$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f185db9-aad7-31a3-a0cc-b3fa8a1e6f9e.roa File: 2f185db9-aad7-31a3-a0cc-b3fa8a1e6f9e.roa (raw, json) Hash identifier: 45s7jMR66lUGjl2c438s/0AYLAq/571NKRCXtuLa+Ag= Subject key identifier: C6:55:E6:56:24:25:33:7B:60:FB:25:63:3D:65:EF:1B:40:90:C9:93 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB40FE5F897889E359F70680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f185db9-aad7-31a3-a0cc-b3fa8a1e6f9e.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:fe:5f:89:78:89:e3:59:f7:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=7812e7fb-7c84-424d-8bb9-97e23e50684f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:46:76:a9:5c:cd:66:0e:4e:79:11:1c:d5: 35:1f:0d:9f:c1:12:95:ee:0c:ce:4f:65:4a:04:79: 4d:80:fa:2f:62:34:c6:78:26:cc:3a:d4:06:54:b1: 52:32:ff:97:24:37:d3:9d:4e:bc:ec:0e:93:ca:d3: 91:fe:a8:b2:3e:12:08:1a:81:87:83:1e:6b:2d:4d: ce:c0:47:8a:1b:87:1d:ad:3f:a6:6a:13:8a:ed:b1: f9:aa:62:6d:8f:96:a0:fb:a8:76:f8:f2:26:a7:3b: 3f:59:fa:35:01:60:9f:6d:01:29:06:70:ad:9c:b3: 51:9f:fb:03:e6:7f:11:cd:23:ef:cc:49:38:01:04: 41:60:54:ee:1d:4f:f5:de:a4:e4:3e:37:e4:87:c7: f5:11:1b:1e:ae:b0:2b:3c:98:1f:c1:e2:22:cf:2f: 31:25:73:28:c8:5f:79:46:4c:3c:2f:ea:51:dc:8a: a0:8f:34:2d:bd:18:79:fe:68:11:23:62:ab:67:9e: c4:f0:e2:32:af:34:9e:4e:ef:70:2b:95:04:38:3c: 1b:90:d5:1b:7a:68:e0:48:c2:0c:8f:ec:f0:93:db: 5d:82:00:7c:12:50:86:3e:1f:b6:dc:2e:c1:9d:09: 19:4f:67:c8:ec:7e:60:3f:a9:55:cf:63:99:4f:6a: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:55:E6:56:24:25:33:7B:60:FB:25:63:3D:65:EF:1B:40:90:C9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f185db9-aad7-31a3-a0cc-b3fa8a1e6f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:2e:40:b2:59:14:96:6e:43:41:83:4b:09:1a:fb:44:ab:74: 9e:db:e6:6d:04:97:30:6c:9c:9d:1f:9e:25:0d:e5:6e:0a:7f: 5b:8c:68:a8:48:b3:84:f4:6c:4e:b5:9a:4a:7b:e0:ca:c6:42: b8:cf:83:9f:36:84:54:b7:1f:da:ac:46:a3:82:a2:7c:bb:df: 7b:9d:68:36:15:e4:6b:f9:e7:b9:b8:6a:6f:b0:50:65:0e:f5: 93:88:2d:85:a0:8f:b5:3e:74:75:0c:7a:3f:37:86:46:16:9d: 50:4f:06:bc:cb:4b:df:29:48:79:e2:26:dc:07:53:30:69:0a: cc:b6:70:bb:a0:af:dd:be:0c:82:4e:81:d5:34:e2:8b:2c:66: d9:e9:1d:3d:3f:c1:6e:8a:89:a9:bf:f9:e1:3e:40:2b:6e:55: a0:c9:62:90:8d:1b:49:a0:ac:3f:f5:ba:a9:06:b8:f9:6e:ef: fa:d2:03:a6:76:ae:fb:4c:7e:55:f8:20:eb:45:b4:35:5d:92: 6f:4a:92:0e:da:2d:a5:69:47:7a:79:fb:ac:05:31:fc:48:e4: b3:82:bf:3c:ad:3c:dd:52:2e:19:ea:47:d1:d4:b6:fa:e5:d7: 21:12:08:e0:dd:10:9d:a4:66:44:4f:c1:33:70:dd:a1:2f:fb: 09:32:8f:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQP5fiXiJ41n3BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NzgxMmU3ZmItN2M4NC00MjRkLThiYjktOTdlMjNlNTA2ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU5GdqlczWYOTnkRHNU1Hw2fwRKV7gzOT2VK BHlNgPovYjTGeCbMOtQGVLFSMv+XJDfTnU687A6TytOR/qiyPhIIGoGHgx5rLU3O wEeKG4cdrT+mahOK7bH5qmJtj5ag+6h2+PImpzs/Wfo1AWCfbQEpBnCtnLNRn/sD 5n8RzSPvzEk4AQRBYFTuHU/13qTkPjfkh8f1ERserrArPJgfweIizy8xJXMoyF95 Rkw8L+pR3IqgjzQtvRh5/mgRI2KrZ57E8OIyrzSeTu9wK5UEODwbkNUbemjgSMIM j+zwk9tdggB8ElCGPh+23C7BnQkZT2fI7H5gP6lVz2OZT2oRiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZV5lYkJTN7YPslYz1l7xtAkMmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmYxODVkYjktYWFkNy0z MWEzLWEwY2MtYjNmYThhMWU2ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrETQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKouQLJZFJZuQ0GDSwka+0SrdJ7b5m0ElzBsnJ0fniUN5W4Kf1uMaKhI s4T0bE61mkp74MrGQrjPg582hFS3H9qsRqOCony733udaDYV5Gv557m4am+wUGUO 9ZOILYWgj7U+dHUMej83hkYWnVBPBrzLS98pSHniJtwHUzBpCsy2cLugr92+DIJO gdU04ossZtnpHT0/wW6Kiam/+eE+QCtuVaDJYpCNG0mgrD/1uqkGuPlu7/rSA6Z2 rvtMflX4IOtFtDVdkm9Kkg7aLaVpR3p5+6wFMfxI5LOCvzytPN1SLhnqR9HUtvrl 1yESCODdEJ2kZkRPwTNw3aEv+wkyj74= -----END CERTIFICATE-----Generated at Sat Aug 23 16:56:25 2025 by rpki-client