$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1434af4e-faba-393b-9eba-3f4ea8493add.roa File: 1434af4e-faba-393b-9eba-3f4ea8493add.roa (raw, json) Hash identifier: WIGFBOE+HzNHmrMqKX+0Pmai7XD59F6kLvrsGI6cpiA= Subject key identifier: 60:B5:AF:94:F9:59:27:86:C6:99:B9:84:3D:6A:20:F8:64:CC:F1:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC2E11B34A874B5D8C9356080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1434af4e-faba-393b-9eba-3f4ea8493add.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1b:34:a8:74:b5:d8:c9:35:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=69ad77f2-aa20-4b42-96d7-c4ac0a3c2c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d4:47:3e:5f:59:2a:51:c3:6e:bc:42:69:7d: 1b:e7:d3:f4:ad:3f:e6:68:f2:2b:eb:a1:99:4c:f5: c7:5f:58:7e:a0:5a:20:6d:df:e6:43:f7:71:52:7e: 2c:0d:df:31:7c:27:7c:7d:44:63:ad:ac:92:b4:a2: de:ca:9b:20:80:a6:c2:95:6e:78:d0:3e:66:30:da: 83:86:6e:91:bb:12:97:01:41:19:d1:68:d6:29:cb: e9:4e:d4:7d:b9:08:c7:dc:c9:ce:a9:90:fd:d9:df: 61:96:8b:3b:0b:98:cd:cf:03:2d:c2:a0:a8:f4:45: f9:98:7a:55:d2:27:38:50:fc:25:41:a2:c5:a1:cf: 31:f8:a2:a9:31:3a:71:26:1b:71:69:01:6f:dc:43: b1:31:d3:3f:93:58:5a:25:ed:f1:60:14:20:9e:50: 5c:58:40:d7:1a:95:34:06:5d:f1:7f:e1:0d:4e:ee: b3:66:c2:2e:01:5f:70:2d:64:30:48:cc:1c:c1:c0: 30:29:a5:a4:7d:e0:77:c4:a0:d8:9d:c0:de:74:51: 50:99:ca:27:57:3e:70:3a:23:c0:2f:57:a4:92:fe: 14:e9:24:c8:a6:b4:90:b0:65:07:21:7d:7d:42:4b: 22:2c:a0:46:5f:08:cf:20:bf:a1:8b:b0:31:13:c4: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B5:AF:94:F9:59:27:86:C6:99:B9:84:3D:6A:20:F8:64:CC:F1:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1434af4e-faba-393b-9eba-3f4ea8493add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ed:47:0f:a7:e3:28:bc:3a:8e:16:fb:62:18:83:60:d7:57: 56:8f:97:da:8b:11:06:94:d9:6c:08:f5:c5:a2:b2:e8:73:a4: 39:5f:9c:3d:75:5d:60:fc:33:74:c4:10:a0:da:87:54:44:07: 1e:b3:b0:17:8d:14:0b:7d:1b:94:25:a0:6a:3f:37:79:ec:3b: fc:33:1d:e5:78:53:14:d9:3b:b2:ac:5c:99:37:eb:3a:03:05: 83:97:86:2f:a3:ec:2d:a3:63:54:dd:a9:dd:80:56:9a:58:25: d2:a5:b4:4d:f3:3d:0e:f2:d3:ed:2f:2c:2d:0b:50:34:0b:93: 07:30:df:fb:c4:60:c8:a4:dd:68:b3:bd:0e:7a:4e:4f:06:e0: 06:02:ca:65:d6:80:db:eb:c1:34:21:9a:3e:6f:99:49:37:6a: d8:73:d7:f5:71:1a:9a:36:d3:41:b3:6c:da:b4:8f:29:29:cf: 6b:cf:02:18:e6:2c:f4:4c:5d:a0:23:0d:ae:a7:eb:6f:74:b0: 43:b8:12:fe:b2:b8:19:d3:ee:34:6d:12:26:0d:ba:3a:e1:6a: 62:f4:ee:29:b0:01:c2:c4:38:64:2d:dc:bc:63:28:e6:11:b7: 76:01:0e:9e:56:94:1b:c4:26:7a:96:a6:98:f5:70:1f:c0:53: bb:17:26:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Rs0qHS12Mk1YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NjlhZDc3ZjItYWEyMC00YjQyLTk2ZDctYzRhYzBhM2MyYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNRHPl9ZKlHDbrxCaX0b59P0rT/maPIr66GZ TPXHX1h+oFogbd/mQ/dxUn4sDd8xfCd8fURjrayStKLeypsggKbClW540D5mMNqD hm6RuxKXAUEZ0WjWKcvpTtR9uQjH3MnOqZD92d9hlos7C5jNzwMtwqCo9EX5mHpV 0ic4UPwlQaLFoc8x+KKpMTpxJhtxaQFv3EOxMdM/k1haJe3xYBQgnlBcWEDXGpU0 Bl3xf+ENTu6zZsIuAV9wLWQwSMwcwcAwKaWkfeB3xKDYncDedFFQmconVz5wOiPA L1ekkv4U6STIprSQsGUHIX19QksiLKBGXwjPIL+hi7AxE8QeswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC1r5T5WSeGxpm5hD1qIPhkzPHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTQzNGFmNGUtZmFiYS0z OTNiLTllYmEtM2Y0ZWE4NDkzYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALztRw+n4yi8Oo4W+2IYg2DXV1aPl9qLEQaU2WwI9cWisuhzpDlfnD11 XWD8M3TEEKDah1REBx6zsBeNFAt9G5QloGo/N3nsO/wzHeV4UxTZO7KsXJk36zoD BYOXhi+j7C2jY1Tdqd2AVppYJdKltE3zPQ7y0+0vLC0LUDQLkwcw3/vEYMik3Wiz vQ56Tk8G4AYCymXWgNvrwTQhmj5vmUk3athz1/VxGpo200GzbNq0jykpz2vPAhjm LPRMXaAjDa6n6290sEO4Ev6yuBnT7jRtEiYNujrhamL07imwAcLEOGQt3LxjKOYR t3YBDp5WlBvEJnqWppj1cB/AU7sXJsM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:50 2025 by rpki-client