$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/486cdc27-fa6c-3a69-8ca5-9921152dd75d.roa File: 486cdc27-fa6c-3a69-8ca5-9921152dd75d.roa (raw, json) Hash identifier: 5rHo1kyxv1UmKejug6dAqjfsax6PC2z7rX7Zj2wATdI= Subject key identifier: 3D:13:67:2C:5E:EE:BD:0A:DD:E1:17:2B:A3:2E:0F:0A:84:5D:BE:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876693F74DBC78B90237B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/486cdc27-fa6c-3a69-8ca5-9921152dd75d.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:69:3f:74:db:c7:8b:90:23:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=a71a0c0a-d283-49cd-bc28-6daf5bdf502c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f9:0a:f2:36:ff:2b:a7:4e:93:c1:79:2c:cd: ab:6a:c9:54:ea:75:99:96:89:b3:dc:12:92:0c:1d: df:0c:46:3b:be:16:71:26:ee:8d:bf:e0:89:8b:71: cd:5f:a1:53:54:ee:28:bf:a6:bd:a7:40:a9:a9:ad: ae:c4:b8:89:59:d8:71:f9:73:cc:39:53:06:1a:85: ff:17:94:17:b7:57:8c:c4:82:22:d9:96:cb:2b:79: 3c:38:4e:ba:e0:fc:e4:14:0b:d1:e3:4b:96:eb:cc: dd:ed:ed:50:24:49:f1:ad:6a:63:2f:44:9e:a5:6b: 84:03:3e:0c:6d:2c:3f:f6:e5:95:7a:2b:8d:26:a9: 49:24:94:ab:1e:56:82:72:38:c9:e7:50:ec:11:4b: 88:24:22:49:de:8a:b9:81:8f:aa:7a:bb:c7:2c:0a: e2:f0:2c:36:a3:04:47:bb:27:74:f7:3c:a4:1a:d9: 3e:14:d8:31:70:92:f7:ca:74:bc:3f:e8:15:74:d0: b5:df:4f:78:96:d1:c0:d8:17:73:df:36:c4:4a:20: 35:d6:26:cf:ca:77:ae:7f:51:40:12:c1:ae:90:66: 68:13:95:30:79:e6:3c:db:29:b8:6c:d1:96:a8:e4: 6f:30:aa:91:ff:4b:f7:bc:af:91:f0:eb:92:83:7c: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:67:2C:5E:EE:BD:0A:DD:E1:17:2B:A3:2E:0F:0A:84:5D:BE:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/486cdc27-fa6c-3a69-8ca5-9921152dd75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:05:8f:29:00:66:53:7f:d1:2b:17:26:b8:d3:71:1d:51:b1: df:6f:2d:c8:3f:3d:dd:62:f9:dc:55:98:1f:6e:69:db:59:6c: 50:56:e7:0c:ae:88:df:c9:33:6f:b0:b9:6e:0c:9b:c1:91:87: 0e:70:b5:2f:0e:a2:da:59:3b:d5:2f:f5:35:33:91:c5:79:0d: c5:6d:3d:86:e2:40:e9:83:8b:2a:a0:86:9c:81:a3:d1:16:cb: 20:14:36:1d:2d:bb:17:a1:22:07:e4:ec:a8:12:d8:8f:d8:c4: d0:5e:13:4c:d3:2c:28:4d:4d:13:6c:7a:3f:1e:8c:4c:41:5d: c2:0c:87:16:6a:cc:dd:cc:a2:b1:79:30:ce:4d:14:a8:ba:a2: bd:48:0c:cb:89:7d:db:3e:da:9e:b2:f9:30:33:1f:e0:a8:90: a0:e5:f9:70:9d:ef:80:b3:95:98:2b:3d:17:b9:d2:67:39:70: 54:7e:25:4b:0c:d9:0c:2e:22:0f:86:e1:ee:39:cc:65:56:eb: 68:ad:d0:ed:4e:3d:cc:7e:06:0b:57:5d:8a:64:d3:6e:40:a9: be:89:11:70:b6:14:e0:bc:fa:c3:26:d4:ad:d8:22:26:71:80: 06:e1:c0:10:e7:ac:c8:6d:ed:68:fa:ef:5f:a2:42:9a:6f:5e: 0f:ac:f6:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmk/dNvHi5AjewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTcxYTBjMGEtZDI4My00OWNkLWJjMjgtNmRhZjViZGY1MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfkK8jb/K6dOk8F5LM2raslU6nWZlomz3BKS DB3fDEY7vhZxJu6Nv+CJi3HNX6FTVO4ov6a9p0Cpqa2uxLiJWdhx+XPMOVMGGoX/ F5QXt1eMxIIi2ZbLK3k8OE664PzkFAvR40uW68zd7e1QJEnxrWpjL0SepWuEAz4M bSw/9uWVeiuNJqlJJJSrHlaCcjjJ51DsEUuIJCJJ3oq5gY+qervHLAri8Cw2owRH uyd09zykGtk+FNgxcJL3ynS8P+gVdNC13094ltHA2Bdz3zbESiA11ibPyneuf1FA EsGukGZoE5UweeY82ym4bNGWqORvMKqR/0v3vK+R8OuSg3zWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0TZyxe7r0K3eEXK6MuDwqEXb7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDg2Y2RjMjctZmE2Yy0z YTY5LThjYTUtOTkyMTE1MmRkNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcFjykAZlN/0SsXJrjTcR1Rsd9vLcg/Pd1i+dxVmB9uadtZbFBW5wyu iN/JM2+wuW4Mm8GRhw5wtS8OotpZO9Uv9TUzkcV5DcVtPYbiQOmDiyqghpyBo9EW yyAUNh0tuxehIgfk7KgS2I/YxNBeE0zTLChNTRNsej8ejExBXcIMhxZqzN3MorF5 MM5NFKi6or1IDMuJfds+2p6y+TAzH+CokKDl+XCd74CzlZgrPRe50mc5cFR+JUsM 2QwuIg+G4e45zGVW62it0O1OPcx+BgtXXYpk025Aqb6JEXC2FOC8+sMm1K3YIiZx gAbhwBDnrMht7Wj671+iQppvXg+s9ks= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:44 2025 by rpki-client