$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02f9830c-0921-3d16-a5ce-3620b762783b.roa File: 02f9830c-0921-3d16-a5ce-3620b762783b.roa (raw, json) Hash identifier: b5YhwbM9oK9vmGuZZzbX/RFhhDd7aE/sTZM2kQH5UKU= Subject key identifier: 9A:93:C0:71:1E:45:12:8F:D0:50:FC:0C:02:86:4D:42:E2:9F:1C:AD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB40FF79F353E1EEF6C03A60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02f9830c-0921-3d16-a5ce-3620b762783b.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:ff:79:f3:53:e1:ee:f6:c0:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=0a8dc10d-2eac-4c46-81e4-00f5a80425b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:dd:26:bd:12:f7:71:27:71:11:4c:7d:7b: e8:c5:0b:2a:e4:fc:97:e6:1f:c5:b1:39:a3:7e:c8: 04:b3:2e:25:71:6e:61:35:e9:67:5d:a7:66:9e:8e: 76:44:b0:33:2e:36:4e:31:27:df:90:8f:b8:d4:d4: 2b:10:b9:ec:55:c1:62:ba:b0:4a:a0:af:df:b4:20: f8:c9:7e:97:0b:1c:34:6b:bb:dc:e3:ba:ec:b5:ed: 30:55:36:a5:2f:10:e2:d6:7d:d3:1b:b7:21:89:01: 82:00:aa:73:b2:1d:cc:1f:c3:df:3a:57:cd:5b:a2: 64:67:57:90:0e:da:c3:7d:f9:17:75:6d:ed:7e:34: 1c:4a:b5:07:25:df:73:5b:5d:cf:7e:3c:b8:ba:95: 68:f3:b7:19:69:3b:85:01:7c:09:61:73:9f:b7:c0: 40:1a:f9:4c:4f:3b:34:bf:24:ce:e2:97:18:83:52: f3:fe:e7:66:29:8b:5b:7a:24:75:0a:c9:45:38:51: 37:90:df:69:93:f5:9d:e8:bd:c1:8f:64:28:05:11: 09:f6:28:7b:63:42:3c:ee:eb:ba:bd:c3:de:fe:f5: bf:f0:57:69:6f:a0:54:65:16:76:9c:c5:ec:cb:85: c1:55:f9:91:5c:5d:84:c3:49:27:be:e7:68:e9:e5: c1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:93:C0:71:1E:45:12:8F:D0:50:FC:0C:02:86:4D:42:E2:9F:1C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02f9830c-0921-3d16-a5ce-3620b762783b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:d9:8f:c9:61:89:37:86:b5:5e:d8:d0:61:7e:d7:b2:b0:03: 93:af:c5:bb:42:1c:48:aa:bf:22:b7:22:d5:cd:b6:ff:6f:56: ed:a6:90:67:c8:69:c9:9d:1d:bc:e5:b0:48:ed:64:cb:07:05: db:d8:e4:0b:fa:6e:3e:75:5d:f3:5a:ac:4b:87:35:b5:d4:43: 4c:20:67:07:c7:d6:94:25:a4:63:0d:c7:e2:95:d3:5e:4b:39: 67:6a:70:67:9d:25:7c:79:aa:2d:bc:16:9b:c5:33:10:c8:2e: 50:f7:c2:0d:77:6d:e9:e4:6c:3d:01:4e:46:78:ad:ea:04:5d: 76:61:d6:64:8c:2c:d2:47:95:6a:d3:bc:15:fb:41:1c:8a:34: 12:79:05:d5:34:cc:2a:07:ab:d3:62:31:86:b9:fa:a0:cb:09: 35:39:6d:21:fb:82:25:20:1f:da:2a:41:71:48:ba:78:58:b0: a7:e6:25:8b:64:a2:d3:1b:f0:2e:3f:a5:c3:81:70:5d:b0:87: 6f:8d:05:0a:e8:7d:71:87:3b:e2:a2:72:1a:07:a3:fe:8f:5b: 3a:bd:5d:cb:01:b7:65:86:92:8a:55:68:01:40:1c:ee:66:97: 96:9f:f3:fd:84:f7:19:3d:00:64:7e:77:04:b9:44:b7:81:a8: fc:e2:55:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQP9581Ph7vbAOmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MGE4ZGMxMGQtMmVhYy00YzQ2LTgxZTQtMDBmNWE4MDQyNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jrdJr0S93EncRFMfXvoxQsq5PyX5h/FsTmj fsgEsy4lcW5hNelnXadmno52RLAzLjZOMSffkI+41NQrELnsVcFiurBKoK/ftCD4 yX6XCxw0a7vc47rste0wVTalLxDi1n3TG7chiQGCAKpzsh3MH8PfOlfNW6JkZ1eQ DtrDffkXdW3tfjQcSrUHJd9zW13Pfjy4upVo87cZaTuFAXwJYXOft8BAGvlMTzs0 vyTO4pcYg1Lz/udmKYtbeiR1CslFOFE3kN9pk/Wd6L3Bj2QoBREJ9ih7Y0I87uu6 vcPe/vW/8Fdpb6BUZRZ2nMXsy4XBVfmRXF2Ew0knvudo6eXByQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqTwHEeRRKP0FD8DAKGTULinxytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDJmOTgzMGMtMDkyMS0z ZDE2LWE1Y2UtMzYyMGI3NjI3ODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3Zj8lhiTeGtV7Y0GF+17KwA5OvxbtCHEiqvyK3ItXNtv9vVu2mkGfI acmdHbzlsEjtZMsHBdvY5Av6bj51XfNarEuHNbXUQ0wgZwfH1pQlpGMNx+KV015L OWdqcGedJXx5qi28FpvFMxDILlD3wg13benkbD0BTkZ4reoEXXZh1mSMLNJHlWrT vBX7QRyKNBJ5BdU0zCoHq9NiMYa5+qDLCTU5bSH7giUgH9oqQXFIunhYsKfmJYtk otMb8C4/pcOBcF2wh2+NBQrofXGHO+KichoHo/6PWzq9XcsBt2WGkopVaAFAHO5m l5af8/2E9xk9AGR+dwS5RLeBqPziVaY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:31:07 2025 by rpki-client