$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa File: 276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa (raw, json) Hash identifier: CNo5WnebJaqSP4dsLYeMZk6AVsGxgITd51WEK2FoVdY= Subject key identifier: 79:06:0F:FE:BA:4E:A1:6F:EE:79:74:D9:A7:04:A6:D2:B2:1F:08:4F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876691B1D6CEE179F8FE100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:69:1b:1d:6c:ee:17:9f:8f:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=94bceb07-4ef6-44a3-9acf-50ad9d9433d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:f0:1f:6c:d0:d8:dd:e5:a1:4b:38:f6:32: fc:bc:1f:45:43:84:8e:f7:58:72:7b:2c:e4:ec:56: 38:99:38:1f:f4:7b:8b:c9:e8:a1:24:be:8d:29:bf: 71:be:7e:d1:f8:2b:d0:44:be:cd:be:9c:e9:5a:26: a6:5f:6f:2d:76:31:97:45:4f:3d:75:0d:e7:5d:4d: c3:f5:32:f6:e6:8b:96:37:33:c9:b3:c3:ae:94:9e: be:6f:f1:8c:63:3a:f5:5d:64:c0:33:4a:62:dd:18: 43:13:e6:1c:64:16:b5:79:01:51:2c:04:69:c4:e5: 49:91:51:d0:8b:f1:7e:ab:2c:e3:29:66:e0:43:3d: d2:34:45:69:a4:fa:68:e3:37:a4:cf:9f:71:c8:da: fc:74:59:64:8d:09:ee:a5:6d:69:8d:ba:42:ed:d3: a5:0c:9d:9c:1c:07:8d:57:83:61:6c:9c:8a:64:ec: f2:7d:8a:04:66:ba:a6:0b:fd:32:fe:7f:76:20:59: c6:fb:4d:29:42:3a:c1:b4:bf:8d:9d:88:12:8d:07: 58:ed:8f:8f:86:54:ea:8b:4d:13:ea:3d:f8:63:04: cf:25:23:aa:e3:db:7f:28:20:44:cd:0e:d4:5a:dc: 36:82:78:f0:6b:64:12:cf:29:e2:20:cc:a3:8f:69: d6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:06:0F:FE:BA:4E:A1:6F:EE:79:74:D9:A7:04:A6:D2:B2:1F:08:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:83:a5:ec:bd:0c:06:49:e7:e9:cc:ed:16:cf:a2:59:f6:9a: 4e:72:d9:a0:c4:32:48:d3:41:7d:ae:03:49:71:7c:d6:e4:c4: fa:f7:56:1b:91:64:e3:1b:6c:02:84:f5:35:26:6a:a7:5f:44: 8d:9e:54:c4:5d:e7:16:0d:f2:0f:b3:69:0f:f2:9c:c6:bd:c0: 23:5e:4b:84:24:17:85:63:cf:fb:b3:17:09:65:ed:b9:48:45: 42:d1:9e:a6:6c:74:8d:e0:d5:cd:42:6b:84:3f:59:79:84:0c: 50:18:dd:24:21:24:c5:1e:db:ff:a5:8b:79:af:11:3e:ed:bf: 81:b3:0b:ad:96:61:2f:ae:9d:61:03:c4:f1:de:3a:58:4e:13: 86:38:56:bb:08:2a:5e:40:4a:4b:ab:9c:51:8c:52:7a:77:06: 19:4b:3e:df:47:83:08:30:5d:f7:52:c4:ce:39:34:57:55:17: 8a:cf:f1:56:bd:93:8d:d0:64:78:e9:6a:79:3c:72:fd:ab:c8: 95:d7:d8:a6:47:a4:68:af:96:e5:d2:7e:d1:54:5d:5a:66:34: 97:45:c7:fb:e4:2c:f8:4f:e0:b0:3a:9d:67:a4:d5:20:fb:0b: 97:a9:fe:32:73:10:a7:28:0c:34:2c:81:8f:d2:5f:db:62:1a: 16:70:86:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmkbHWzuF5+P4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk OTRiY2ViMDctNGVmNi00NGEzLTlhY2YtNTBhZDlkOTQzM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSvwH2zQ2N3loUs49jL8vB9FQ4SO91hyeyzk 7FY4mTgf9HuLyeihJL6NKb9xvn7R+CvQRL7NvpzpWiamX28tdjGXRU89dQ3nXU3D 9TL25ouWNzPJs8OulJ6+b/GMYzr1XWTAM0pi3RhDE+YcZBa1eQFRLARpxOVJkVHQ i/F+qyzjKWbgQz3SNEVppPpo4zekz59xyNr8dFlkjQnupW1pjbpC7dOlDJ2cHAeN V4NhbJyKZOzyfYoEZrqmC/0y/n92IFnG+00pQjrBtL+NnYgSjQdY7Y+PhlTqi00T 6j34YwTPJSOq49t/KCBEzQ7UWtw2gnjwa2QSzyniIMyjj2nWWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkGD/66TqFv7nl02acEptKyHwhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjc2YzYzNGUtZjMwMi0z YjBkLThkYzgtMGFjMjcwMGRmYjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeDpey9DAZJ5+nM7RbPoln2mk5y2aDEMkjTQX2uA0lxfNbkxPr3VhuR ZOMbbAKE9TUmaqdfRI2eVMRd5xYN8g+zaQ/ynMa9wCNeS4QkF4Vjz/uzFwll7blI RULRnqZsdI3g1c1Ca4Q/WXmEDFAY3SQhJMUe2/+li3mvET7tv4GzC62WYS+unWED xPHeOlhOE4Y4VrsIKl5ASkurnFGMUnp3BhlLPt9HgwgwXfdSxM45NFdVF4rP8Va9 k43QZHjpank8cv2ryJXX2KZHpGivluXSftFUXVpmNJdFx/vkLPhP4LA6nWek1SD7 C5ep/jJzEKcoDDQsgY/SX9tiGhZwhnI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:44 2025 by rpki-client