$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa File: 144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa (raw, json) Hash identifier: iBSmdgkS8/DxOIlzPmuXNnh6Q1rbhCfSDzOGgMec3Jk= Subject key identifier: 49:43:34:CB:B3:02:9C:10:F5:9F:4C:8F:0F:C8:A1:01:2C:9A:9E:9C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766891F385BB8809ADFF40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:68:91:f3:85:bb:88:09:ad:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=74bf749d-eb77-446e-a6c9-8eac8f7f1144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5c:02:a3:2e:81:97:85:24:fa:a6:ac:fe:ad: b1:bb:57:37:c0:7e:41:37:22:09:a6:66:62:bc:68: 72:0c:47:7b:94:e9:a3:27:52:3c:6f:93:4e:c4:f4: 69:5b:e3:cf:37:5a:c1:23:2e:3b:fd:0e:a5:1b:93: 54:0f:c5:36:03:b9:36:97:ef:a7:8f:02:0d:7f:cb: 45:89:8e:d7:d9:1e:a1:8e:3b:2a:d9:51:9d:dd:02: 80:31:07:29:87:20:ba:10:83:ec:bd:3d:ea:33:f8: f4:36:62:67:ea:c2:1a:64:0d:4d:a0:b8:cd:fd:0d: df:3e:b2:64:1d:bc:03:66:9d:80:f8:27:74:f9:8d: 27:94:b9:9c:19:b1:03:3c:bd:72:8f:25:c2:f3:a2: 5c:1f:6a:44:0a:60:fb:d2:d9:58:63:2e:05:6b:ae: 9b:b3:e9:1f:86:14:9b:94:31:20:ce:c0:dd:a2:90: 89:2b:de:80:87:2c:42:ef:8c:3b:e1:ee:b6:25:e3: d0:9d:d4:b4:5d:72:10:b4:7f:21:5d:f5:a2:d3:30: 56:0b:d3:d7:d7:37:48:e0:30:01:8f:29:6e:18:a8: 0d:26:8c:00:a7:fc:6b:09:f3:87:4a:9f:7a:38:c0: d6:04:13:51:ed:b1:9a:5d:7c:b5:f4:34:a2:b1:6a: 92:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:43:34:CB:B3:02:9C:10:F5:9F:4C:8F:0F:C8:A1:01:2C:9A:9E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:a0:84:04:c7:86:8b:a0:2e:45:40:fe:51:e8:12:72:96:c1: a5:21:41:17:36:f4:d5:20:c9:9d:0b:79:d0:50:8f:39:a4:b0: 06:46:99:87:92:74:9d:42:92:c9:39:af:ce:cc:a6:a3:03:1a: 43:3f:3c:bd:67:08:de:f9:77:c1:86:1b:61:ad:bb:c3:8e:f6: b8:b2:dc:d3:42:e1:4f:1d:ce:8d:28:db:91:b4:9f:7c:72:7d: a2:a7:ed:20:b2:cb:ec:4c:0a:8d:9a:f0:7a:69:34:07:d3:31: 10:2b:15:50:8f:df:78:89:9f:57:55:57:e7:76:63:e3:55:ec: c5:0f:b0:e6:42:fa:eb:90:39:59:81:15:52:8e:67:91:55:25: 9d:e9:f3:ff:ca:c0:2a:ff:9a:58:a9:ff:f4:c1:bb:b5:04:ea: 18:3a:6c:82:86:39:ec:35:d8:4f:00:4c:0a:5f:77:ca:a6:64: 3b:ed:c4:1c:e2:c8:8c:53:fa:f0:23:a8:20:a1:c1:cf:1c:c6: 13:ef:3e:eb:6a:2f:69:68:02:05:14:6b:15:0f:6b:53:2a:8c: 83:65:eb:eb:46:cc:20:36:4a:92:9c:e0:58:f2:8d:7f:71:b7: 3f:86:32:ac:80:5d:8a:f6:78:d8:bc:d4:5d:b5:b1:1f:c0:80: 65:63:d8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmiR84W7iAmt/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NzRiZjc0OWQtZWI3Ny00NDZlLWE2YzktOGVhYzhmN2YxMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlwCoy6Bl4Uk+qas/q2xu1c3wH5BNyIJpmZi vGhyDEd7lOmjJ1I8b5NOxPRpW+PPN1rBIy47/Q6lG5NUD8U2A7k2l++njwINf8tF iY7X2R6hjjsq2VGd3QKAMQcphyC6EIPsvT3qM/j0NmJn6sIaZA1NoLjN/Q3fPrJk HbwDZp2A+Cd0+Y0nlLmcGbEDPL1yjyXC86JcH2pECmD70tlYYy4Fa66bs+kfhhSb lDEgzsDdopCJK96AhyxC74w74e62JePQndS0XXIQtH8hXfWi0zBWC9PX1zdI4DAB jyluGKgNJowAp/xrCfOHSp96OMDWBBNR7bGaXXy19DSisWqSPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElDNMuzApwQ9Z9Mjw/IoQEsmp6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTQ0ZmZjZmUtZjUwOC0z YzZjLWEwYWYtNTFiMmNkZjk0MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqghATHhougLkVA/lHoEnKWwaUhQRc29NUgyZ0LedBQjzmksAZGmYeS dJ1Cksk5r87MpqMDGkM/PL1nCN75d8GGG2Gtu8OO9riy3NNC4U8dzo0o25G0n3xy faKn7SCyy+xMCo2a8HppNAfTMRArFVCP33iJn1dVV+d2Y+NV7MUPsOZC+uuQOVmB FVKOZ5FVJZ3p8//KwCr/mlip//TBu7UE6hg6bIKGOew12E8ATApfd8qmZDvtxBzi yIxT+vAjqCChwc8cxhPvPutqL2loAgUUaxUPa1MqjINl6+tGzCA2SpKc4FjyjX9x tz+GMqyAXYr2eNi81F21sR/AgGVj2Ek= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:31 2025 by rpki-client