$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa File: 0c88f35f-6e17-3c5e-b570-21d26061ab90.roa (raw, json) Hash identifier: qp68cJJTyI0NgcYSviFqiSQO/SR1jai+W5NDZbiX6HQ= Subject key identifier: DE:C2:CA:80:15:04:76:C9:A5:74:E4:4C:7D:CA:62:FE:31:E3:0F:B0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC7111A62EBF0D6AA4F685B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.68.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:1a:62:eb:f0:d6:aa:4f:68:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=235f28ab-e7ba-4a88-ba72-29e591de9e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:96:0a:04:c2:c1:35:cb:47:d2:b8:61:1d: c2:ea:96:2b:df:49:ee:06:4a:3d:4b:d0:30:68:f4: 03:86:38:9b:2e:21:aa:3f:ed:7b:67:46:37:75:06: ce:a2:10:d0:16:fb:e8:a3:f8:62:b5:26:de:8d:ff: b0:80:44:70:d3:43:47:7a:40:14:4e:bf:d7:97:26: 4f:8d:1e:36:e3:d8:cb:c9:0a:0d:f9:54:69:8a:d5: 39:66:25:db:7d:2c:05:52:44:1b:25:79:63:0a:fd: 28:ba:22:72:73:79:62:b4:5b:4a:06:c1:c8:d6:c6: de:4f:75:fe:a9:b5:65:71:93:74:fb:60:00:6b:6f: cd:ef:1c:35:08:bb:eb:67:09:d9:c6:e3:05:19:99: 62:76:75:49:8e:3a:cc:70:90:56:e3:f9:37:2a:c7: 75:58:f0:6f:0d:ca:67:39:36:b1:6b:c5:6d:29:7b: 7b:93:c8:95:2b:a4:08:cd:ea:b4:53:86:d3:cd:e4: 56:dc:b7:9b:22:50:74:a8:d8:8f:96:a3:d6:4d:3c: b4:e6:9c:35:f3:31:47:b0:06:85:09:19:25:e4:aa: 8b:78:18:92:69:44:fc:df:2e:46:90:7c:94:f3:81: 95:0d:ea:3a:3e:5d:07:f1:5c:b4:ec:b9:09:8b:77: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C2:CA:80:15:04:76:C9:A5:74:E4:4C:7D:CA:62:FE:31:E3:0F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0c88f35f-6e17-3c5e-b570-21d26061ab90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1b:37:12:74:0c:a1:01:aa:80:a4:23:ef:e8:01:8c:32:83: 1f:78:af:b7:7a:41:eb:e0:e3:20:d5:b6:53:46:19:17:40:ed: cf:7d:c1:12:1f:94:0b:05:53:49:77:b0:81:c5:e6:d9:da:10: 78:e2:08:6e:ca:a0:c5:39:83:f0:60:32:8a:f5:8b:23:fa:ff: 7e:cf:b5:c1:fd:e3:04:85:15:87:30:6b:65:fa:f2:40:25:94: 49:27:54:fa:7c:f0:ac:9d:a4:e3:21:23:ba:59:ac:13:f0:de: 21:9b:d1:5f:5a:f0:1e:b8:27:7d:02:77:8f:52:71:0f:9e:84: 44:2d:9f:0a:ad:bf:2a:b8:c2:e5:77:b0:7a:8e:df:87:07:bd: 63:a1:95:c1:5e:f7:99:2b:3e:a5:09:c4:33:bb:51:e0:b5:4d: 51:61:10:ad:6b:b6:46:52:9c:a0:95:ff:92:a4:bc:71:30:c8: b6:70:7a:7f:57:29:fd:63:5e:50:8e:01:a0:37:8b:ff:75:2b: 8a:b1:97:b3:a6:c1:d8:fb:8a:27:6a:1d:11:c8:60:e4:5c:a9: 05:a4:42:0a:db:9e:ad:f7:3d:de:31:52:c0:7f:4e:e5:f7:f9: 09:6a:87:95:2c:00:84:26:8c:da:6e:09:18:0f:73:78:04:2d: c5:44:ad:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERpi6/DWqk9oW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MjM1ZjI4YWItZTdiYS00YTg4LWJhNzItMjllNTkxZGU5ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOmWCgTCwTXLR9K4YR3C6pYr30nuBko9S9Aw aPQDhjibLiGqP+17Z0Y3dQbOohDQFvvoo/hitSbejf+wgERw00NHekAUTr/XlyZP jR4249jLyQoN+VRpitU5ZiXbfSwFUkQbJXljCv0ouiJyc3litFtKBsHI1sbeT3X+ qbVlcZN0+2AAa2/N7xw1CLvrZwnZxuMFGZlidnVJjjrMcJBW4/k3Ksd1WPBvDcpn OTaxa8VtKXt7k8iVK6QIzeq0U4bTzeRW3LebIlB0qNiPlqPWTTy05pw18zFHsAaF CRkl5KqLeBiSaUT83y5GkHyU84GVDeo6Pl0H8Vy07LkJi3c/uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7CyoAVBHbJpXTkTH3KYv4x4w+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGM4OGYzNWYtNmUxNy0z YzVlLWI1NzAtMjFkMjYwNjFhYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8bNxJ0DKEBqoCkI+/oAYwygx94r7d6Qevg4yDVtlNGGRdA7c99wRIf lAsFU0l3sIHF5tnaEHjiCG7KoMU5g/BgMor1iyP6/37PtcH94wSFFYcwa2X68kAl lEknVPp88KydpOMhI7pZrBPw3iGb0V9a8B64J30Cd49ScQ+ehEQtnwqtvyq4wuV3 sHqO34cHvWOhlcFe95krPqUJxDO7UeC1TVFhEK1rtkZSnKCV/5KkvHEwyLZwen9X Kf1jXlCOAaA3i/91K4qxl7Omwdj7iidqHRHIYORcqQWkQgrbnq33Pd4xUsB/TuX3 +Qlqh5UsAIQmjNpuCRgPc3gELcVErcA= -----END CERTIFICATE-----Generated at Sat Aug 23 18:10:18 2025 by rpki-client