$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e077b92-4970-3931-948c-73006961edad.roa File: 2e077b92-4970-3931-948c-73006961edad.roa (raw, json) Hash identifier: LAWHOQl6w4ldPrRNsWyl3XSaKWch2uPQWTGu6XyoYUs= Subject key identifier: 0F:E1:CD:3B:3A:89:4D:9B:7F:B0:F3:DC:24:B2:5A:55:2D:68:D1:3E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AEC7C3D3DCB1C47398C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e077b92-4970-3931-948c-73006961edad.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ae:c7:c3:d3:dc:b1:c4:73:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=2dc62659-ba51-4853-9649-b3cab56f333f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:f6:d9:65:cf:74:b0:df:51:d9:14:b2:cf: 7e:d8:40:a0:28:20:df:2b:10:9f:04:46:24:e0:b2: dd:72:73:f7:65:17:d9:e4:f7:14:f9:5d:8e:b7:ab: 5b:a4:47:38:0b:6e:ea:41:c7:68:7d:b4:36:e2:2d: ab:d3:2c:5b:b2:e1:52:14:fc:db:38:f1:08:2d:23: b1:21:44:13:29:de:a4:f1:fc:24:8f:09:f7:48:d7: 1f:d4:be:66:55:79:7b:72:a0:be:99:8a:9a:ac:57: a6:d2:a7:9e:64:fa:aa:ba:7b:74:30:f8:e4:6b:cf: bd:25:01:be:bd:f2:00:3f:2e:dd:dd:90:30:1a:55: bb:fe:19:e0:f4:f8:73:54:31:8b:9f:b8:de:57:70: 78:6d:4a:a5:f1:09:aa:62:67:b6:e0:6c:94:4a:ef: ad:06:07:0f:bd:43:27:92:cd:5f:c5:5c:0b:6d:20: 33:61:70:50:07:43:ff:85:7f:5a:71:95:8e:6a:84: 05:3e:99:46:3d:8e:ee:14:90:a8:18:82:f0:bf:fe: 89:7e:f5:d3:79:32:a6:70:87:64:4a:f6:34:6b:c2: 18:a9:9a:9c:b8:12:2b:53:77:6f:7d:22:00:29:d7: 29:99:03:da:e4:e7:9f:b2:07:52:c1:fb:31:cf:4f: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E1:CD:3B:3A:89:4D:9B:7F:B0:F3:DC:24:B2:5A:55:2D:68:D1:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e077b92-4970-3931-948c-73006961edad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:04:f8:a6:50:5a:13:99:ec:5f:af:6b:be:a8:09:98:8d:80: 49:96:4a:08:6e:fb:30:a6:c3:1e:52:36:2e:59:86:c9:17:ca: 12:bb:d2:22:9c:38:de:0a:06:1d:50:dd:a3:69:29:5f:83:86: 0b:e9:4e:9f:3c:6e:2f:ae:d9:4e:64:1d:ae:ab:0d:54:26:d4: 5b:7d:e5:3f:02:5e:76:77:2a:72:cc:93:4e:f0:e9:c2:c5:bd: 06:7c:89:76:80:bb:fc:f1:53:54:11:23:47:ca:cc:a1:13:3b: 0e:bf:54:c2:23:ef:69:ff:cf:c3:77:00:ac:3a:2c:1f:01:2e: 37:43:c6:62:d9:b4:87:8c:30:d4:52:b0:23:9d:2a:32:2f:ac: 05:39:f7:d4:e8:9c:48:a2:21:f2:1c:58:0c:3a:f7:26:e3:17: 57:34:6c:5b:f2:96:f1:48:2b:c5:6e:0c:90:96:4e:4e:11:b9: bc:5e:f5:62:0e:73:84:f1:30:b6:2f:53:62:fd:f1:98:7b:c7: 2b:6d:13:e2:1c:f0:a0:fe:59:b1:70:66:67:84:01:36:55:af: c4:2c:eb:fc:78:20:b7:18:90:6f:71:d9:fe:96:c5:b4:0d:36: 9c:dc:9b:bc:d2:93:6c:3f:84:40:ce:d1:c0:dc:47:c5:de:c5: 7d:ce:6d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql67Hw9PcscRzmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MmRjNjI2NTktYmE1MS00ODUzLTk2NDktYjNjYWI1NmYzMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9X22WXPdLDfUdkUss9+2ECgKCDfKxCfBEYk 4LLdcnP3ZRfZ5PcU+V2Ot6tbpEc4C27qQcdofbQ24i2r0yxbsuFSFPzbOPEILSOx IUQTKd6k8fwkjwn3SNcf1L5mVXl7cqC+mYqarFem0qeeZPqqunt0MPjka8+9JQG+ vfIAPy7d3ZAwGlW7/hng9PhzVDGLn7jeV3B4bUql8QmqYme24GyUSu+tBgcPvUMn ks1fxVwLbSAzYXBQB0P/hX9acZWOaoQFPplGPY7uFJCoGILwv/6JfvXTeTKmcIdk SvY0a8IYqZqcuBIrU3dvfSIAKdcpmQPa5OefsgdSwfsxz0+pMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/hzTs6iU2bf7Dz3CSyWlUtaNE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmUwNzdiOTItNDk3MC0z OTMxLTk0OGMtNzMwMDY5NjFlZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0E+KZQWhOZ7F+va76oCZiNgEmWSghu+zCmwx5SNi5ZhskXyhK70iKc ON4KBh1Q3aNpKV+DhgvpTp88bi+u2U5kHa6rDVQm1Ft95T8CXnZ3KnLMk07w6cLF vQZ8iXaAu/zxU1QRI0fKzKETOw6/VMIj72n/z8N3AKw6LB8BLjdDxmLZtIeMMNRS sCOdKjIvrAU599TonEiiIfIcWAw69ybjF1c0bFvylvFIK8VuDJCWTk4Rubxe9WIO c4TxMLYvU2L98Zh7xyttE+Ic8KD+WbFwZmeEATZVr8Qs6/x4ILcYkG9x2f6WxbQN Npzcm7zSk2w/hEDO0cDcR8XexX3ObRo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:22:43 2025 by rpki-client