8:63:96:f3:34:4b:dd:b9:40:7a:ea: ee:ec:20:3e:1c:e4:a4:cf:52:98:5b:a6:3f:62:80:79:bb:6e: cc:53:6c:25:2b:1e:e2:40:85:76:75:24:ce:bb:10:80:80:1d: 2f:cc:cc:4a:23:bb:f8:61:48:6f:4f:49:3a:68:a4:ac:ad:98: 35:5c:53:1f:f1:3f:fe:da:ef:b5:cc:d4:4a:08:dc:dc:ba:4b: 41:d4:65:a7:a1:d2:f9:c4:82:03:0d:6d:1d:bf:6c:eb:57:84: cf:3f:3f:ff:59:03:de:a1:0d:89:65:2e:a1:0a:c1:06:4b:43: 34:25:59:e7:e9:3d:2a:07:d4:a2:a6:bb:e3:37:56:71:6e:c2: b6:d1:01:ac:8a:cb:6a:45:2c:d9:2f:21:6e:fb:be:29:54:d8: 34:5b:c7:a7:84:7c:95:ca:b4:16:e1:fe:e0:33:49:b3:b8:a7: 63:5b:11:e3:b7:5d:d5:b1:1e:1f:47:95:e4:fb:ed:fa:78:62: b0:20:1b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RvCERRytKLLRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk Zjg0Y2QwMTAtZTdjMi00YzFmLWI2ZjYtODE5MWZiZWRjMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m6slvTTvahkRQEadwJqFyYv/hfR1H00LF/Q iSOJQVEBcXKT2Gc8xeEoMAcBXKu6DgL4M0VbE4HqFbGwVsNqFavQtu5tEtckE6s6 iQzUwCidw6H+UlumVZiLXC6eAWZwW19i4PVe7NytdDgtNBFHcxtDn/en6zDekOaZ vtOdg8i6aD+xh5DqDMygdkevtUFG8dXOj2QUh8QJUWTr4n5nXN4UYb8jb5XQHA2f cqq7wMjzsPnWsv/MsE/91K0AotDI347Puz7MXZXjwCkZxYz5RYME73jEfRjZoDb2 SFzsMOdK0T791VBOKpfRXnyYkhZUMQHapUvDAlLlKB7Hhs/NwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhCHYylDcrAksD2JJggKgxhOa29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWZkMGRhNjItMTcwZi0z YTBlLWI4MGQtOWRiMTY5ZmRiMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4AqUwmPw4O+Si4arsaSpvpErB6DMCK9f0fycLGi7Qe8q+4UxBWkvBT ZNb0z+PVoK+ybni+Il7w5kCtWnKoY5bzNEvduUB66u7sID4c5KTPUphbpj9igHm7 bsxTbCUrHuJAhXZ1JM67EICAHS/MzEoju/hhSG9PSTpopKytmDVcUx/xP/7a77XM 1EoI3Ny6S0HUZaeh0vnEggMNbR2/bOtXhM8/P/9ZA96hDYllLqEKwQZLQzQlWefp PSoH1KKmu+M3VnFuwrbRAayKy2pFLNkvIW77vilU2DRbx6eEfJXKtBbh/uAzSbO4 p2NbEeO3XdWxHh9HleT77fp4YrAgG40= -----END CERTIFICATE-----Generated at Sat Nov 1 15:25:20 2025 by rpki-client