$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bcf60f5-4414-361e-8eee-b78b8bf75eef.roa File: 4bcf60f5-4414-361e-8eee-b78b8bf75eef.roa (raw, json) Hash identifier: 4aeF81zpSXG8F/aKb2/p4JzH20VNKFrdIakel/5JMbM= Subject key identifier: 53:15:C5:80:50:B1:41:B4:BE:7D:F5:A5:52:05:A5:2C:93:71:CD:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB411642F43B1294110C01D0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bcf60f5-4414-361e-8eee-b78b8bf75eef.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:16:42:f4:3b:12:94:11:0c:01:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=1a998c84-c0cd-4483-8c77-7f937fd4d32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:b9:a5:07:ad:6b:15:33:88:92:8f:a6:e3: c8:0f:f0:04:ad:70:c5:cd:cd:ba:32:32:ef:dd:ec: a0:77:07:0e:21:c1:06:15:fe:26:6e:14:34:11:26: 6a:7c:d3:17:6f:f3:29:04:cf:d3:ef:c7:c3:cf:53: 26:5b:72:f1:f4:48:81:5a:1f:ba:9b:79:9c:4b:2e: 54:a9:12:2b:04:3b:ac:7a:3f:39:0d:95:67:00:40: ac:7a:01:d7:16:0f:c2:fc:9a:d9:21:48:a9:2f:b3: 24:70:ac:32:df:29:aa:ff:41:c0:f2:dc:9c:41:94: c2:5f:39:22:10:e9:59:95:84:94:d4:9d:70:c7:1e: 16:d0:02:6b:68:d7:86:72:ee:fc:53:65:97:74:41: d6:27:b2:b8:54:6f:0c:d2:94:01:75:16:b2:5d:2c: 9f:9e:cf:4d:c4:20:dd:0c:16:20:4d:3a:bf:ac:37: 69:2b:4b:bd:49:27:8d:a9:f5:b0:1c:e5:92:ff:f4: 30:39:de:b4:5e:4c:73:b4:55:e0:6e:6b:3e:18:83: ed:6c:e9:f2:dc:11:c1:13:6e:2e:02:98:2f:a8:e3: 32:9b:33:a7:e4:4e:11:d8:20:c9:cd:66:7c:20:ef: 2f:75:1f:54:34:65:65:37:12:f2:f0:8d:7b:87:e2: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:15:C5:80:50:B1:41:B4:BE:7D:F5:A5:52:05:A5:2C:93:71:CD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bcf60f5-4414-361e-8eee-b78b8bf75eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7b:bf:b9:c2:5e:0b:64:92:6c:f1:62:32:9d:cb:4f:33:be: fc:61:ee:05:b0:a1:1f:6c:2d:1d:24:e9:e8:d3:ed:88:fb:79: 39:c5:67:06:79:ff:27:81:61:45:c2:01:97:3c:54:94:27:5b: e9:4d:f1:6c:e9:13:ed:95:14:e4:2c:14:19:89:ac:85:0c:bc: 1a:ea:e0:78:ec:40:da:b2:3b:7a:f7:2a:77:e2:bc:17:bb:26: e6:ff:b7:79:94:03:0a:e5:07:ce:35:2f:36:d0:0f:d7:16:32: 3a:ef:4d:d3:ce:df:d2:e6:18:86:0e:49:44:63:9a:89:34:3a: b3:23:c4:f1:49:cb:fa:44:f0:25:f2:62:13:ab:f9:5f:73:5f: c4:b2:e9:7c:f7:8e:eb:42:a6:9c:51:ec:7a:01:6e:af:18:34: 08:15:da:6d:d4:b5:2f:1a:43:0e:d5:c2:f2:0c:c1:70:f5:7c: b8:f8:f5:ed:be:78:9c:47:25:7b:4d:e2:6d:e1:1d:e8:f5:08: 88:99:26:35:88:30:79:be:4c:fc:eb:84:39:37:de:23:5a:cf: 3e:ca:82:1a:4f:e4:5e:91:50:64:28:40:7e:3c:f8:73:27:72: dd:b8:9d:72:d0:c2:0c:1d:98:60:ab:5f:31:2b:8d:f3:1e:2b: e4:66:6f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRZC9DsSlBEMAdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MWE5OThjODQtYzBjZC00NDgzLThjNzctN2Y5MzdmZDRkMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVC5pQetaxUziJKPpuPID/AErXDFzc26MjLv 3eygdwcOIcEGFf4mbhQ0ESZqfNMXb/MpBM/T78fDz1MmW3Lx9EiBWh+6m3mcSy5U qRIrBDusej85DZVnAECsegHXFg/C/JrZIUipL7MkcKwy3ymq/0HA8tycQZTCXzki EOlZlYSU1J1wxx4W0AJraNeGcu78U2WXdEHWJ7K4VG8M0pQBdRayXSyfns9NxCDd DBYgTTq/rDdpK0u9SSeNqfWwHOWS//QwOd60XkxztFXgbms+GIPtbOny3BHBE24u ApgvqOMymzOn5E4R2CDJzWZ8IO8vdR9UNGVlNxLy8I17h+J1lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMVxYBQsUG0vn31pVIFpSyTcc3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGJjZjYwZjUtNDQxNC0z NjFlLThlZWUtYjc4YjhiZjc1ZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrET0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl7v7nCXgtkkmzxYjKdy08zvvxh7gWwoR9sLR0k6ejT7Yj7eTnFZwZ5 /yeBYUXCAZc8VJQnW+lN8WzpE+2VFOQsFBmJrIUMvBrq4HjsQNqyO3r3KnfivBe7 Jub/t3mUAwrlB841LzbQD9cWMjrvTdPO39LmGIYOSURjmok0OrMjxPFJy/pE8CXy YhOr+V9zX8Sy6Xz3jutCppxR7HoBbq8YNAgV2m3UtS8aQw7VwvIMwXD1fLj49e2+ eJxHJXtN4m3hHej1CIiZJjWIMHm+TPzrhDk33iNazz7KghpP5F6RUGQoQH48+HMn ct24nXLQwgwdmGCrXzErjfMeK+Rmb3E= -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:25 2025 by rpki-client