$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f179579-663e-3891-9e2c-531b67f9b20c.roa File: 1f179579-663e-3891-9e2c-531b67f9b20c.roa (raw, json) Hash identifier: vs5buPT3lgfwlTQYZrDe2cLzedfs89kMgWhYUkFbDTU= Subject key identifier: CE:F1:23:D8:52:87:21:4E:07:60:C1:E3:EF:8F:3C:AD:79:F2:02:C6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC9DBAAA65B5FDE083A28A600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f179579-663e-3891-9e2c-531b67f9b20c.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.68.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:aa:a6:5b:5f:de:08:3a:28:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=1bcb3f32-9270-4462-b03e-3d85907ac384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:54:42:0f:a3:5d:e7:1f:7a:ad:b4:05:7e: ee:68:eb:0d:60:1e:75:44:96:8b:f3:0f:98:62:6f: 1e:4d:b2:71:22:21:d5:ab:4b:37:84:6a:e6:f7:35: f8:a8:47:8f:83:f6:eb:27:16:25:1f:fc:f9:25:c1: 0c:16:05:2d:5a:41:2a:8d:e4:84:bb:7f:c7:8b:fb: 46:df:ef:09:66:71:a2:95:d6:c4:61:11:fd:2d:49: 1a:01:a7:b6:d0:40:41:74:34:34:3e:c5:0a:78:71: dc:a5:18:03:8a:3b:e3:e4:1d:55:61:4c:1b:80:b8: 91:7b:85:bf:75:2e:14:21:33:ec:8f:61:00:38:c3: a0:a9:0f:a2:5b:3d:dc:7f:89:28:b4:bb:ce:e7:eb: d7:79:ef:42:27:d2:d3:ea:47:46:c4:1b:7d:9d:20: c3:0d:0d:c2:2d:cb:c9:94:58:36:04:6e:eb:e0:01: 43:b3:0c:66:2c:4e:6c:f9:e2:e3:28:3a:fe:83:d0: 74:ae:a9:85:94:f0:d8:b0:5e:e3:43:be:8a:b7:20: e2:a5:05:81:5d:ba:39:97:f2:88:d6:9c:e6:df:99: c6:6f:5e:b7:13:76:4c:34:6c:92:2f:b5:e9:97:ba: b9:28:c5:9f:ba:b7:ed:b8:3d:76:a3:67:ca:63:f7: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F1:23:D8:52:87:21:4E:07:60:C1:E3:EF:8F:3C:AD:79:F2:02:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f179579-663e-3891-9e2c-531b67f9b20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:b2:72:89:cf:34:72:df:9c:8e:07:d5:97:45:ef:17:6e:0a: b9:4a:dd:7a:d1:cc:5c:8c:0b:59:4c:51:66:0a:c4:e8:bc:5a: 29:6e:a8:24:a7:79:16:3f:14:27:ea:a6:5d:dd:3b:72:0b:80: e0:e3:c0:31:a1:25:66:f7:ca:93:db:97:84:52:aa:7d:f2:91: ed:7e:3a:fd:3c:4d:54:96:e4:52:8f:d8:da:17:95:fa:ae:0f: 36:f5:09:31:03:dd:fc:c8:57:a5:2e:f6:74:3e:7e:44:2a:50: c1:e4:ed:c3:be:75:72:5c:a7:8e:c4:33:c5:06:ff:83:26:0e: e0:72:e5:5c:cb:61:7f:c5:fd:13:4e:f6:29:16:36:13:16:21: ca:dc:81:33:f1:ee:62:96:1a:95:5c:67:2a:ae:42:b4:74:7b: 7d:da:8c:c7:1b:b3:0c:2e:f2:6d:63:c1:5d:3c:0f:eb:a5:4e: e1:17:6d:d3:d9:b7:95:aa:b7:3f:4d:5c:dc:55:5e:37:a7:18: 00:e4:b5:1d:37:6d:eb:9d:80:7c:22:93:02:fe:66:50:92:3e: 6c:a5:e2:b0:d9:bd:10:62:31:a4:32:92:08:0b:3e:56:9a:a8: 51:a4:e5:cb:ea:06:e4:a6:26:13:53:27:d7:c0:58:6e:2a:38: e5:e4:dd:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26qmW1/eCDoopgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MWJjYjNmMzItOTI3MC00NDYyLWIwM2UtM2Q4NTkwN2FjMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgJUQg+jXecfeq20BX7uaOsNYB51RJaL8w+Y Ym8eTbJxIiHVq0s3hGrm9zX4qEePg/brJxYlH/z5JcEMFgUtWkEqjeSEu3/Hi/tG 3+8JZnGildbEYRH9LUkaAae20EBBdDQ0PsUKeHHcpRgDijvj5B1VYUwbgLiRe4W/ dS4UITPsj2EAOMOgqQ+iWz3cf4kotLvO5+vXee9CJ9LT6kdGxBt9nSDDDQ3CLcvJ lFg2BG7r4AFDswxmLE5s+eLjKDr+g9B0rqmFlPDYsF7jQ76KtyDipQWBXbo5l/KI 1pzm35nGb163E3ZMNGySL7Xpl7q5KMWfurftuD12o2fKY/eCzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7xI9hShyFOB2DB4++PPK158gLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWYxNzk1NzktNjYzZS0z ODkxLTllMmMtNTMxYjY3ZjliMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuyconPNHLfnI4H1ZdF7xduCrlK3XrRzFyMC1lMUWYKxOi8WiluqCSn eRY/FCfqpl3dO3ILgODjwDGhJWb3ypPbl4RSqn3yke1+Ov08TVSW5FKP2NoXlfqu Dzb1CTED3fzIV6Uu9nQ+fkQqUMHk7cO+dXJcp47EM8UG/4MmDuBy5VzLYX/F/RNO 9ikWNhMWIcrcgTPx7mKWGpVcZyquQrR0e33ajMcbswwu8m1jwV08D+ulTuEXbdPZ t5Wqtz9NXNxVXjenGADktR03beudgHwikwL+ZlCSPmyl4rDZvRBiMaQykggLPlaa qFGk5cvqBuSmJhNTJ9fAWG4qOOXk3c4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:22 2025 by rpki-client