$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/128ee08d-1ae2-3b0a-81e9-d13deb2c9125.roa File: 128ee08d-1ae2-3b0a-81e9-d13deb2c9125.roa (raw, json) Hash identifier: XBKIcUbLGOpeepCb6uVCmtDJxdtEoSYNAoFt6NHUNPE= Subject key identifier: 82:60:44:A1:56:FB:39:A9:41:12:8E:DE:AD:37:BF:BE:18:88:BC:7E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC7111538B949D25F426CB680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/128ee08d-1ae2-3b0a-81e9-d13deb2c9125.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.68.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:15:38:b9:49:d2:5f:42:6c:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=2083952f-2875-4591-86a5-1ba2e4af7140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:02:cd:73:3c:b6:24:da:f5:59:60:05:69:e9: 1f:9d:bd:3d:01:f5:7a:b1:03:4c:18:14:56:90:90: 55:57:99:a9:ed:6a:07:be:c2:f3:72:50:9f:40:45: cd:6c:b5:f4:88:40:59:01:28:07:e9:13:7f:cd:49: 18:91:50:34:d3:33:f6:25:53:cd:e1:9f:67:42:72: 71:4f:f8:e2:bb:bb:89:3c:80:8a:69:88:9d:78:b8: 91:13:82:2b:66:c0:8c:05:69:55:c9:da:e3:4a:d3: 8f:44:68:21:31:c9:54:56:e0:06:ca:68:fe:58:fc: d6:f1:c1:02:f6:ee:ad:0f:d5:5e:2e:ed:7f:26:d1: 3d:20:d1:8f:a4:e0:ce:f2:ee:05:2b:85:27:80:e7: 44:80:0a:a0:05:de:1c:7e:c5:f4:0f:fd:35:b9:8b: 29:b3:ff:ea:72:9b:05:97:2d:e6:40:be:90:71:b7: bf:7e:01:ad:28:27:2e:13:06:17:d0:37:74:c4:f8: 47:14:b1:85:cd:c5:37:d6:c4:20:2d:94:dd:7d:35: b1:a5:ef:09:e8:84:5f:65:1f:e8:b2:87:59:2c:03: 65:5e:2c:e9:cf:6e:ff:32:e8:4a:ac:c3:c5:51:8d: 7e:b9:20:43:37:f4:cc:24:bd:4f:cb:da:a6:75:76: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:60:44:A1:56:FB:39:A9:41:12:8E:DE:AD:37:BF:BE:18:88:BC:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/128ee08d-1ae2-3b0a-81e9-d13deb2c9125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d7:63:f9:a5:58:d0:12:af:e7:4d:f5:30:e1:d5:84:01:9a: 18:e5:98:16:7d:ad:08:28:6f:3e:96:2c:48:a1:88:f4:ee:88: 42:5f:d7:67:ac:c6:8c:b1:b6:db:ad:d6:f1:87:57:fb:29:aa: e7:7c:69:f0:35:4d:8b:54:2a:23:eb:29:6f:ab:01:24:be:51: 2e:ca:59:f9:da:e8:e1:1f:0e:a4:64:f1:96:76:5c:0c:9b:fc: 79:c3:52:1a:69:eb:99:78:3d:cb:6d:99:c1:1c:83:1f:09:eb: 9f:4c:8a:0e:f6:f5:d9:ea:62:f3:a2:2c:de:bb:60:79:df:65: dc:26:b8:97:f1:03:78:2e:9a:f6:ee:11:98:76:6a:38:54:5d: 70:b0:e9:eb:24:7e:b9:75:7e:72:01:ba:98:94:6c:19:85:95: 97:b9:ca:18:55:3b:4a:7d:e1:bd:65:65:87:8e:4a:92:45:2e: bb:85:79:c7:c6:0d:59:20:24:a7:4b:73:67:81:a6:62:d5:86: 6e:2b:9a:a3:60:3b:d1:3c:50:bb:3b:f1:bd:c8:e8:c6:18:62: 45:25:b2:ee:6d:45:23:77:32:14:f1:74:8a:ff:9e:fb:6c:7d: 34:6a:6a:af:7d:a8:1e:86:a4:26:35:b0:a9:5c:42:37:d1:67: 1f:0e:fe:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERU4uUnSX0JstoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MjA4Mzk1MmYtMjg3NS00NTkxLTg2YTUtMWJhMmU0YWY3MTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQLNczy2JNr1WWAFaekfnb09AfV6sQNMGBRW kJBVV5mp7WoHvsLzclCfQEXNbLX0iEBZASgH6RN/zUkYkVA00zP2JVPN4Z9nQnJx T/jiu7uJPICKaYideLiRE4IrZsCMBWlVydrjStOPRGghMclUVuAGymj+WPzW8cEC 9u6tD9VeLu1/JtE9INGPpODO8u4FK4UngOdEgAqgBd4cfsX0D/01uYsps//qcpsF ly3mQL6Qcbe/fgGtKCcuEwYX0Dd0xPhHFLGFzcU31sQgLZTdfTWxpe8J6IRfZR/o sodZLANlXizpz27/MuhKrMPFUY1+uSBDN/TMJL1Py9qmdXYyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJgRKFW+zmpQRKO3q03v74YiLx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTI4ZWUwOGQtMWFlMi0z YjBhLTgxZTktZDEzZGViMmM5MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvXY/mlWNASr+dN9TDh1YQBmhjlmBZ9rQgobz6WLEihiPTuiEJf12es xoyxttut1vGHV/spqud8afA1TYtUKiPrKW+rASS+US7KWfna6OEfDqRk8ZZ2XAyb /HnDUhpp65l4PcttmcEcgx8J659Mig729dnqYvOiLN67YHnfZdwmuJfxA3gumvbu EZh2ajhUXXCw6eskfrl1fnIBupiUbBmFlZe5yhhVO0p94b1lZYeOSpJFLruFecfG DVkgJKdLc2eBpmLVhm4rmqNgO9E8ULs78b3I6MYYYkUlsu5tRSN3MhTxdIr/nvts fTRqaq99qB6GpCY1sKlcQjfRZx8O/hw= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:07 2025 by rpki-client