$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3649d575-3057-3bc7-8ff9-d2a305be0b69.roa File: 3649d575-3057-3bc7-8ff9-d2a305be0b69.roa (raw, json) Hash identifier: cuUrC0zZq0nlUOxEvk+zfzpxwhtpSGBHy7w/WOm/jrM= Subject key identifier: 2C:3D:01:2C:AF:A7:C7:EA:6F:D7:C0:E9:01:60:D4:2E:F3:67:16:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB41159C9247EE393EC1D700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3649d575-3057-3bc7-8ff9-d2a305be0b69.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:15:9c:92:47:ee:39:3e:c1:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=8b5a8db7-1ba6-4e41-a090-1d395e33ba87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:f6:f5:da:c1:4c:61:ca:f3:4f:cf:85:1e: 95:92:9a:3d:ec:58:4d:0e:1f:ae:e9:54:4a:99:00: 40:f4:9d:a6:91:31:14:88:e0:b5:ae:b3:d1:08:ed: 7d:4f:15:a3:4c:82:2c:45:52:f2:7a:f2:bf:4c:53: ba:50:5a:33:6e:d0:a2:fd:fb:cc:f8:13:4f:0c:79: 94:4b:60:4e:c4:97:64:4d:3a:8f:ae:22:f7:ce:b4: 34:11:0f:14:dc:ac:2b:6b:53:37:0d:d9:fb:05:2d: 69:66:83:54:61:46:ab:f9:22:53:56:b5:7f:3a:24: 45:84:34:ad:60:80:d3:49:7d:bc:d8:6b:9e:9e:37: e2:0f:24:5e:0f:d6:df:df:89:62:80:00:fa:10:2f: 91:e2:21:34:51:d4:b9:cd:85:fe:31:ee:19:a0:3e: e8:90:df:d1:51:9f:a3:48:6c:a4:ce:95:7b:69:e1: fb:17:de:6b:bb:40:1e:22:69:6a:ea:ca:71:85:bb: 67:08:37:d0:a8:b5:24:df:ce:69:2d:61:59:c5:02: d1:7f:fb:63:86:50:a8:1c:36:c3:62:1a:75:d2:82: 9a:03:bf:65:f1:bf:50:ab:8b:5e:b1:6e:4e:0c:bb: b4:1f:f7:24:a5:c7:f3:f2:a4:e0:1e:57:5c:1e:09: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3D:01:2C:AF:A7:C7:EA:6F:D7:C0:E9:01:60:D4:2E:F3:67:16:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3649d575-3057-3bc7-8ff9-d2a305be0b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:92:10:0a:6d:f2:d9:57:ca:33:e4:4f:fa:ae:d1:07:ae:78: 81:f1:f2:a0:9a:89:33:77:f7:39:2c:69:30:59:1a:95:89:12: b6:36:47:c0:79:8f:f5:1f:2d:e9:98:02:53:87:00:b9:f1:8f: 72:74:be:e5:a6:86:3d:8b:90:fa:50:5c:fc:7f:96:a6:e0:4f: 06:c7:4b:4b:7b:ce:c9:ec:02:8c:72:c1:67:9c:df:e9:41:6b: e3:cc:6d:3d:d6:00:10:39:9c:b3:9d:86:f2:87:fd:2b:9a:08: 6f:ec:83:bc:a5:1c:30:9b:a1:6d:21:50:e8:be:4c:f6:45:49: 54:eb:fc:89:fe:9a:7f:e0:16:cd:04:4b:35:10:67:fc:0a:f8: 14:07:f1:e7:b3:53:78:86:e5:13:df:ae:9b:53:d1:70:a5:16: 1f:b8:11:f3:0c:e8:68:62:7f:ff:b6:01:21:96:c2:5c:83:47: fa:a6:7e:91:5d:2a:19:07:05:e5:51:db:36:4d:3c:23:08:88: fd:0f:e2:46:87:c1:ed:a4:91:80:7f:92:cc:e6:97:f6:b3:48: 86:68:93:cc:a1:3f:de:d0:41:54:ec:4d:d9:7b:a9:15:bd:6e: 56:35:64:c0:46:5c:7e:d2:4a:17:81:92:33:a0:d9:3b:14:d0: e5:26:f2:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRWckkfuOT7B1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk OGI1YThkYjctMWJhNi00ZTQxLWEwOTAtMWQzOTVlMzNiYTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxz29drBTGHK80/PhR6Vkpo97FhNDh+u6VRK mQBA9J2mkTEUiOC1rrPRCO19TxWjTIIsRVLyevK/TFO6UFozbtCi/fvM+BNPDHmU S2BOxJdkTTqPriL3zrQ0EQ8U3Kwra1M3Ddn7BS1pZoNUYUar+SJTVrV/OiRFhDSt YIDTSX282GuenjfiDyReD9bf34ligAD6EC+R4iE0UdS5zYX+Me4ZoD7okN/RUZ+j SGykzpV7aeH7F95ru0AeImlq6spxhbtnCDfQqLUk385pLWFZxQLRf/tjhlCoHDbD Yhp10oKaA79l8b9Qq4tesW5ODLu0H/ckpcfz8qTgHldcHglwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw9ASyvp8fqb9fA6QFg1C7zZxaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzY0OWQ1NzUtMzA1Ny0z YmM3LThmZjktZDJhMzA1YmUwYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrETcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmSEApt8tlXyjPkT/qu0QeueIHx8qCaiTN39zksaTBZGpWJErY2R8B5 j/UfLemYAlOHALnxj3J0vuWmhj2LkPpQXPx/lqbgTwbHS0t7zsnsAoxywWec3+lB a+PMbT3WABA5nLOdhvKH/SuaCG/sg7ylHDCboW0hUOi+TPZFSVTr/In+mn/gFs0E SzUQZ/wK+BQH8eezU3iG5RPfrptT0XClFh+4EfMM6Ghif/+2ASGWwlyDR/qmfpFd KhkHBeVR2zZNPCMIiP0P4kaHwe2kkYB/kszml/azSIZok8yhP97QQVTsTdl7qRW9 blY1ZMBGXH7SSheBkjOg2TsU0OUm8oo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:25 2025 by rpki-client