$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f664b4c5-e87f-3925-8207-48233717f706.roa File: f664b4c5-e87f-3925-8207-48233717f706.roa (raw, json) Hash identifier: o0OMhY3VwtGmQHi2OQwUzytjAMuTFFspzWjBt1mIhh4= Subject key identifier: 58:85:AC:9C:21:11:0A:3C:64:AD:46:09:37:D2:B6:0F:F7:E4:2E:95 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328379AB191E96E057EDC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f664b4c5-e87f-3925-8207-48233717f706.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:83:79:ab:19:1e:96:e0:57:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=dc9a6a68-61d4-49c3-957f-b5d6759fc473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:40:6d:cc:cb:21:a2:08:c4:31:2b:46:7f: c4:3f:08:9f:bf:4a:f7:f2:02:9a:cf:81:c9:83:c6: 32:91:49:d6:a1:21:1b:df:c4:58:db:fa:0e:95:a2: 54:8e:7a:19:5e:c0:c3:cd:fb:58:d6:17:19:19:f6: a2:11:5c:a1:4a:74:f2:f4:6a:75:8e:e3:8e:13:bf: 64:3b:5f:10:ee:bb:7c:99:3b:a1:c2:24:23:59:1b: 21:c9:aa:c3:18:4b:5d:fe:30:34:07:57:c7:17:6c: 46:93:41:3d:4e:f7:f5:f7:87:a3:65:f4:62:7e:b6: 19:61:ab:d4:13:01:36:00:84:74:df:c7:aa:d0:4b: c0:5a:3d:b1:be:c8:08:15:f9:a9:b7:3e:a6:06:20: ae:f9:78:60:56:6d:a2:29:eb:86:e6:93:4d:b9:f1: 59:0c:93:43:c8:54:d8:21:bf:cc:b0:36:96:2b:57: 45:01:aa:52:ac:fd:44:b5:8c:40:47:b9:1f:84:a9: 07:8e:29:15:50:fa:32:fc:ad:11:a9:bc:f8:11:e5: 25:b8:dd:26:a8:d0:a3:9b:89:20:da:03:b8:db:a3: 06:c4:37:58:69:fd:f8:69:21:e2:0e:d7:57:f1:1a: 05:20:31:19:0c:7b:72:d7:ba:07:2a:b6:fe:59:bf: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:85:AC:9C:21:11:0A:3C:64:AD:46:09:37:D2:B6:0F:F7:E4:2E:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f664b4c5-e87f-3925-8207-48233717f706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7a:e4:06:29:04:79:ca:22:04:5a:2a:c0:fa:13:3b:1b:26: 78:5a:3f:a1:09:2c:6a:dd:5c:36:39:ab:62:5b:09:7b:60:67: 3f:ed:24:6d:20:85:b9:56:09:be:dc:c5:fa:30:fa:c2:63:8b: 1b:50:af:2e:be:b9:0f:0c:36:50:1d:b5:d3:81:61:1d:a3:68: 92:0a:a4:9c:9b:ee:b0:fa:f3:88:29:c9:ec:8d:66:74:5a:8d: 18:35:ee:24:17:c3:87:36:ad:81:c7:2c:db:78:5a:68:8d:b7: f3:21:58:f8:c6:8d:84:5c:15:cd:17:bb:22:d4:54:8e:2e:88: c0:76:7c:bc:6b:15:4e:d2:32:a9:0f:af:32:22:86:b3:79:58: d4:4e:8b:19:d8:69:93:6b:2d:49:00:f8:34:50:aa:18:bf:80: 6f:b0:e1:6b:63:c2:25:52:e0:ce:f3:e8:96:c7:b9:3f:c6:ef: 77:50:e0:c3:36:4b:0f:12:73:37:78:40:09:f2:e2:69:94:ee: ec:c4:88:06:4d:c9:03:04:7d:e7:63:7a:fa:2e:7d:e5:1d:09: 7e:aa:12:8b:79:4e:94:15:cf:79:f8:e5:ea:d7:b5:3c:13:75: 82:28:d4:e9:b7:35:0a:4a:34:51:f0:56:1c:83:81:17:09:ad: cb:9a:03:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMoN5qxkeluBX7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZGM5YTZhNjgtNjFkNC00OWMzLTk1N2YtYjVkNjc1OWZjNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU1AbczLIaIIxDErRn/EPwifv0r38gKaz4HJ g8YykUnWoSEb38RY2/oOlaJUjnoZXsDDzftY1hcZGfaiEVyhSnTy9Gp1juOOE79k O18Q7rt8mTuhwiQjWRshyarDGEtd/jA0B1fHF2xGk0E9Tvf194ejZfRifrYZYavU EwE2AIR038eq0EvAWj2xvsgIFfmptz6mBiCu+XhgVm2iKeuG5pNNufFZDJNDyFTY Ib/MsDaWK1dFAapSrP1EtYxAR7kfhKkHjikVUPoy/K0Rqbz4EeUluN0mqNCjm4kg 2gO426MGxDdYaf34aSHiDtdX8RoFIDEZDHty17oHKrb+Wb+CWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiFrJwhEQo8ZK1GCTfStg/35C6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjY2NGI0YzUtZTg3Zi0z OTI1LTgyMDctNDgyMzM3MTdmNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE565AYpBHnKIgRaKsD6EzsbJnhaP6EJLGrdXDY5q2JbCXtgZz/tJG0g hblWCb7cxfow+sJjixtQry6+uQ8MNlAdtdOBYR2jaJIKpJyb7rD684gpyeyNZnRa jRg17iQXw4c2rYHHLNt4WmiNt/MhWPjGjYRcFc0XuyLUVI4uiMB2fLxrFU7SMqkP rzIihrN5WNROixnYaZNrLUkA+DRQqhi/gG+w4WtjwiVS4M7z6JbHuT/G73dQ4MM2 Sw8Sczd4QAny4mmU7uzEiAZNyQMEfedjevoufeUdCX6qEot5TpQVz3n45erXtTwT dYIo1Om3NQpKNFHwVhyDgRcJrcuaA6M= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:33 2025 by rpki-client