$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe50946-2663-37b3-a7a4-dd8c923176ee.roa File: fbe50946-2663-37b3-a7a4-dd8c923176ee.roa (raw, json) Hash identifier: Ng6coAs0rQNTjZoTwBJwmei7DCCPkly2Hz2e+bPLyiw= Subject key identifier: A1:03:1F:EA:4C:97:CF:20:2B:73:23:35:03:8E:B9:6A:44:C5:A6:3B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9327B53222956728E43ED00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe50946-2663-37b3-a7a4-dd8c923176ee.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:7b:53:22:29:56:72:8e:43:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ee16a286-b699-4d73-a0ff-5e4b8a62095e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:d7:af:fd:f0:84:80:ec:14:90:9b:50:98: dd:1b:a2:1c:22:59:37:cc:ca:d2:26:d1:42:18:0c: 2b:6d:b0:b5:32:ed:7b:ff:45:27:fb:20:22:20:d0: 8c:28:b4:59:d5:72:ee:7f:59:67:5b:8a:b4:24:03: 44:9c:8a:a3:2b:39:0e:21:ef:95:9e:8d:18:21:2e: 9d:86:30:c9:13:e8:05:ac:37:6a:53:bd:7e:04:8a: c0:ba:61:30:54:9e:cf:31:61:e5:52:00:96:bc:4f: 5b:ad:10:fe:13:d7:23:dc:13:64:bf:70:06:8d:53: 31:ac:75:05:07:6d:6d:d2:1d:2f:b6:43:16:c4:74: 15:c4:d6:30:c4:4a:03:be:a4:62:7c:de:89:fc:76: 40:43:51:c1:c5:7f:30:2d:9a:fb:d8:5c:8e:84:bd: fd:7d:32:3b:6f:40:be:41:be:42:23:cf:a6:c8:19: 1f:00:fb:68:46:a9:ff:fe:ee:d9:91:aa:15:7a:c9: b9:a3:21:39:d5:52:b6:4b:38:73:59:1c:33:03:9c: 24:a8:57:89:3f:b5:e5:8e:2c:58:99:12:fe:36:02: c8:23:d3:50:74:05:91:97:88:2c:8e:d5:6f:1c:63: eb:f7:22:9e:31:8e:40:1a:51:a3:e5:93:46:fa:0e: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:03:1F:EA:4C:97:CF:20:2B:73:23:35:03:8E:B9:6A:44:C5:A6:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fbe50946-2663-37b3-a7a4-dd8c923176ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:22:67:71:c3:68:35:97:de:05:bb:23:d3:f3:5b:80:7a:24: 87:e5:b9:b2:e8:9c:a7:70:06:75:4e:c9:bc:1f:87:59:ac:f6: 5d:a6:55:69:d3:d1:44:0a:c4:cc:b3:7b:11:8a:7c:80:ae:49: b7:8f:e2:1c:47:ce:99:2b:1c:97:ac:5a:c6:31:09:42:99:63: ac:5d:85:b4:a7:a6:d1:df:1e:4a:17:19:4a:f4:e4:09:25:ee: fb:ab:4a:04:1b:ae:e9:5b:1e:47:c8:62:e8:37:5f:bd:fe:45: 13:e2:b7:ae:1c:ed:1b:da:70:e9:a3:77:ae:ad:c8:32:74:ae: 2c:87:ac:b1:38:90:29:e6:a1:ac:27:9c:ae:20:45:72:13:37: 85:12:96:1f:94:4f:41:28:23:fa:7d:74:fa:6f:50:f2:48:37: 15:0b:98:82:9d:cd:3a:c7:8c:b4:ed:b5:b8:18:25:f5:3c:92: 35:42:95:6a:b2:77:0e:f6:7c:ec:3a:81:2b:23:a9:ed:45:37: cd:eb:c8:0c:9a:05:9c:6f:0e:a5:81:c3:46:a8:53:af:89:10: 33:c7:46:b0:8d:d0:3f:5b:27:8f:20:72:25:8e:b0:0c:8a:2b: 31:45:8d:55:55:f5:6d:46:3c:cd:67:a0:5f:d6:ce:d1:f8:9b: bb:41:f1:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMntTIilWco5D7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZWUxNmEyODYtYjY5OS00ZDczLWEwZmYtNWU0YjhhNjIwOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHvXr/3whIDsFJCbUJjdG6IcIlk3zMrSJtFC GAwrbbC1Mu17/0Un+yAiINCMKLRZ1XLuf1lnW4q0JANEnIqjKzkOIe+Vno0YIS6d hjDJE+gFrDdqU71+BIrAumEwVJ7PMWHlUgCWvE9brRD+E9cj3BNkv3AGjVMxrHUF B21t0h0vtkMWxHQVxNYwxEoDvqRifN6J/HZAQ1HBxX8wLZr72FyOhL39fTI7b0C+ Qb5CI8+myBkfAPtoRqn//u7ZkaoVesm5oyE51VK2SzhzWRwzA5wkqFeJP7XljixY mRL+NgLII9NQdAWRl4gsjtVvHGPr9yKeMY5AGlGj5ZNG+g4T9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEDH+pMl88gK3MjNQOOuWpExaY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmJlNTA5NDYtMjY2My0z N2IzLWE3YTQtZGQ4YzkyMzE3NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYiZ3HDaDWX3gW7I9PzW4B6JIflubLonKdwBnVOybwfh1ms9l2mVWnT 0UQKxMyzexGKfICuSbeP4hxHzpkrHJesWsYxCUKZY6xdhbSnptHfHkoXGUr05Akl 7vurSgQbrulbHkfIYug3X73+RRPit64c7RvacOmjd66tyDJ0riyHrLE4kCnmoawn nK4gRXITN4USlh+UT0EoI/p9dPpvUPJINxULmIKdzTrHjLTttbgYJfU8kjVClWqy dw72fOw6gSsjqe1FN83ryAyaBZxvDqWBw0aoU6+JEDPHRrCN0D9bJ48gciWOsAyK KzFFjVVV9W1GPM1noF/WztH4m7tB8eI= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:35 2025 by rpki-client