$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cacd8b5-e66d-3714-95da-8cf1a1034606.roa File: 4cacd8b5-e66d-3714-95da-8cf1a1034606.roa (raw, json) Hash identifier: it2n/+/jds9ZswHlvCRQot18W4Wr96VWE5bZHhZYOsQ= Subject key identifier: DE:E1:59:30:F7:30:85:D3:E6:DD:F3:6F:EE:79:2A:60:D1:1B:B2:A4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB4116049B51F5A50C95BE27 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cacd8b5-e66d-3714-95da-8cf1a1034606.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:16:04:9b:51:f5:a5:0c:95:be:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=c299dda8-92c2-4635-8486-ee0fca18c894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:7c:66:1d:26:0d:bd:6c:19:2d:b8:05:3a: 7d:19:2b:97:e2:f4:b0:c6:43:39:56:0c:35:3a:55: 0c:af:65:8a:2e:63:17:99:85:04:75:f3:22:9f:b1: 01:fc:e3:0c:78:18:61:7a:4d:fb:57:7f:10:de:03: 4d:ff:21:99:fd:3b:23:47:4b:18:8d:d0:a3:6c:d8: d2:74:ea:39:14:8c:66:09:93:15:02:0d:aa:96:4f: 4d:6f:26:12:2a:a4:a8:7e:8b:9d:93:0b:45:4c:be: bb:69:76:a1:02:fc:d5:69:c9:48:75:58:b9:cc:2a: f6:bd:2a:95:c7:72:3e:b9:97:a6:0e:d4:0e:3c:06: 11:8e:84:1a:25:88:a9:37:08:f9:1b:2f:53:73:62: 73:46:e9:7b:d7:31:a3:96:cc:11:af:be:ad:80:2e: c7:52:37:2d:5c:3f:3a:9d:fe:f1:dd:f4:1d:53:4d: 4c:7d:66:e3:bf:f0:f5:40:cc:b8:d4:6d:74:e4:12: 47:7f:35:32:67:50:75:e8:e9:74:3e:9b:51:0e:9d: c9:3e:e2:aa:a2:9d:f9:19:13:e2:3d:a3:23:72:ed: 2c:bf:8c:0d:26:70:dc:b1:1e:2f:2c:41:e6:44:05: 15:6c:51:0b:30:1e:35:1d:81:57:38:2f:ef:07:7c: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E1:59:30:F7:30:85:D3:E6:DD:F3:6F:EE:79:2A:60:D1:1B:B2:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cacd8b5-e66d-3714-95da-8cf1a1034606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b9:16:fe:9b:0d:9d:bb:ea:1f:bc:54:15:8e:1d:a4:31:fb: 1d:86:e7:18:72:89:6c:d4:0b:47:6d:b2:17:82:d9:69:fd:5f: 7d:49:b5:c2:75:e0:aa:23:57:cf:fc:17:d3:5d:10:5c:f5:3e: e1:c8:a8:55:b0:6b:5e:15:4c:5a:53:e7:91:62:9d:54:d1:fb: d4:2b:ec:7c:f7:b2:77:3a:16:3d:74:0e:39:11:ed:68:22:54: 93:e7:93:9a:9a:75:2c:f5:98:ed:10:f1:68:81:b7:09:6b:7b: f5:2d:0e:cc:16:90:90:61:24:40:b8:61:bf:cb:d4:26:43:42: 1e:06:4e:b9:a6:cf:d8:7e:f9:5f:d9:8b:38:88:a8:51:46:f0: 92:80:04:a2:4e:f2:45:23:a1:95:58:5b:77:96:3d:6e:20:cf: 4f:30:de:fa:6a:9d:23:9c:59:41:97:7b:9d:b9:ff:28:1b:1b: 71:79:91:0c:42:7b:31:19:b7:e9:bf:05:63:88:77:8c:a8:79: a6:71:1d:79:0c:8b:dc:48:44:6a:4a:aa:bf:ab:f9:17:c3:7c: 43:80:4b:a9:08:7e:3a:c2:3e:15:be:ac:a6:84:7b:eb:95:ee: 78:f6:20:35:2e:36:b8:f0:e5:84:47:b5:51:e5:f7:1a:78:20: ca:05:73:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRYEm1H1pQyVvicwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzI5OWRkYTgtOTJjMi00NjM1LTg0ODYtZWUwZmNhMThjODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF58Zh0mDb1sGS24BTp9GSuX4vSwxkM5Vgw1 OlUMr2WKLmMXmYUEdfMin7EB/OMMeBhhek37V38Q3gNN/yGZ/TsjR0sYjdCjbNjS dOo5FIxmCZMVAg2qlk9NbyYSKqSofoudkwtFTL67aXahAvzVaclIdVi5zCr2vSqV x3I+uZemDtQOPAYRjoQaJYipNwj5Gy9Tc2JzRul71zGjlswRr76tgC7HUjctXD86 nf7x3fQdU01MfWbjv/D1QMy41G105BJHfzUyZ1B16Ol0PptRDp3JPuKqop35GRPi PaMjcu0sv4wNJnDcsR4vLEHmRAUVbFELMB41HYFXOC/vB3xZpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7hWTD3MIXT5t3zb+55KmDRG7KkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGNhY2Q4YjUtZTY2ZC0z NzE0LTk1ZGEtOGNmMWExMDM0NjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq5Fv6bDZ276h+8VBWOHaQx+x2G5xhyiWzUC0dtsheC2Wn9X31JtcJ1 4KojV8/8F9NdEFz1PuHIqFWwa14VTFpT55FinVTR+9Qr7Hz3snc6Fj10DjkR7Wgi VJPnk5qadSz1mO0Q8WiBtwlre/UtDswWkJBhJEC4Yb/L1CZDQh4GTrmmz9h++V/Z iziIqFFG8JKABKJO8kUjoZVYW3eWPW4gz08w3vpqnSOcWUGXe525/ygbG3F5kQxC ezEZt+m/BWOId4yoeaZxHXkMi9xIRGpKqr+r+RfDfEOAS6kIfjrCPhW+rKaEe+uV 7nj2IDUuNrjw5YRHtVHl9xp4IMoFc8o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:03 2025 by rpki-client