$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68db1a78-59b6-323c-9533-17b901843c3f.roa File: 68db1a78-59b6-323c-9533-17b901843c3f.roa (raw, json) Hash identifier: /d+2ByfQj5pnFc2JXGTxXiVbakn1oDWBAsMn0yTwtcc= Subject key identifier: C0:E9:99:48:95:9E:EB:A1:6E:52:3A:E7:DA:52:53:FF:AE:33:66:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB88D51E5A75EB6C7D27DD880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68db1a78-59b6-323c-9533-17b901843c3f.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 132892 IP address blocks: 172.69.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:51:e5:a7:5e:b6:c7:d2:7d:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=469833e1-6340-4e99-a357-3897aedb2c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:77:1a:3a:dc:c1:2b:77:16:9b:01:c7:b6:f9: f9:51:78:4a:06:44:5c:17:1c:65:ae:f3:a2:af:d5: 15:85:e4:38:74:ec:15:75:85:99:69:6b:ca:7f:25: a9:ce:57:9b:46:53:b8:31:9b:4e:84:2c:f6:76:80: 54:be:52:6d:24:6a:86:fa:2d:6f:85:50:14:c9:c6: 30:d0:b2:89:33:b0:fb:22:f9:0d:2b:59:d1:fa:1f: 47:ce:55:f7:b0:68:fa:03:c9:15:f9:7c:da:c8:b1: 82:03:a9:46:ad:24:82:1d:c2:1f:b2:54:99:a0:e3: c6:19:a9:d8:4c:22:b4:cf:5e:6f:bf:8d:2e:df:d1: e1:28:4c:4a:cf:25:e6:4d:3e:3c:dc:5d:c9:7a:27: 91:b7:9c:f6:34:e4:e9:df:ea:43:6f:41:49:db:a6: 87:4d:5a:f5:4a:7b:6c:6a:76:de:87:2d:27:28:3a: 71:81:09:50:d3:69:02:4a:01:f9:4c:03:40:54:53: c3:fc:7c:ae:54:83:97:10:8f:f8:63:e2:4c:12:6d: b0:1c:45:e2:f5:60:5e:ab:3f:0b:c0:ba:86:b1:a3: 66:03:8f:6d:cb:91:89:82:30:12:e4:02:a1:b9:7f: 60:36:49:f6:23:dd:ab:d8:f6:34:b4:e0:bc:47:39: 76:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E9:99:48:95:9E:EB:A1:6E:52:3A:E7:DA:52:53:FF:AE:33:66:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68db1a78-59b6-323c-9533-17b901843c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:15:9c:3d:8c:06:fe:af:0b:36:ac:b9:5b:2e:2c:65:16:f1: 06:f5:ba:de:67:1f:ca:1e:ec:35:dd:40:ba:54:0b:1e:a2:d3: 29:a7:d0:37:c9:3d:9d:c0:e8:33:94:fe:dd:ae:88:d2:1b:ef: 08:fb:3f:6c:80:a7:2c:da:36:5a:62:0e:cd:3c:2f:8a:87:29: b8:11:c7:fc:f3:b5:9e:4b:fc:40:ca:49:c4:a3:21:d9:47:8d: 5f:4d:a4:d1:83:f3:7f:ba:31:4f:6d:5b:74:c7:4c:ca:36:c4: d1:97:a1:48:c3:26:41:76:04:93:e0:7e:8d:dd:e5:db:0b:47: 33:68:6c:bb:76:23:aa:cd:17:48:4c:8a:9b:16:b3:47:38:0b: af:3f:c4:04:7b:17:ef:fe:ae:2b:d4:aa:f4:fd:34:8e:a8:7c: b1:a6:0a:fe:12:a8:76:da:60:93:1b:d4:88:d1:69:49:f7:16: 9f:88:bf:9d:5d:45:6c:5d:56:7a:32:92:71:4a:7c:b4:d9:0d: 4a:ff:bc:50:22:4b:3f:e1:65:d0:96:33:97:78:53:8d:e5:e0: b0:52:65:44:4f:e1:a1:41:9e:b0:48:13:0c:c2:c8:62:81:36: ff:af:a3:d6:3b:e1:68:53:b7:e6:64:99:fc:5f:0f:7f:96:8d: ab:c2:e4:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVHlp162x9J92IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDY5ODMzZTEtNjM0MC00ZTk5LWEzNTctMzg5N2FlZGIyYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3caOtzBK3cWmwHHtvn5UXhKBkRcFxxlrvOi r9UVheQ4dOwVdYWZaWvKfyWpzlebRlO4MZtOhCz2doBUvlJtJGqG+i1vhVAUycYw 0LKJM7D7IvkNK1nR+h9HzlX3sGj6A8kV+XzayLGCA6lGrSSCHcIfslSZoOPGGanY TCK0z15vv40u39HhKExKzyXmTT483F3JeieRt5z2NOTp3+pDb0FJ26aHTVr1Snts anbehy0nKDpxgQlQ02kCSgH5TANAVFPD/HyuVIOXEI/4Y+JMEm2wHEXi9WBeqz8L wLqGsaNmA49ty5GJgjAS5AKhuX9gNkn2I92r2PY0tOC8Rzl2awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDpmUiVnuuhblI659pSU/+uM2blMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjhkYjFhNzgtNTliNi0z MjNjLTk1MzMtMTdiOTAxODQzYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrEUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYVnD2MBv6vCzasuVsuLGUW8Qb1ut5nH8oe7DXdQLpUCx6i0ymn0DfJ PZ3A6DOU/t2uiNIb7wj7P2yApyzaNlpiDs08L4qHKbgRx/zztZ5L/EDKScSjIdlH jV9NpNGD83+6MU9tW3THTMo2xNGXoUjDJkF2BJPgfo3d5dsLRzNobLt2I6rNF0hM ipsWs0c4C68/xAR7F+/+rivUqvT9NI6ofLGmCv4SqHbaYJMb1IjRaUn3Fp+Iv51d RWxdVnoyknFKfLTZDUr/vFAiSz/hZdCWM5d4U43l4LBSZURP4aFBnrBIEwzCyGKB Nv+vo9Y74WhTt+ZkmfxfD3+WjavC5ME= -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:27 2025 by rpki-client