$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa File: 34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa (raw, json) Hash identifier: EtZKfSQC9ymM3osGAerILdeROpEwgPuNhnRtXJzYGCU= Subject key identifier: 72:07:CA:61:63:AA:A8:93:F1:0B:14:20:72:90:D8:93:8B:F4:06:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC7110C6BBEAAA27441875A40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.68.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:0c:6b:be:aa:a2:74:41:87:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=258bb0da-bf86-4106-8a05-bc629017d238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:a9:e5:b3:a7:e8:5a:86:ee:27:c2:bb:38: a0:51:f0:a8:79:bb:b0:18:53:bf:c3:19:8b:e0:72: 38:f2:bb:2f:27:45:a4:37:f4:77:c0:b3:d6:4f:8c: 92:4f:53:d0:20:e9:87:4a:93:6a:92:6c:e5:d9:88: 4d:21:56:4d:90:fc:71:73:34:e6:60:25:c2:d7:52: d3:f4:4d:2d:1f:8c:b6:19:25:d9:88:c0:fd:a7:ad: 4f:9d:ab:f2:eb:d8:0b:1f:e1:c4:96:09:f9:27:5f: bf:cd:c0:ab:c0:3c:96:1e:1c:67:aa:34:a4:92:24: 69:0c:66:0c:80:00:48:4a:46:10:3b:64:40:b4:7d: e7:c0:65:4f:66:fb:23:5f:36:36:b6:e6:00:14:f9: 96:e8:ee:0e:6a:4c:33:57:db:68:12:65:7c:ec:46: af:c2:aa:b2:91:a3:c3:c2:ce:20:85:fe:5a:e2:65: 7e:01:6e:2b:ae:39:0a:84:55:b8:33:d9:6d:4a:91: 8a:3e:0a:48:42:59:73:d5:f9:ba:7c:e2:bd:e3:5d: 55:3c:57:c2:4b:aa:59:eb:76:49:3a:40:aa:f7:36: 31:1e:76:e8:fa:35:e4:25:2d:53:b6:78:a4:21:ca: 29:da:4b:b7:13:3f:c6:74:78:fb:b1:65:aa:c9:19: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:07:CA:61:63:AA:A8:93:F1:0B:14:20:72:90:D8:93:8B:F4:06:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:bf:31:fc:7d:f6:b7:5f:20:45:31:a8:2b:7f:93:21:35:de: d0:9f:16:18:a5:52:8b:a6:42:35:f3:a3:35:1b:65:cf:dc:74: e8:05:f9:4c:c9:0a:94:e1:ad:d3:b1:a9:6a:ba:51:fc:1d:e3: 6b:86:5d:8f:34:21:3e:ef:c9:2c:55:86:96:28:43:79:c4:29: 12:36:60:e4:1c:1a:4e:6d:6a:c1:41:86:ba:2b:07:5c:71:f7: 0a:28:31:07:cc:d8:36:b9:4b:ed:6a:a3:7a:04:10:e2:96:64: 23:fe:62:4e:18:2b:70:05:16:29:3a:9e:f7:69:3f:aa:40:26: 12:4b:62:3d:56:c0:3f:fd:15:8e:01:84:3f:39:ea:92:f6:74: b2:9f:72:bc:2a:f0:48:74:78:bc:26:39:23:94:cb:84:4a:6b: 52:84:35:ea:52:55:53:65:b6:e6:ac:58:16:69:34:76:5d:d5: 43:c0:75:a4:e3:72:53:be:08:a7:83:e6:bc:ce:75:fe:63:e7: 40:f5:24:2e:aa:ee:b1:45:0b:57:f7:e3:32:e3:a0:b0:b0:ae: df:d7:93:0a:2d:88:3c:2d:1c:21:1a:8f:b7:a7:ef:27:24:fa: 5f:88:0e:ed:b3:2a:38:26:7e:65:4c:c6:33:2d:b0:80:67:3e: cc:d2:ac:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQxrvqqidEGHWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MjU4YmIwZGEtYmY4Ni00MTA2LThhMDUtYmM2MjkwMTdkMjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYep5bOn6FqG7ifCuzigUfCoebuwGFO/wxmL 4HI48rsvJ0WkN/R3wLPWT4yST1PQIOmHSpNqkmzl2YhNIVZNkPxxczTmYCXC11LT 9E0tH4y2GSXZiMD9p61Pnavy69gLH+HElgn5J1+/zcCrwDyWHhxnqjSkkiRpDGYM gABISkYQO2RAtH3nwGVPZvsjXzY2tuYAFPmW6O4OakwzV9toEmV87EavwqqykaPD ws4ghf5a4mV+AW4rrjkKhFW4M9ltSpGKPgpIQllz1fm6fOK9411VPFfCS6pZ63ZJ OkCq9zYxHnbo+jXkJS1TtnikIcop2ku3Ez/GdHj7sWWqyRmn4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIHymFjqqiT8QsUIHKQ2JOL9Aa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzRmZWM4M2QtNmNlZi0z NGQ0LTk3YzAtOGZmYzE4Y2ExMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJy/Mfx99rdfIEUxqCt/kyE13tCfFhilUoumQjXzozUbZc/cdOgF+UzJ CpThrdOxqWq6Ufwd42uGXY80IT7vySxVhpYoQ3nEKRI2YOQcGk5tasFBhrorB1xx 9wooMQfM2Da5S+1qo3oEEOKWZCP+Yk4YK3AFFik6nvdpP6pAJhJLYj1WwD/9FY4B hD856pL2dLKfcrwq8Eh0eLwmOSOUy4RKa1KENepSVVNltuasWBZpNHZd1UPAdaTj clO+CKeD5rzOdf5j50D1JC6q7rFFC1f34zLjoLCwrt/XkwotiDwtHCEaj7en7yck +l+IDu2zKjgmfmVMxjMtsIBnPszSrJc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:00:39 2025 by rpki-client