$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa File: da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa (raw, json) Hash identifier: qHvbvFrr7lS5NQW01EWwflt2GzXnQC2nVMuaMKK2KfM= Subject key identifier: 15:39:40:AA:1B:5B:DD:E0:02:CE:3D:64:AE:88:7B:60:F7:0C:EC:B4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BAA97B068A27DB6EAC81E2AC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.68.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b0:68:a2:7d:b6:ea:c8:1e:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=5d65435b-7615-4861-a48f-6e78bea994d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f2:62:47:dc:bc:05:57:e9:c5:64:ba:88:06: f4:62:4d:4d:40:16:0d:28:e8:39:83:4b:0f:56:3a: f5:6a:e1:68:6e:37:6b:f3:8b:e6:b6:81:34:e7:1f: 5b:4e:55:d4:d4:33:b6:1e:5e:56:62:e4:fd:3a:8b: 08:17:46:a8:a8:d2:b2:7c:52:61:c8:cd:cd:73:96: aa:6a:d4:68:64:bd:bf:b6:f8:1d:5e:fd:f1:f8:d7: f1:e5:84:d4:24:b5:a2:27:43:25:02:34:9a:67:2d: 9d:cc:12:d1:ad:15:bc:72:f7:96:bf:32:81:52:05: 24:4a:71:94:a4:f8:2e:6d:65:ae:8a:07:de:cb:d0: 3f:6f:fd:53:49:e7:bd:ce:b1:03:d2:80:14:85:f3: c0:99:21:39:0c:9a:57:32:5f:ac:14:63:d2:01:1d: 41:95:95:c2:fe:86:25:8b:15:88:95:ae:a1:15:c8: 37:08:2e:d8:e6:da:63:11:46:1e:ac:26:46:df:1f: 97:a0:56:3a:20:62:28:39:20:a5:5e:f0:c5:d2:c5: b9:20:ba:8f:43:e6:73:82:9b:23:f1:0b:dd:02:e6: ad:c0:bd:7f:21:a7:38:1b:73:c9:68:43:6f:df:f5: df:99:c8:e7:40:5c:74:cf:11:08:3a:8e:5e:b9:72: 90:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:39:40:AA:1B:5B:DD:E0:02:CE:3D:64:AE:88:7B:60:F7:0C:EC:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:04:f3:b8:09:17:06:eb:d0:66:99:1a:61:72:15:7e:7f:d5: b2:42:a8:43:3a:9b:37:4e:a3:ed:df:71:79:a2:90:56:8a:ac: ee:d5:38:6a:8b:e6:52:54:78:9a:a5:79:c4:f0:65:78:87:56: c8:09:62:96:9f:e8:39:55:48:1f:bd:2a:0e:39:cd:48:c0:48: 62:e5:44:d6:b6:7d:ca:58:ed:d9:e8:dc:04:80:1d:79:87:a5: 39:6e:87:1d:d8:f2:2a:37:6f:83:d3:44:a8:f4:c5:40:96:ac: 6a:ad:f4:e6:b0:1e:4d:b7:28:e9:1a:d0:51:63:80:e3:cc:9c: 95:9d:58:1a:60:72:2c:0e:a6:e8:53:e4:e1:e2:d4:0f:c9:5d: 79:82:79:d7:82:71:e7:97:48:8f:32:ca:fe:29:3c:fb:ac:91: 41:ef:1a:ca:17:3b:53:1a:28:2d:29:67:8a:72:5a:dd:df:f8: 57:a3:90:09:00:db:18:15:2b:9a:22:67:6b:b1:64:15:75:6b: d0:45:64:91:a3:d7:19:af:2d:62:1b:3e:35:ce:79:e8:e3:29: 52:dd:75:e9:d8:c3:ae:0d:8f:47:cf:a0:18:3d:6b:76:f3:89: ea:f5:59:b4:cc:89:b0:52:e8:8b:25:8a:5c:62:83:54:67:5f: 16:5f:3b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7Boon226sgeKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NWQ2NTQzNWItNzYxNS00ODYxLWE0OGYtNmU3OGJlYTk5NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PJiR9y8BVfpxWS6iAb0Yk1NQBYNKOg5g0sP Vjr1auFobjdr84vmtoE05x9bTlXU1DO2Hl5WYuT9OosIF0aoqNKyfFJhyM3Nc5aq atRoZL2/tvgdXv3x+Nfx5YTUJLWiJ0MlAjSaZy2dzBLRrRW8cveWvzKBUgUkSnGU pPgubWWuigfey9A/b/1TSee9zrED0oAUhfPAmSE5DJpXMl+sFGPSAR1BlZXC/oYl ixWIla6hFcg3CC7Y5tpjEUYerCZG3x+XoFY6IGIoOSClXvDF0sW5ILqPQ+Zzgpsj 8QvdAuatwL1/Iac4G3PJaENv3/XfmcjnQFx0zxEIOo5euXKQDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU5QKobW93gAs49ZK6Ie2D3DOy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE1OWZkMmQtMzIzYS0z OTA1LTlmNWYtOGI3N2I5ZmQxZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIE87gJFwbr0GaZGmFyFX5/1bJCqEM6mzdOo+3fcXmikFaKrO7VOGqL 5lJUeJqlecTwZXiHVsgJYpaf6DlVSB+9Kg45zUjASGLlRNa2fcpY7dno3ASAHXmH pTluhx3Y8io3b4PTRKj0xUCWrGqt9OawHk23KOka0FFjgOPMnJWdWBpgciwOpuhT 5OHi1A/JXXmCedeCceeXSI8yyv4pPPuskUHvGsoXO1MaKC0pZ4pyWt3f+FejkAkA 2xgVK5oiZ2uxZBV1a9BFZJGj1xmvLWIbPjXOeejjKVLddenYw64Nj0fPoBg9a3bz ier1WbTMibBS6Islilxig1RnXxZfO4k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:12 2025 by rpki-client