$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9946000-cb57-39d8-88ce-a727304500bf.roa File: f9946000-cb57-39d8-88ce-a727304500bf.roa (raw, json) Hash identifier: mVfk4uglGauNVBxslOKbrZz4HXRY2ENzPs8h2powCzU= Subject key identifier: 19:8A:04:A9:B3:7E:77:4E:83:8A:6E:A8:ED:63:CB:0C:2B:FC:07:B4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0EAA2527CF6A5EDE25C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9946000-cb57-39d8-88ce-a727304500bf.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0e:aa:25:27:cf:6a:5e:de:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=e59d7389-7d0e-4a55-b73d-03dfc4a5a540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8b:8a:16:76:d6:ce:54:df:8b:7a:c6:22:c9: 7f:96:06:2d:75:ff:c0:49:d6:be:58:09:14:be:ff: df:1a:a3:80:2c:a9:06:4d:5a:c3:97:61:fa:58:29: 27:67:3e:a2:f5:94:b8:95:e1:99:60:14:0d:54:52: 88:7b:bf:c6:5d:04:d6:29:ed:86:88:e1:18:7c:b8: c5:ba:ee:2c:f4:62:07:99:dd:ad:f1:7a:22:ef:3c: aa:24:3c:71:6e:bb:fe:e9:4a:e9:2c:84:d1:a5:25: 9f:b4:c3:44:39:93:76:6a:2f:b8:64:91:b6:d2:27: db:d3:e5:a9:61:6b:c5:b4:f5:fb:94:b5:ac:84:a1: 9e:dd:db:36:4c:a2:70:8e:7c:ca:57:b0:19:04:35: ae:17:bc:5b:08:a9:95:c2:32:d1:fa:0c:e8:20:d8: 25:52:51:ea:19:ae:f8:19:ab:77:1f:78:3a:11:11: bc:42:2a:96:78:b8:84:37:a1:4e:81:01:9f:ae:a4: 4b:87:78:04:a0:11:51:40:a1:89:51:d7:86:3a:35: c5:b8:39:41:1b:11:e6:41:21:ee:b3:51:00:87:8b: 72:d4:63:bc:2c:d2:a0:11:61:97:52:53:f4:47:5c: 9f:34:2f:4d:b2:33:88:c6:40:bd:13:ce:99:61:0d: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8A:04:A9:B3:7E:77:4E:83:8A:6E:A8:ED:63:CB:0C:2B:FC:07:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9946000-cb57-39d8-88ce-a727304500bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:be:a7:aa:b1:99:19:81:a0:18:67:76:4d:f9:15:6b:da:a1: 9d:5a:f5:35:82:c0:a4:e7:69:7c:72:e1:a9:15:ce:84:e2:3c: f5:aa:42:a3:28:a4:d7:cf:ed:2b:18:3f:04:1f:c1:05:c6:67: a8:22:7d:30:74:c4:ef:dd:2a:c0:b1:4a:3c:3c:cc:bc:3d:c5: d6:4d:f8:cd:f3:2e:7d:ef:c7:f1:31:1f:72:cf:ae:3e:0e:70: 9e:9a:95:6e:c0:66:fe:9b:81:34:eb:a0:38:aa:82:3e:cf:24: ee:72:b4:00:14:6b:eb:7f:2b:0a:71:de:39:98:8d:da:5e:0c: 3e:b4:dc:fb:c0:c8:ce:7a:8d:94:48:49:71:35:d6:2e:73:f5: 57:f5:36:6f:88:7b:45:d9:2a:dc:4d:b7:fa:63:37:81:a8:6b: fe:d3:20:d9:9c:0e:dc:82:30:22:a4:15:ef:bf:5e:3a:20:51: 5e:02:dc:e1:0a:00:d9:00:95:9c:7c:2e:8e:ab:94:d5:38:45: 92:ec:23:e1:ce:58:a8:0e:b2:9f:1a:ec:57:9b:a3:73:8a:69: 16:f9:20:00:71:1f:db:c6:78:f5:a9:0c:1c:3e:29:31:78:44: d7:3a:0c:dc:6f:57:0a:1e:a5:94:b1:e8:7e:56:e7:c3:7c:e7: d2:3c:51:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQ6qJSfPal7eJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZTU5ZDczODktN2QwZS00YTU1LWI3M2QtMDNkZmM0YTVhNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIuKFnbWzlTfi3rGIsl/lgYtdf/ASda+WAkU vv/fGqOALKkGTVrDl2H6WCknZz6i9ZS4leGZYBQNVFKIe7/GXQTWKe2GiOEYfLjF uu4s9GIHmd2t8Xoi7zyqJDxxbrv+6UrpLITRpSWftMNEOZN2ai+4ZJG20ifb0+Wp YWvFtPX7lLWshKGe3ds2TKJwjnzKV7AZBDWuF7xbCKmVwjLR+gzoINglUlHqGa74 Gat3H3g6ERG8QiqWeLiEN6FOgQGfrqRLh3gEoBFRQKGJUdeGOjXFuDlBGxHmQSHu s1EAh4ty1GO8LNKgEWGXUlP0R1yfNC9NsjOIxkC9E86ZYQ2MyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmKBKmzfndOg4puqO1jywwr/Ae0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjk5NDYwMDAtY2I1Ny0z OWQ4LTg4Y2UtYTcyNzMwNDUwMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJq+p6qxmRmBoBhndk35FWvaoZ1a9TWCwKTnaXxy4akVzoTiPPWqQqMo pNfP7SsYPwQfwQXGZ6gifTB0xO/dKsCxSjw8zLw9xdZN+M3zLn3vx/ExH3LPrj4O cJ6alW7AZv6bgTTroDiqgj7PJO5ytAAUa+t/Kwpx3jmYjdpeDD603PvAyM56jZRI SXE11i5z9Vf1Nm+Ie0XZKtxNt/pjN4Goa/7TINmcDtyCMCKkFe+/XjogUV4C3OEK ANkAlZx8Lo6rlNU4RZLsI+HOWKgOsp8a7Febo3OKaRb5IABxH9vGePWpDBw+KTF4 RNc6DNxvVwoepZSx6H5W58N859I8UZk= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:24 2025 by rpki-client