$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cad66d8-4442-3927-b985-bb62192f176d.roa File: 5cad66d8-4442-3927-b985-bb62192f176d.roa (raw, json) Hash identifier: D7OczNSx8Tm1jy1TY9vYYoOXJn1ESazEWUR9f9QlyDQ= Subject key identifier: F3:0B:95:50:D5:CC:A9:5D:AB:5B:7B:F1:FF:99:D1:1B:0C:8C:71:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA14187DBD8AC0DD7AD80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cad66d8-4442-3927-b985-bb62192f176d.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a1:41:87:db:d8:ac:0d:d7:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=aaabb997-d803-476e-903e-c062b1f4245a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:55:e6:fd:74:2e:9d:47:33:5c:1c:2d:99: 64:19:0e:11:da:b3:c0:c5:f4:16:e7:db:38:e9:fc: 30:df:f8:be:8a:3a:39:d1:d0:f4:64:c1:b3:32:16: 90:a5:6c:01:b0:d3:b2:27:c6:d8:ba:02:26:66:71: a1:78:e7:72:df:1f:b5:c4:25:ba:35:1b:38:19:4f: 70:3d:e7:e9:e3:8c:b5:73:84:b3:4d:84:0b:6a:d9: b3:82:35:6e:8f:45:f6:2b:e1:3d:26:f5:37:f9:32: 61:75:12:96:25:59:69:34:bc:d5:04:08:ec:1d:15: 33:22:2b:cb:07:80:7c:40:2c:b2:56:f7:6d:0b:09: 7a:65:10:d8:0f:71:28:7f:81:36:de:a8:fb:fa:63: 11:5b:32:65:35:84:94:8d:5b:24:74:05:90:87:71: 75:fa:bc:dd:80:9c:11:5d:30:15:d9:f7:bb:e2:4d: 19:b9:25:50:44:75:64:05:bb:b4:76:3f:39:31:5d: 6a:a6:de:5c:a6:aa:0b:43:c8:35:c5:cf:d2:6f:c2: e5:33:ba:14:91:ad:d1:31:69:78:21:d4:c9:7c:c4: 19:7d:3b:75:b7:97:c2:83:ef:ef:88:08:23:8d:45: b2:46:ce:cb:75:f3:4e:9d:1e:db:6b:5e:2b:ef:17: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0B:95:50:D5:CC:A9:5D:AB:5B:7B:F1:FF:99:D1:1B:0C:8C:71:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cad66d8-4442-3927-b985-bb62192f176d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:3a:72:1d:34:8c:bd:c5:b2:1e:d3:8c:69:a0:62:14:89:93: 6a:d3:9a:fb:25:47:dc:8a:c8:ce:8c:94:44:4d:b7:ba:c5:52: 39:cf:aa:50:1e:7a:4a:5f:d7:8c:3a:e8:c0:eb:a4:93:ff:9a: 07:ba:4e:88:42:a6:86:b1:ca:39:9d:a0:8f:82:3d:e8:d4:69: 8d:d3:9e:b0:13:bc:67:ae:39:c5:21:55:df:f4:46:38:e6:b3: d5:99:94:7a:72:85:07:97:48:be:44:ab:1c:1c:68:6d:51:60: 4c:15:56:46:10:cc:28:1b:b3:d4:2f:63:0d:e5:9f:9b:13:62: 82:93:7c:a9:34:3e:e9:cd:38:6a:c7:91:81:5d:5e:2e:61:9a: 98:12:49:53:ac:50:6d:fe:70:b6:27:53:9e:77:9c:80:ed:33: 04:3e:f5:e3:11:3f:61:34:ca:8d:26:53:ac:0f:9e:a5:8d:bd: c6:a5:cd:2f:72:d7:14:96:62:7b:c5:4a:32:d8:c3:15:51:9e: 39:6c:69:46:fe:5c:f0:d7:7b:3e:28:c1:d0:3b:26:1d:97:5d: bc:d3:62:da:da:de:f9:57:92:18:67:96:cd:d2:cd:5e:aa:fe: 9d:43:12:c6:65:af:45:a2:c0:9f:9b:f0:86:84:90:8d:47:10: df:3f:5b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6FBh9vYrA3XrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YWFhYmI5OTctZDgwMy00NzZlLTkwM2UtYzA2MmIxZjQyNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRZV5v10Lp1HM1wcLZlkGQ4R2rPAxfQW59s4 6fww3/i+ijo50dD0ZMGzMhaQpWwBsNOyJ8bYugImZnGheOdy3x+1xCW6NRs4GU9w Pefp44y1c4SzTYQLatmzgjVuj0X2K+E9JvU3+TJhdRKWJVlpNLzVBAjsHRUzIivL B4B8QCyyVvdtCwl6ZRDYD3Eof4E23qj7+mMRWzJlNYSUjVskdAWQh3F1+rzdgJwR XTAV2fe74k0ZuSVQRHVkBbu0dj85MV1qpt5cpqoLQ8g1xc/Sb8LlM7oUka3RMWl4 IdTJfMQZfTt1t5fCg+/viAgjjUWyRs7LdfNOnR7ba14r7xdJ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMLlVDVzKldq1t78f+Z0RsMjHG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWNhZDY2ZDgtNDQ0Mi0z OTI3LWI5ODUtYmI2MjE5MmYxNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM6ch00jL3Fsh7TjGmgYhSJk2rTmvslR9yKyM6MlERNt7rFUjnPqlAe ekpf14w66MDrpJP/mge6TohCpoaxyjmdoI+CPejUaY3TnrATvGeuOcUhVd/0Rjjm s9WZlHpyhQeXSL5EqxwcaG1RYEwVVkYQzCgbs9QvYw3ln5sTYoKTfKk0PunNOGrH kYFdXi5hmpgSSVOsUG3+cLYnU553nIDtMwQ+9eMRP2E0yo0mU6wPnqWNvcalzS9y 1xSWYnvFSjLYwxVRnjlsaUb+XPDXez4owdA7Jh2XXbzTYtra3vlXkhhnls3SzV6q /p1DEsZlr0WiwJ+b8IaEkI1HEN8/W1I= -----END CERTIFICATE-----Generated at Sat Aug 23 18:18:23 2025 by rpki-client