$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ddb7017a-696b-39f3-895b-cfc038a9859c.roa File: ddb7017a-696b-39f3-895b-cfc038a9859c.roa (raw, json) Hash identifier: 3tz4GAiqU1VII2MoYYA46yDbQCrC9/wYPMa0xEjqyoE= Subject key identifier: 49:D0:EA:5F:8E:7C:B6:61:E4:E4:D9:8B:49:D6:F3:B7:40:CC:B0:FC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584F4987B20A90079381B1A73780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ddb7017a-696b-39f3-895b-cfc038a9859c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14789 IP address blocks: 172.68.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:b2:0a:90:07:93:81:b1:a7:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=79690cdb-4ebf-496b-ad98-c74562926cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:01:3a:7d:61:86:9d:d8:ae:e4:64:3f:1f: 30:53:0a:ef:b8:54:60:8c:dc:21:af:d0:0b:a2:1c: 7a:0a:1e:d4:48:b5:c4:92:7d:d9:68:96:0e:a4:ac: 3b:3f:8a:6c:9b:f5:df:f6:14:18:b6:91:91:5d:03: 9c:17:e6:47:0c:dc:63:16:7c:83:0c:bd:e1:f0:f7: 58:98:4e:97:3e:a4:c5:ac:18:05:a5:2a:80:62:7f: c4:df:97:0f:ee:86:63:06:a0:fa:67:47:68:82:b4: ad:af:d8:4e:6b:92:8c:21:8e:70:3b:38:9a:a8:ba: 0c:d0:e1:15:3b:ea:d7:37:ff:da:4d:d7:f9:a1:06: ce:84:43:c6:01:02:e9:a9:75:cf:2f:a2:80:71:f3: ad:4e:5e:3d:a6:f5:ed:c8:71:2c:03:0b:3f:bb:5a: 4d:b1:66:41:8d:5d:78:b7:97:aa:a8:de:f4:58:37: 33:32:85:e9:b9:f9:9e:82:28:4a:6e:61:7d:a7:19: 3e:81:9c:d4:ff:ff:fa:cd:20:7a:30:a8:52:b0:62: 41:d2:33:d0:f6:43:47:de:48:30:7c:b3:e9:a4:d9: 60:4f:fc:ca:bc:a2:39:f8:a2:7c:fc:b8:7e:6b:66: 13:a2:10:e5:0f:9d:d9:4a:76:e5:66:de:12:69:cc: 20:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D0:EA:5F:8E:7C:B6:61:E4:E4:D9:8B:49:D6:F3:B7:40:CC:B0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ddb7017a-696b-39f3-895b-cfc038a9859c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:e8:22:95:f9:fe:01:e7:a2:31:0e:3d:cd:b1:44:3d:89:e4: 6b:56:4a:c4:72:e0:33:59:67:d3:86:e3:fe:6b:aa:98:ef:35: 76:46:40:84:63:eb:7f:bd:21:55:38:d8:c8:81:1b:2b:64:c5: 24:a4:b8:d9:23:54:40:b4:88:70:72:2b:27:c6:97:9b:fd:b7: 9d:98:65:6b:4b:68:8f:c9:d0:9a:dc:02:bb:04:c1:d0:ce:10: 38:0a:c0:58:7a:47:8a:34:9d:29:7b:16:22:f8:e3:82:cc:09: 2b:1e:a8:23:cc:95:82:12:eb:b9:52:3e:91:b4:72:70:2c:31: 9d:de:7c:bf:f7:39:82:f5:7b:9b:e1:0e:70:92:9c:71:9f:fb: ea:6c:ca:ab:b3:fc:f4:8d:b6:86:53:b2:27:76:19:28:0b:43: 55:c5:0d:b6:1c:9a:e1:d7:e7:6e:f1:57:fb:56:b3:a1:da:2c: 8d:a0:74:ff:7c:ff:07:8c:83:01:99:37:d4:6e:b5:a6:ea:25: a3:64:bd:b0:1e:62:1e:1e:23:5c:bb:82:bc:bf:c3:55:7e:69: 20:33:7f:40:78:88:7a:a7:2f:4c:f5:89:b2:b7:ad:a8:1e:55: 74:85:94:66:7f:cd:fe:ba:0b:2c:b5:0e:48:0a:88:eb:48:3c: d2:6d:86:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh7IKkAeTgbGnN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzk2OTBjZGItNGViZi00OTZiLWFkOTgtYzc0NTYyOTI2Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSIBOn1hhp3YruRkPx8wUwrvuFRgjNwhr9AL ohx6Ch7USLXEkn3ZaJYOpKw7P4psm/Xf9hQYtpGRXQOcF+ZHDNxjFnyDDL3h8PdY mE6XPqTFrBgFpSqAYn/E35cP7oZjBqD6Z0dogrStr9hOa5KMIY5wOziaqLoM0OEV O+rXN//aTdf5oQbOhEPGAQLpqXXPL6KAcfOtTl49pvXtyHEsAws/u1pNsWZBjV14 t5eqqN70WDczMoXpufmegihKbmF9pxk+gZzU///6zSB6MKhSsGJB0jPQ9kNH3kgw fLPppNlgT/zKvKI5+KJ8/Lh+a2YTohDlD53ZSnblZt4SacwgywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnQ6l+OfLZh5OTZi0nW87dAzLD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGRiNzAxN2EtNjk2Yi0z OWYzLTg5NWItY2ZjMDM4YTk4NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHoIpX5/gHnojEOPc2xRD2J5GtWSsRy4DNZZ9OG4/5rqpjvNXZGQIRj 63+9IVU42MiBGytkxSSkuNkjVEC0iHByKyfGl5v9t52YZWtLaI/J0JrcArsEwdDO EDgKwFh6R4o0nSl7FiL444LMCSseqCPMlYIS67lSPpG0cnAsMZ3efL/3OYL1e5vh DnCSnHGf++psyquz/PSNtoZTsid2GSgLQ1XFDbYcmuHX527xV/tWs6HaLI2gdP98 /weMgwGZN9RutabqJaNkvbAeYh4eI1y7gry/w1V+aSAzf0B4iHqnL0z1ibK3rage VXSFlGZ/zf66Cyy1DkgKiOtIPNJthiU= -----END CERTIFICATE-----Generated at Wed Oct 14 01:42:04 2026 by rpki-client