$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/212f04f8-2b45-35a8-9f96-c7630cbc30e0.roa File: 212f04f8-2b45-35a8-9f96-c7630cbc30e0.roa (raw, json) Hash identifier: Ba7Nh3ELXwq1WohR0tAuxOvU2CkgVa735zj1vEOyplM= Subject key identifier: 00:D0:75:30:98:89:A5:1A:A8:12:8D:0F:9F:A5:13:C7:2B:A6:43:3A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876767626FE87B9265ED180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/212f04f8-2b45-35a8-9f96-c7630cbc30e0.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:76:76:26:fe:87:b9:26:5e:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=0867066f-6c6d-41bc-9845-96fa74544731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c0:e2:91:0e:c1:64:0c:6b:59:14:17:96:b6: 6f:2b:86:19:2b:a5:7e:a8:41:3e:d3:49:9c:85:9a: 33:09:1a:01:24:3c:4f:b6:9f:60:0f:45:c5:fd:66: 61:3e:3b:e6:ad:7e:a0:89:9e:26:82:d8:0f:b4:24: 53:29:15:6c:af:23:c3:2b:eb:f1:fe:53:d7:16:b7: b7:5f:95:a5:68:41:23:f5:9c:34:ac:3e:58:fe:b0: 8a:78:12:f0:66:9a:f8:f8:aa:7b:8f:0b:63:a2:fa: b4:ab:fc:7e:a0:fd:e1:48:4e:8e:69:f7:11:0c:73: 23:35:cc:38:9d:3d:f4:c6:5a:13:cf:d9:43:de:00: 61:3b:9d:ae:67:25:47:9a:e7:2a:9b:65:23:da:7a: 7c:87:f3:eb:43:cc:53:48:87:5e:dc:d0:c5:af:fd: f2:81:4d:85:a3:e8:0c:4e:ef:6d:1f:20:74:d5:90: af:9a:81:02:90:d8:a4:99:82:cf:b1:3e:90:45:86: ad:15:4a:bc:d0:c1:ac:8e:6f:f2:33:65:d7:39:bd: 7f:d5:72:1a:8c:34:0c:e1:2d:41:bd:a2:f3:15:d5: 25:5b:19:96:4d:36:3b:d7:9f:b3:12:97:2d:5c:01: a3:3e:a7:9a:29:3e:03:2d:d1:dd:f6:f6:3f:39:25: 1b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D0:75:30:98:89:A5:1A:A8:12:8D:0F:9F:A5:13:C7:2B:A6:43:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/212f04f8-2b45-35a8-9f96-c7630cbc30e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:59:e5:54:02:78:fe:b6:e2:81:61:2a:0c:86:30:b0:57:12: 20:8b:c4:ab:83:44:6e:57:b8:67:b1:77:86:3a:c2:b5:e8:fd: 32:c8:9a:db:3f:61:a2:84:27:8e:2c:90:64:9c:88:ed:c5:5f: d6:4d:42:3b:b0:c4:83:94:3e:89:3f:3f:f6:10:80:f4:9e:10: f6:0d:39:55:92:ec:85:96:58:e7:65:8e:61:15:2b:4e:4c:4b: fc:27:21:d6:e1:fe:b8:8a:bf:6d:17:ac:c0:c5:67:ef:2a:97: 97:9f:0b:a0:04:ab:6f:d0:f8:0b:11:e1:80:ba:a7:8c:b4:25: e1:3c:fc:ab:80:87:00:ee:80:07:de:69:da:db:7e:61:da:fd: c5:ad:93:65:d9:f5:61:6f:38:60:be:19:35:0d:56:a1:dc:e3: 24:fc:da:e6:5e:69:89:ee:0d:7e:5c:0a:5f:fc:59:f6:3b:cf: 2a:dc:0b:99:a3:e2:23:7d:5c:e4:99:02:52:82:d4:2f:73:e2: 88:05:15:48:04:40:b0:c3:77:e7:ec:e4:fe:ef:84:d3:a3:95: 70:f0:b6:8e:a2:88:32:19:f5:11:0e:e0:80:b3:d0:26:27:97: 67:c9:b7:4e:ca:b0:cd:13:f0:92:17:69:36:a3:1f:41:08:4a: 10:9b:25:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnZ2Jv6HuSZe0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MDg2NzA2NmYtNmM2ZC00MWJjLTk4NDUtOTZmYTc0NTQ0NzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88DikQ7BZAxrWRQXlrZvK4YZK6V+qEE+00mc hZozCRoBJDxPtp9gD0XF/WZhPjvmrX6giZ4mgtgPtCRTKRVsryPDK+vx/lPXFre3 X5WlaEEj9Zw0rD5Y/rCKeBLwZpr4+Kp7jwtjovq0q/x+oP3hSE6OafcRDHMjNcw4 nT30xloTz9lD3gBhO52uZyVHmucqm2Uj2np8h/PrQ8xTSIde3NDFr/3ygU2Fo+gM Tu9tHyB01ZCvmoECkNikmYLPsT6QRYatFUq80MGsjm/yM2XXOb1/1XIajDQM4S1B vaLzFdUlWxmWTTY715+zEpctXAGjPqeaKT4DLdHd9vY/OSUbkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADQdTCYiaUaqBKND5+lE8crpkM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjEyZjA0ZjgtMmI0NS0z NWE4LTlmOTYtYzc2MzBjYmMzMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtZ5VQCeP624oFhKgyGMLBXEiCLxKuDRG5XuGexd4Y6wrXo/TLImts/ YaKEJ44skGSciO3FX9ZNQjuwxIOUPok/P/YQgPSeEPYNOVWS7IWWWOdljmEVK05M S/wnIdbh/riKv20XrMDFZ+8ql5efC6AEq2/Q+AsR4YC6p4y0JeE8/KuAhwDugAfe adrbfmHa/cWtk2XZ9WFvOGC+GTUNVqHc4yT82uZeaYnuDX5cCl/8WfY7zyrcC5mj 4iN9XOSZAlKC1C9z4ogFFUgEQLDDd+fs5P7vhNOjlXDwto6iiDIZ9REO4ICz0CYn l2fJt07KsM0T8JIXaTajH0EIShCbJXI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:19 2025 by rpki-client