$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bb2e80c-9652-3ef8-9112-813a640cf13f.roa File: 5bb2e80c-9652-3ef8-9112-813a640cf13f.roa (raw, json) Hash identifier: 7kt7GFEaG7zR9FLjyVzSj3/HrXRRj7cPmi435TeuqGs= Subject key identifier: 60:F6:7F:77:23:27:AA:24:A6:A0:CC:16:A7:39:69:B2:6B:63:E2:B2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766C45054FCF25B3EE9480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bb2e80c-9652-3ef8-9112-813a640cf13f.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:6c:45:05:4f:cf:25:b3:ee:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=5fe82e91-eaf8-4609-a4bb-c108e811cb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:32:eb:80:a2:fc:95:95:05:66:d4:c4:bf: a0:ec:50:17:86:73:a0:f9:f0:a7:87:83:5b:35:9b: 00:f6:88:ec:c5:14:2e:41:60:62:65:f7:ad:12:bf: 7d:67:fd:fd:b0:ab:5a:c9:5d:bb:65:7c:e8:fc:c4: c2:f7:9c:38:6d:04:86:ba:ed:c3:49:e3:c6:1d:9a: de:ef:e1:b5:6b:ca:96:7b:9b:cd:d7:32:57:6d:b6: 34:15:8f:58:ec:7d:d2:78:e3:ea:f2:ba:60:4d:bf: 4a:10:ce:0c:b0:c7:28:5f:68:5f:c2:76:f7:38:5f: 79:75:c9:a1:60:4b:a0:22:88:1a:79:e8:46:05:3d: 2b:9d:f9:c0:0f:49:54:9b:99:5f:76:f0:da:b2:ad: 9b:8a:51:f9:23:15:81:7d:0b:a1:64:42:1a:49:2a: 22:b8:b4:f5:ca:dd:99:92:dd:be:98:43:2e:0f:34: 0a:54:eb:09:1a:b9:cd:d8:ba:1e:6c:1b:d4:02:62: b8:48:c8:cb:05:c7:0c:0b:3a:fb:91:f7:dd:a2:03: 6f:e6:a4:96:ec:38:f6:e6:c6:00:a3:ce:90:b3:e5: 62:cf:5e:84:9d:a9:51:48:32:ca:e3:44:bc:7e:d4: a7:e3:7a:c7:1b:6c:d3:77:0a:e0:51:9c:02:b0:53: c8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F6:7F:77:23:27:AA:24:A6:A0:CC:16:A7:39:69:B2:6B:63:E2:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bb2e80c-9652-3ef8-9112-813a640cf13f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:10:1a:1a:79:cb:bf:e6:f1:0a:b9:65:b8:a0:fa:42:96:2c: 2c:2e:b0:f8:98:19:8b:5e:36:38:66:dc:51:3d:14:8e:03:1d: 54:64:44:cf:3c:c6:6b:c5:5b:c7:d3:61:3c:ec:03:77:b3:b5: 25:b1:ca:09:43:c8:1b:81:b8:e8:26:0e:61:3a:7d:8b:b8:97: 91:25:7f:05:c6:93:f9:27:34:77:92:c7:c5:d3:5b:50:2b:d1: e6:dc:26:00:23:6d:5d:5c:5b:15:16:34:89:c7:e7:9f:e1:f0: d1:fc:1d:d5:5c:07:26:d4:bb:81:f4:d7:0a:f2:6b:c8:48:66: 89:46:61:10:2d:6a:a2:9c:6f:64:0e:49:73:89:84:7a:b1:c0: 49:b1:fb:18:8c:59:a6:e7:99:a2:22:27:ec:ce:d4:be:7c:2d: f5:9b:f6:d4:4b:9a:52:a1:83:20:cc:0c:73:b5:54:67:ce:1d: 7b:78:64:c4:0b:91:bc:1f:71:4d:57:06:36:6a:6a:1c:5f:7b: d8:96:37:18:35:c1:c9:74:d3:cf:c7:cb:a9:bd:97:10:90:bc: 52:5b:87:b4:8e:e4:75:d4:25:f2:48:57:57:5a:d8:d6:73:04: 55:ba:f3:a7:42:be:ad:e3:1e:c0:ab:73:54:46:54:cb:58:9c: 80:56:d9:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmxFBU/PJbPulIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWZlODJlOTEtZWFmOC00NjA5LWE0YmItYzEwOGU4MTFjYjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob8y64Ci/JWVBWbUxL+g7FAXhnOg+fCnh4Nb NZsA9ojsxRQuQWBiZfetEr99Z/39sKtayV27ZXzo/MTC95w4bQSGuu3DSePGHZre 7+G1a8qWe5vN1zJXbbY0FY9Y7H3SeOPq8rpgTb9KEM4MsMcoX2hfwnb3OF95dcmh YEugIogaeehGBT0rnfnAD0lUm5lfdvDasq2bilH5IxWBfQuhZEIaSSoiuLT1yt2Z kt2+mEMuDzQKVOsJGrnN2LoebBvUAmK4SMjLBccMCzr7kffdogNv5qSW7Dj25sYA o86Qs+Viz16EnalRSDLK40S8ftSn43rHG2zTdwrgUZwCsFPItQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGD2f3cjJ6okpqDMFqc5abJrY+KyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJiMmU4MGMtOTY1Mi0z ZWY4LTkxMTItODEzYTY0MGNmMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMQGhp5y7/m8Qq5Zbig+kKWLCwusPiYGYteNjhm3FE9FI4DHVRkRM88 xmvFW8fTYTzsA3eztSWxyglDyBuBuOgmDmE6fYu4l5ElfwXGk/knNHeSx8XTW1Ar 0ebcJgAjbV1cWxUWNInH55/h8NH8HdVcBybUu4H01wrya8hIZolGYRAtaqKcb2QO SXOJhHqxwEmx+xiMWabnmaIiJ+zO1L58LfWb9tRLmlKhgyDMDHO1VGfOHXt4ZMQL kbwfcU1XBjZqahxfe9iWNxg1wcl008/Hy6m9lxCQvFJbh7SO5HXUJfJIV1da2NZz BFW686dCvq3jHsCrc1RGVMtYnIBW2do= -----END CERTIFICATE-----Generated at Sat Aug 23 15:00:00 2025 by rpki-client