$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/346b0604-a4dd-345c-9c23-8b8c6112222e.roa File: 346b0604-a4dd-345c-9c23-8b8c6112222e.roa (raw, json) Hash identifier: TKNzt/DnJG0lZUG2wx4/lkuAKK6KU3Ua24z9z1c3zU8= Subject key identifier: C4:AB:71:48:5C:65:2B:DD:1D:D5:83:8C:46:D2:03:3C:E1:7E:D7:38 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B2E5C3FF12F45159140B95EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/346b0604-a4dd-345c-9c23-8b8c6112222e.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.68.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:3f:f1:2f:45:15:91:40:b9:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=5b435499-2267-423c-bb0e-a823a50978b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:d6:8b:8e:eb:f2:8c:bc:58:62:18:d1:0c: f2:ef:8e:84:69:0c:1c:0a:a7:18:46:8c:2a:69:7e: bb:1e:61:a1:03:96:2d:1b:2a:59:cb:c8:7a:be:86: a9:9d:24:e0:88:4f:b3:e9:5d:ed:89:f8:0a:9b:e2: 62:4e:6b:bf:21:d2:91:ab:0d:95:81:b2:6c:f9:7b: 37:2f:b4:63:3d:25:9f:d5:11:b8:43:91:dd:cb:18: a1:2d:92:07:1a:66:f6:dd:48:52:04:d8:b6:82:25: 8f:f4:08:3c:fa:e5:da:36:ac:72:51:30:30:3c:28: ec:f3:bb:1a:ec:35:a8:fd:ac:f6:da:bb:51:9b:25: 15:90:0c:5b:74:d1:66:77:50:95:b8:88:4d:9f:01: ee:31:cf:e6:5e:12:a3:e8:58:85:c2:33:4e:62:d9: f0:0c:70:a9:de:d8:58:63:63:da:58:a9:4e:72:66: 39:23:06:db:2d:b6:81:15:65:a8:f2:ad:31:bd:16: ff:37:54:5b:65:5b:3f:47:35:18:f9:14:ca:0f:a7: 06:07:e8:da:91:71:3b:04:2b:57:aa:01:9f:1d:46: 05:c5:97:62:03:de:af:9c:5a:78:52:8c:df:87:86: 0a:70:6b:d1:76:6d:b3:59:1a:b9:d7:45:44:1f:20: a4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AB:71:48:5C:65:2B:DD:1D:D5:83:8C:46:D2:03:3C:E1:7E:D7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/346b0604-a4dd-345c-9c23-8b8c6112222e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:87:e6:6d:12:7c:12:26:b1:d9:63:b1:f1:dd:93:80:9d:45: ec:22:db:05:68:2a:34:1e:2d:5f:d4:a4:90:22:d4:21:1a:5c: 68:6b:33:a9:5d:3a:c4:ef:b6:3e:ef:3b:a9:c0:a2:67:54:aa: 8c:5b:08:b6:fc:c4:90:db:82:da:cc:ba:52:63:60:9d:8b:55: 20:43:f8:c9:a9:ac:e5:77:de:05:f9:45:ec:28:43:84:af:9f: 83:32:3d:42:5c:53:02:35:1c:d1:f3:5a:86:f8:1e:ed:b0:61: 98:b2:5c:3f:4b:57:5b:59:f2:7e:91:fe:85:31:0f:98:99:48: 02:23:2a:3f:88:18:8a:9f:58:79:2a:aa:68:43:c7:f5:44:d0: b5:e8:70:14:66:6c:51:ba:a8:00:52:74:7e:ce:df:0a:74:65: eb:2b:16:1e:f3:37:2f:f3:f4:85:6d:fd:04:da:86:9c:45:c4: a0:53:a9:9a:50:0c:8a:f1:e7:0e:f7:47:b9:d6:8c:85:9b:6d: 19:c0:eb:2d:f2:f0:94:0d:64:d8:5a:83:fb:df:1e:a2:75:84: 88:d6:5e:f5:c4:60:91:be:9c:ca:37:6b:72:79:da:35:f3:48: 53:99:f7:7c:55:61:cd:56:0c:26:ed:5e:51:4f:0b:eb:4e:d6: e9:32:45:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXD/xL0UVkUC5XsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NWI0MzU0OTktMjI2Ny00MjNjLWJiMGUtYTgyM2E1MDk3OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX3Wi47r8oy8WGIY0Qzy746EaQwcCqcYRowq aX67HmGhA5YtGypZy8h6voapnSTgiE+z6V3tifgKm+JiTmu/IdKRqw2VgbJs+Xs3 L7RjPSWf1RG4Q5HdyxihLZIHGmb23UhSBNi2giWP9Ag8+uXaNqxyUTAwPCjs87sa 7DWo/az22rtRmyUVkAxbdNFmd1CVuIhNnwHuMc/mXhKj6FiFwjNOYtnwDHCp3thY Y2PaWKlOcmY5IwbbLbaBFWWo8q0xvRb/N1RbZVs/RzUY+RTKD6cGB+jakXE7BCtX qgGfHUYFxZdiA96vnFp4Uozfh4YKcGvRdm2zWRq510VEHyCk6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSrcUhcZSvdHdWDjEbSAzzhftc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzQ2YjA2MDQtYTRkZC0z NDVjLTljMjMtOGI4YzYxMTIyMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKH5m0SfBImsdljsfHdk4CdRewi2wVoKjQeLV/UpJAi1CEaXGhrM6ld OsTvtj7vO6nAomdUqoxbCLb8xJDbgtrMulJjYJ2LVSBD+MmprOV33gX5RewoQ4Sv n4MyPUJcUwI1HNHzWob4Hu2wYZiyXD9LV1tZ8n6R/oUxD5iZSAIjKj+IGIqfWHkq qmhDx/VE0LXocBRmbFG6qABSdH7O3wp0ZesrFh7zNy/z9IVt/QTahpxFxKBTqZpQ DIrx5w73R7nWjIWbbRnA6y3y8JQNZNhag/vfHqJ1hIjWXvXEYJG+nMo3a3J52jXz SFOZ93xVYc1WDCbtXlFPC+tO1ukyRRU= -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:21 2025 by rpki-client