$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa File: 979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa (raw, json) Hash identifier: eGw3M9Gy2XqKf3nd667Zl/hWDFO70uKhV/sBcraTdUk= Subject key identifier: FE:29:18:35:E6:25:C2:85:D5:E0:18:70:CC:1A:88:06:5D:47:1D:B0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA9328F91A2ADEFC4B8FF9100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.68.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:8f:91:a2:ad:ef:c4:b8:ff:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=93b2d1d6-5aa5-4704-912d-01411465c382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:ba:42:94:81:28:ad:a6:53:0a:8b:35:31: 13:9c:d7:04:ff:4e:33:dc:61:55:06:77:96:e6:95: c5:eb:97:6b:28:34:80:52:7a:9e:87:aa:84:d6:d9: 17:a5:7d:c3:d1:e1:a5:64:1e:02:00:65:fb:95:80: 3f:27:19:ed:16:6c:7c:d9:ab:bf:49:1c:88:43:dd: fc:33:fa:ee:f8:77:1f:fe:6e:f4:86:38:3b:b2:44: 14:75:bc:49:39:2d:dc:7f:21:6e:34:16:40:59:79: 7e:a0:90:27:76:e7:8a:ed:b1:48:90:da:5f:9c:56: bb:e9:a5:a1:b0:c2:b5:d7:53:f2:43:3c:3c:f5:c4: 2d:79:82:b3:e5:83:1b:1d:35:f5:b6:2a:ff:f6:55: 43:f2:a7:f7:97:59:9a:97:a8:d4:49:7e:c8:84:3d: 86:07:89:24:8e:1f:d7:27:e0:c0:65:64:66:42:e6: 57:dd:53:6b:ac:e0:30:7a:2a:52:f2:01:18:22:dc: 05:4a:06:cf:73:68:58:cc:05:92:cd:d9:6e:9c:41: 90:ca:70:15:6b:82:25:c8:07:d5:31:ee:04:4e:66: ae:b0:07:78:9b:40:db:61:7d:2a:c0:f4:a0:e2:c0: 39:4a:69:80:17:78:5f:c3:a7:cf:35:b1:2b:ee:d2: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:29:18:35:E6:25:C2:85:D5:E0:18:70:CC:1A:88:06:5D:47:1D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:6e:dc:b2:ac:44:49:17:93:6c:d2:47:87:83:13:17:bc:fd: 79:a8:d9:50:a0:85:1c:8e:ef:78:08:3a:b4:1e:be:85:64:93: 5a:4f:ae:ca:16:01:b1:aa:46:b7:b4:76:5d:e0:2e:82:e3:25: 81:f5:43:56:fd:c8:43:81:9d:5e:b2:76:70:78:06:90:6b:1a: 92:74:ff:4d:fc:5f:d2:12:df:d0:aa:2c:a7:71:69:08:2c:0f: 46:09:95:0e:48:27:5c:ef:0b:d7:88:b8:79:45:0b:14:19:f1: 91:57:ae:a3:c8:75:2b:88:f2:ed:4a:0c:2f:90:78:7e:93:ce: cd:84:8d:fa:6e:05:63:48:4b:be:66:0d:a1:11:3a:48:b6:5a: 3d:4a:a0:b6:ad:db:21:71:03:3d:16:a4:79:53:f2:36:24:2e: a4:34:93:b1:af:9c:ad:c8:c2:07:d4:57:cd:ab:9b:22:60:1b: fb:bc:d4:ef:de:45:3d:f1:74:49:ba:e5:0d:82:4b:15:36:70: 58:ac:ce:0d:28:00:f7:59:8b:a7:f5:ff:04:06:a4:71:53:05: 44:00:6e:65:8a:1c:eb:94:0b:be:df:4b:fc:08:eb:a9:a7:f3: a7:bb:8e:f2:ea:81:4e:2d:7a:cb:ab:76:e6:e8:d4:4f:57:26: ed:c9:81:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMo+Roq3vxLj/kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OTNiMmQxZDYtNWFhNS00NzA0LTkxMmQtMDE0MTE0NjVjMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTK6QpSBKK2mUwqLNTETnNcE/04z3GFVBneW 5pXF65drKDSAUnqeh6qE1tkXpX3D0eGlZB4CAGX7lYA/JxntFmx82au/SRyIQ938 M/ru+Hcf/m70hjg7skQUdbxJOS3cfyFuNBZAWXl+oJAndueK7bFIkNpfnFa76aWh sMK111PyQzw89cQteYKz5YMbHTX1tir/9lVD8qf3l1mal6jUSX7IhD2GB4kkjh/X J+DAZWRmQuZX3VNrrOAweipS8gEYItwFSgbPc2hYzAWSzdlunEGQynAVa4IlyAfV Me4ETmausAd4m0DbYX0qwPSg4sA5SmmAF3hfw6fPNbEr7tLfmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4pGDXmJcKF1eAYcMwaiAZdRx2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTc5ZTVmNWMtZjZmYy0z ODQ5LWFmZmEtYWEwYjBhMzdkNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFu3LKsREkXk2zSR4eDExe8/Xmo2VCghRyO73gIOrQevoVkk1pPrsoW AbGqRre0dl3gLoLjJYH1Q1b9yEOBnV6ydnB4BpBrGpJ0/038X9IS39CqLKdxaQgs D0YJlQ5IJ1zvC9eIuHlFCxQZ8ZFXrqPIdSuI8u1KDC+QeH6Tzs2EjfpuBWNIS75m DaEROki2Wj1KoLat2yFxAz0WpHlT8jYkLqQ0k7GvnK3IwgfUV82rmyJgG/u81O/e RT3xdEm65Q2CSxU2cFiszg0oAPdZi6f1/wQGpHFTBUQAbmWKHOuUC77fS/wI66mn 86e7jvLqgU4tesurdubo1E9XJu3Jgek= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:16 2025 by rpki-client