$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66c9c9be-2257-3d46-9997-7f944eb71855.roa File: 66c9c9be-2257-3d46-9997-7f944eb71855.roa (raw, json) Hash identifier: 3ocpmEAco6/5fpF1NfWEWDSRaa6+klZrSgyseegZX3U= Subject key identifier: A5:4F:53:30:D9:01:43:93:FA:A0:8C:7E:E2:15:C4:83:9B:A9:F7:5E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97AF82C6D93964C95FCD20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66c9c9be-2257-3d46-9997-7f944eb71855.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:af:82:c6:d9:39:64:c9:5f:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=2fadda27-e074-4405-ac47-b17a552e3c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:17:3b:33:b6:63:98:92:47:87:f7:13:44: ff:3d:81:e8:14:b3:7d:f7:96:61:ee:c6:1a:ab:c4: 8d:d1:cd:a2:d2:7e:c9:bf:2d:41:ef:da:c9:25:7c: 9d:1b:5e:b3:f0:c7:e6:bd:24:2a:55:e8:96:05:12: 25:e1:8f:c2:e3:5f:56:c4:4f:18:1c:c9:e5:b8:81: 9c:48:cc:ab:3d:01:78:e6:f4:53:da:fe:e5:d2:37: 08:06:4a:9f:c5:7e:20:24:cf:1e:24:c2:fa:53:55: 08:63:5b:2b:0a:95:89:2e:91:1a:f4:b1:52:17:45: 4b:36:69:2e:fa:73:a7:22:b5:f8:4b:de:0a:19:4f: e6:f5:fc:17:df:05:75:e4:cb:4e:d0:af:cd:d6:84: df:7f:00:fb:b6:73:18:5c:d8:e3:54:a3:10:6f:a1: 41:08:1b:11:3c:13:83:06:fd:ff:01:32:99:49:65: da:86:8d:2a:ba:1d:76:0c:a6:ac:35:72:98:4a:2a: 86:eb:96:a4:c4:cf:7c:46:9d:e7:8e:69:17:82:10: 2b:f1:e1:3a:36:04:98:14:ac:fd:15:59:51:de:5b: 8f:b1:80:9f:94:f7:51:72:27:8f:ad:d7:88:c1:cb: 7c:78:9e:d0:b2:03:b6:89:37:00:3e:bf:85:65:2c: b2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:53:30:D9:01:43:93:FA:A0:8C:7E:E2:15:C4:83:9B:A9:F7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/66c9c9be-2257-3d46-9997-7f944eb71855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f0:01:38:a2:0f:5f:41:bd:4a:f1:b4:61:8e:88:ef:23:ac: 8a:98:83:43:47:c5:88:af:8f:18:a2:e7:37:7a:45:cb:b7:23: a1:e3:a2:23:bb:7a:50:78:63:f8:19:d0:14:e2:11:08:31:d4: ce:91:f9:36:40:fe:91:e5:8f:26:c7:f6:a2:69:2f:ea:08:b8: 52:f6:08:d8:65:66:10:a3:2a:5a:6f:45:e0:c9:fc:45:3d:cb: 77:68:37:d1:4d:f1:33:a4:c7:31:95:0c:a8:8e:20:9e:9e:38: ed:f9:d0:02:80:15:ee:f3:a1:3f:0c:d8:67:cb:26:8f:97:a8: de:5d:16:08:e3:98:e6:4a:d0:72:42:53:90:ec:2d:d7:c9:15: 6c:8e:c7:81:b1:5f:3c:c7:bf:3c:e7:e7:65:bf:21:dd:bd:83: 2c:21:48:95:70:c8:12:db:3f:9a:9b:61:c9:1d:68:6e:f1:30: 71:9b:aa:e3:8c:89:69:ba:7e:a2:43:0b:41:90:5e:94:b9:95: de:5c:ce:18:0c:16:3c:7f:10:10:3f:64:63:fd:63:f7:d7:5c: 16:59:39:bd:a3:9c:0f:68:2c:2f:ce:9b:57:1e:b1:b2:b0:fa: 06:79:35:6b:fc:28:7a:ac:c9:9d:14:b6:97:3f:1b:67:b8:63: 52:cd:c0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6+Cxtk5ZMlfzSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MmZhZGRhMjctZTA3NC00NDA1LWFjNDctYjE3YTU1MmUzYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwakXOzO2Y5iSR4f3E0T/PYHoFLN995Zh7sYa q8SN0c2i0n7Jvy1B79rJJXydG16z8MfmvSQqVeiWBRIl4Y/C419WxE8YHMnluIGc SMyrPQF45vRT2v7l0jcIBkqfxX4gJM8eJML6U1UIY1srCpWJLpEa9LFSF0VLNmku +nOnIrX4S94KGU/m9fwX3wV15MtO0K/N1oTffwD7tnMYXNjjVKMQb6FBCBsRPBOD Bv3/ATKZSWXaho0quh12DKasNXKYSiqG65akxM98Rp3njmkXghAr8eE6NgSYFKz9 FVlR3luPsYCflPdRciePrdeIwct8eJ7QsgO2iTcAPr+FZSyyBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVPUzDZAUOT+qCMfuIVxIObqfdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjZjOWM5YmUtMjI1Ny0z ZDQ2LTk5OTctN2Y5NDRlYjcxODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrESkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzwATiiD19BvUrxtGGOiO8jrIqYg0NHxYivjxii5zd6Rcu3I6HjoiO7 elB4Y/gZ0BTiEQgx1M6R+TZA/pHljybH9qJpL+oIuFL2CNhlZhCjKlpvReDJ/EU9 y3doN9FN8TOkxzGVDKiOIJ6eOO350AKAFe7zoT8M2GfLJo+XqN5dFgjjmOZK0HJC U5DsLdfJFWyOx4GxXzzHvzzn52W/Id29gywhSJVwyBLbP5qbYckdaG7xMHGbquOM iWm6fqJDC0GQXpS5ld5czhgMFjx/EBA/ZGP9Y/fXXBZZOb2jnA9oLC/Om1cesbKw +gZ5NWv8KHqsyZ0Utpc/G2e4Y1LNwN8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:53 2025 by rpki-client