$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d77909-36f4-3808-8068-89664d455b41.roa File: f3d77909-36f4-3808-8068-89664d455b41.roa (raw, json) Hash identifier: Y7k7Vl4eDb4fMOKdE2FtT3lIGLw/uugniHXV5fZSsMs= Subject key identifier: 37:B0:C7:CD:D4:A0:54:E4:5F:C2:0E:1E:C8:11:EA:A2:A7:BC:93:0E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AF5E7FE8BEF3FC6CC200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d77909-36f4-3808-8068-89664d455b41.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:af:5e:7f:e8:be:f3:fc:6c:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=3b31a3e5-64f1-4124-a915-22f284afb69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:29:e1:f7:e1:cd:cb:28:63:80:54:54:8a: 10:fc:8a:e4:50:9e:6b:c9:8a:f5:90:26:22:99:84: 77:7a:66:2d:5e:83:11:68:38:fb:08:e0:49:14:fe: d1:48:6e:c4:db:8c:4a:63:f4:07:d7:a1:01:20:12: 56:f2:f9:77:60:99:10:ec:d2:30:c7:b3:9b:d4:51: e9:75:91:01:5d:57:c8:48:f5:cc:f2:43:72:8a:f9: bd:8f:5f:4c:e1:b3:8e:da:bc:d0:59:f4:f1:83:3e: 7d:3d:c3:76:d7:4e:c5:71:07:df:62:49:de:5e:84: 2a:06:98:0c:73:ed:28:2e:a7:3b:3f:c9:b0:cb:6c: 58:d8:ce:84:f4:71:75:e0:2f:42:b7:09:cf:d6:90: b2:fc:8e:a0:6b:12:6f:3e:ee:77:2b:30:69:a7:c7: 81:a0:fb:ff:61:30:d0:db:35:9a:a7:8b:af:d9:24: 24:e9:be:bf:44:89:fd:49:30:74:43:78:92:96:a7: 07:48:09:f6:00:75:46:3a:29:29:33:37:72:ca:fc: 55:c5:85:f7:9f:d5:b7:3b:7f:71:f0:cf:f3:e9:79: 58:bf:42:16:2a:2a:48:fd:8b:f1:14:a0:92:b0:9c: 5b:d3:36:ac:98:33:d6:42:11:30:f3:8e:0a:ed:d8: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B0:C7:CD:D4:A0:54:E4:5F:C2:0E:1E:C8:11:EA:A2:A7:BC:93:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3d77909-36f4-3808-8068-89664d455b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:6f:29:c7:5a:a4:02:f0:9c:21:cc:fa:32:78:e4:51:11:ff: 24:6b:d4:1a:7a:1e:c2:b9:e7:f9:0b:45:a1:59:b2:57:bc:a2: fb:d5:56:8f:1d:78:51:5c:e7:41:9e:a1:12:0b:9a:57:4a:70: 3d:51:a4:50:07:43:e3:2d:64:77:a5:94:8c:bc:88:29:65:0d: ff:5a:6b:ef:a0:7a:a6:72:7f:3d:b2:37:cf:81:7e:83:82:40: 9b:22:c6:52:44:32:5f:a4:18:6f:7c:9c:13:ad:e3:f4:ae:b8: 56:5d:a7:d0:a0:a4:cb:5f:91:f7:42:fd:2b:76:f5:3a:29:0c: e1:9d:a6:5d:63:83:fe:7a:8d:0b:f9:22:26:3b:66:b1:c5:19: 9b:cf:f3:df:89:4d:ff:7d:90:9c:4a:43:5b:af:af:ea:8e:7d: 8b:5a:a3:af:4e:b4:f4:91:f2:5f:c4:b9:ae:d3:d0:0f:e8:65: b3:4b:cf:4a:45:bf:dc:f9:71:cd:cd:bb:9f:1c:40:92:35:56: e0:3c:f1:86:e9:2f:38:b9:46:60:6e:fa:12:fb:f2:a2:7e:03: db:f8:51:ac:b2:1b:96:26:c6:16:d9:60:b5:86:5b:d3:8e:bd: 45:f3:41:86:c4:95:b2:50:25:cc:e9:7b:73:11:19:22:d5:19: a7:53:ed:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql69ef+i+8/xswgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk M2IzMWEzZTUtNjRmMS00MTI0LWE5MTUtMjJmMjg0YWZiNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwecp4ffhzcsoY4BUVIoQ/IrkUJ5ryYr1kCYi mYR3emYtXoMRaDj7COBJFP7RSG7E24xKY/QH16EBIBJW8vl3YJkQ7NIwx7Ob1FHp dZEBXVfISPXM8kNyivm9j19M4bOO2rzQWfTxgz59PcN2107FcQffYkneXoQqBpgM c+0oLqc7P8mwy2xY2M6E9HF14C9CtwnP1pCy/I6gaxJvPu53KzBpp8eBoPv/YTDQ 2zWap4uv2SQk6b6/RIn9STB0Q3iSlqcHSAn2AHVGOikpMzdyyvxVxYX3n9W3O39x 8M/z6XlYv0IWKipI/YvxFKCSsJxb0zasmDPWQhEw844K7djj0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDewx83UoFTkX8IOHsgR6qKnvJMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjNkNzc5MDktMzZmNC0z ODA4LTgwNjgtODk2NjRkNDU1YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEShMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJvKcdapALwnCHM+jJ45FER/yRr1Bp6HsK55/kLRaFZsle8ovvVVo8d eFFc50GeoRILmldKcD1RpFAHQ+MtZHellIy8iCllDf9aa++geqZyfz2yN8+BfoOC QJsixlJEMl+kGG98nBOt4/SuuFZdp9CgpMtfkfdC/St29TopDOGdpl1jg/56jQv5 IiY7ZrHFGZvP89+JTf99kJxKQ1uvr+qOfYtao69OtPSR8l/Eua7T0A/oZbNLz0pF v9z5cc3Nu58cQJI1VuA88YbpLzi5RmBu+hL78qJ+A9v4UayyG5YmxhbZYLWGW9OO vUXzQYbElbJQJczpe3MRGSLVGadT7XM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:47 2025 by rpki-client