$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/443de06e-2ac4-33e9-a145-9da0e5d096ec.roa File: 443de06e-2ac4-33e9-a145-9da0e5d096ec.roa (raw, json) Hash identifier: QtFxh2pc2J3/2bHCCHI0rbPsu/6f9B3fYuSsyJvdFUQ= Subject key identifier: 79:66:11:EC:D2:2B:F0:25:20:EF:C6:0C:75:61:30:1A:FA:A9:64:D7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB4115653D2BE4D49925D5E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/443de06e-2ac4-33e9-a145-9da0e5d096ec.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:15:65:3d:2b:e4:d4:99:25:d5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=6928578e-ef7d-4554-a810-12e24e537ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:ff:cb:02:ba:a6:be:1c:1b:9d:d5:d6:1e: 1d:85:a2:d6:ee:18:95:3e:97:f5:5d:a8:62:75:a2: f9:ed:46:a2:30:59:74:7e:55:dd:33:41:0b:49:d6: 06:15:a8:30:d9:47:71:19:b2:d9:6e:c7:43:ce:41: 8e:f2:92:72:1c:b4:6f:1f:df:ab:89:e0:e3:c6:c7: 5a:29:2b:3f:1a:56:3c:75:86:85:f5:18:eb:ad:f4: b8:9b:7c:a9:ab:cc:1b:af:95:c1:3b:b8:c0:69:25: 20:a1:5a:4b:8d:aa:a9:18:e3:35:e9:c3:99:00:d8: b0:88:39:b6:b2:c9:de:33:39:51:7a:8d:65:8e:45: 99:19:6b:39:d9:81:01:e2:50:38:9f:65:68:f5:48: e1:44:2b:4f:cc:3e:5b:2c:e3:42:06:6b:26:84:f0: 95:83:59:58:92:38:b4:18:5d:26:e1:dd:ee:cb:e5: 27:22:a0:85:24:71:9e:2d:6b:e6:cc:39:7c:59:20: cd:36:76:fd:9f:2c:00:9a:02:1d:1a:5c:2d:a1:f5: 28:f3:5f:66:1e:ed:10:d7:e0:36:fe:29:49:c0:00: 5c:8b:2b:c2:d9:6e:89:56:73:0e:c4:02:f7:ec:9e: 45:2a:b1:14:c0:8b:9f:5d:7a:8e:5c:4a:82:af:10: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:66:11:EC:D2:2B:F0:25:20:EF:C6:0C:75:61:30:1A:FA:A9:64:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/443de06e-2ac4-33e9-a145-9da0e5d096ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b8:78:a2:0a:3b:13:df:b6:ce:16:88:c5:f3:67:41:cf:9a: f8:0b:7e:df:2b:a6:42:b2:c3:7b:50:24:82:87:b7:f6:5e:05: ee:5c:3e:12:e1:c0:21:4c:13:cf:09:de:06:8c:59:6e:6d:0f: 18:c0:4e:ec:3b:8d:9b:65:32:a9:97:b8:46:3d:85:d4:89:49: 70:01:56:c2:13:de:a7:b0:a1:5c:1d:42:76:aa:78:ba:44:a8: 48:fe:13:7e:ab:c7:5e:c1:14:fb:f9:77:97:0e:b0:4a:d7:11: ea:20:d8:be:a5:19:1b:dc:72:15:9f:ca:c1:f8:ce:e6:a7:3b: 73:f5:b6:1e:a7:7b:04:24:16:1a:b7:9f:a5:e6:64:d8:d3:0f: 4b:47:32:0e:57:89:f6:53:7d:cf:29:3a:a9:b9:b8:6f:0e:31: d8:e3:3d:ea:04:8a:13:1e:37:10:c7:75:89:c8:34:ac:70:93: 33:42:91:ab:56:52:45:e4:b8:5c:60:8b:85:94:84:20:08:32: 66:7a:9f:3e:ab:64:bb:f1:91:52:51:73:88:3b:7c:ee:e8:c7: e9:f9:cf:2a:58:e5:35:d2:10:36:7c:33:52:17:8a:ef:5a:20: 20:fc:5b:ad:4c:34:8c:76:86:9f:f0:42:69:45:54:d5:0e:ca: c2:dd:e9:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRVlPSvk1Jkl1eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NjkyODU3OGUtZWY3ZC00NTU0LWE4MTAtMTJlMjRlNTM3ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbT/ywK6pr4cG53V1h4dhaLW7hiVPpf1Xahi daL57UaiMFl0flXdM0ELSdYGFagw2UdxGbLZbsdDzkGO8pJyHLRvH9+rieDjxsda KSs/GlY8dYaF9RjrrfS4m3ypq8wbr5XBO7jAaSUgoVpLjaqpGOM16cOZANiwiDm2 ssneMzlReo1ljkWZGWs52YEB4lA4n2Vo9UjhRCtPzD5bLONCBmsmhPCVg1lYkji0 GF0m4d3uy+UnIqCFJHGeLWvmzDl8WSDNNnb9nywAmgIdGlwtofUo819mHu0Q1+A2 /ilJwABciyvC2W6JVnMOxAL37J5FKrEUwIufXXqOXEqCrxCxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlmEezSK/AlIO/GDHVhMBr6qWTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDQzZGUwNmUtMmFjNC0z M2U5LWExNDUtOWRhMGU1ZDA5NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu4eKIKOxPfts4WiMXzZ0HPmvgLft8rpkKyw3tQJIKHt/ZeBe5cPhLh wCFME88J3gaMWW5tDxjATuw7jZtlMqmXuEY9hdSJSXABVsIT3qewoVwdQnaqeLpE qEj+E36rx17BFPv5d5cOsErXEeog2L6lGRvcchWfysH4zuanO3P1th6newQkFhq3 n6XmZNjTD0tHMg5XifZTfc8pOqm5uG8OMdjjPeoEihMeNxDHdYnINKxwkzNCkatW UkXkuFxgi4WUhCAIMmZ6nz6rZLvxkVJRc4g7fO7ox+n5zypY5TXSEDZ8M1IXiu9a ICD8W61MNIx2hp/wQmlFVNUOysLd6Tc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:41 2025 by rpki-client