$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44a00149-0ca4-38d5-9865-a80cf0ff900a.roa File: 44a00149-0ca4-38d5-9865-a80cf0ff900a.roa (raw, json) Hash identifier: 6ioNxcu/FPsfbzJkyR9YK0Qdc+WBuzRmxK38kOjLDk4= Subject key identifier: 6D:9A:25:3A:18:26:A0:3E:74:22:36:3C:DB:5B:03:B8:BC:8B:F2:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71110B60AE3904FD7A1AF40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44a00149-0ca4-38d5-9865-a80cf0ff900a.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.68.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:10:b6:0a:e3:90:4f:d7:a1:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=4076af43-4a1d-4794-825d-e345d003878f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:7e:c1:3d:9c:20:f4:3e:cb:1b:53:01:b5: 07:88:24:e6:da:5f:0b:66:75:a9:66:c0:24:cb:f4: 41:42:b3:95:6c:2d:25:ce:ea:b9:32:80:34:70:0c: ff:dd:d9:85:43:ac:6a:89:c6:63:7a:38:1b:7d:01: 76:ae:17:cd:b8:8e:4d:49:f8:97:28:06:71:11:0c: 5b:80:76:b1:c8:c3:84:49:a9:e7:8e:a5:81:7c:01: eb:70:ae:94:37:bf:10:16:99:29:14:97:9f:60:f9: 5a:ec:ab:4d:5d:1e:02:6a:90:7e:33:c9:c4:3d:46: cf:49:0a:9c:10:e8:54:80:e8:a9:13:ba:db:1f:d1: c8:11:ab:18:2c:38:1a:af:b5:98:cb:13:8e:fc:d6: 10:d6:51:17:33:f7:8c:ec:89:66:a9:fe:ac:5d:97: 8e:1a:d3:04:1f:c7:92:2b:63:29:b9:74:fd:df:04: 0b:5e:4b:9f:0e:e0:84:91:7e:a9:bb:e6:86:3f:ca: 8e:1d:5a:53:00:22:b3:fc:7b:bd:67:77:5e:de:84: dc:b9:9e:55:d1:f1:5e:ca:0e:30:bf:78:8a:6f:f7: 21:73:21:0d:e7:0e:81:18:0e:77:87:09:62:6e:40: da:7d:b8:d4:6b:80:42:e2:59:2b:4b:a5:17:1e:fa: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9A:25:3A:18:26:A0:3E:74:22:36:3C:DB:5B:03:B8:BC:8B:F2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/44a00149-0ca4-38d5-9865-a80cf0ff900a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:bf:1c:9f:12:08:34:3b:7c:f8:4a:97:a4:33:5e:b5:88:3d: ca:8d:f9:82:6e:ac:b4:d6:f0:2b:8f:8d:de:4a:c1:49:88:8f: 8e:ac:16:8c:1f:a8:eb:74:7b:f8:38:71:b9:74:ec:ab:88:b3: 54:b8:de:1d:ef:63:ba:ac:8d:42:4f:26:bd:37:44:6f:e2:73: c5:ed:b0:48:31:4d:7a:8c:09:74:4d:37:d0:a0:2a:23:80:b7: d9:11:ec:bd:c3:2a:f0:34:c6:aa:44:23:94:5f:0e:68:72:d0: df:21:21:de:05:df:28:01:75:14:ee:53:61:78:1d:0a:1c:a8: 0e:51:3d:e3:c8:d0:9b:5c:36:cb:4b:ea:03:a0:91:56:9c:20: 98:29:8e:58:c8:2c:03:ff:4e:8f:2b:9a:c0:43:b2:9c:b6:4c: f2:6c:aa:9b:33:34:82:78:43:a8:87:6b:db:fb:e8:c4:b7:61: 16:b7:d0:d5:8e:02:f9:9f:f5:4b:29:6c:36:fa:45:2f:d4:da: 39:61:06:30:40:39:b1:93:db:4e:4f:23:36:c2:6b:45:f8:9f: 44:49:14:f6:90:ac:33:17:06:d1:a1:6d:d8:03:5e:b8:1a:63: 10:96:3b:1b:b7:c2:6e:eb:88:39:8c:ef:7c:7c:ab:3c:74:20: e1:ac:59:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERC2CuOQT9ehr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NDA3NmFmNDMtNGExZC00Nzk0LTgyNWQtZTM0NWQwMDM4NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsp+wT2cIPQ+yxtTAbUHiCTm2l8LZnWpZsAk y/RBQrOVbC0lzuq5MoA0cAz/3dmFQ6xqicZjejgbfQF2rhfNuI5NSfiXKAZxEQxb gHaxyMOESannjqWBfAHrcK6UN78QFpkpFJefYPla7KtNXR4CapB+M8nEPUbPSQqc EOhUgOipE7rbH9HIEasYLDgar7WYyxOO/NYQ1lEXM/eM7Ilmqf6sXZeOGtMEH8eS K2MpuXT93wQLXkufDuCEkX6pu+aGP8qOHVpTACKz/Hu9Z3de3oTcuZ5V0fFeyg4w v3iKb/chcyEN5w6BGA53hwlibkDafbjUa4BC4lkrS6UXHvqiGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2aJToYJqA+dCI2PNtbA7i8i/KFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDRhMDAxNDktMGNhNC0z OGQ1LTk4NjUtYTgwY2YwZmY5MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2/HJ8SCDQ7fPhKl6QzXrWIPcqN+YJurLTW8CuPjd5KwUmIj46sFowf qOt0e/g4cbl07KuIs1S43h3vY7qsjUJPJr03RG/ic8XtsEgxTXqMCXRNN9CgKiOA t9kR7L3DKvA0xqpEI5RfDmhy0N8hId4F3ygBdRTuU2F4HQocqA5RPePI0JtcNstL 6gOgkVacIJgpjljILAP/To8rmsBDspy2TPJsqpszNIJ4Q6iHa9v76MS3YRa30NWO Avmf9UspbDb6RS/U2jlhBjBAObGT205PIzbCa0X4n0RJFPaQrDMXBtGhbdgDXrga YxCWOxu3wm7riDmM73x8qzx0IOGsWaE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:04 2025 by rpki-client