$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f42991f-fab2-3c78-a1fb-48360c1afa2e.roa File: 5f42991f-fab2-3c78-a1fb-48360c1afa2e.roa (raw, json) Hash identifier: i2hwp/Fwx5aaIIC4LhOC2kq6r8+RPCNL1U7XBIuG1SE= Subject key identifier: 53:53:72:9A:DE:CE:81:6D:21:0B:00:37:38:0B:24:4D:4F:AC:A1:29 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766B1EA9FF388AAD003180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f42991f-fab2-3c78-a1fb-48360c1afa2e.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:6b:1e:a9:ff:38:8a:ad:00:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=1cc3758a-7273-40b7-8fa5-69ac7c08a66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4c:c4:ce:c3:5e:cb:a1:5a:3b:fa:c8:ab:9b: 7d:58:40:87:88:18:fe:1e:15:e6:63:27:a4:df:17: b3:c0:78:8f:8f:97:57:f5:e4:92:e2:47:e3:21:1d: eb:07:78:e3:f5:ad:85:67:3f:b2:b7:ba:c4:88:3b: 31:85:ab:41:00:7d:1f:2a:52:4e:06:03:36:d7:ef: 0e:a3:34:cc:f0:08:5a:0b:0d:54:1b:16:b6:f4:69: 12:1d:3a:a3:3d:a0:be:c1:e1:55:32:6e:d8:ef:d5: 1a:f3:13:a3:c4:ca:e4:58:8a:0b:19:ca:89:60:08: 81:c6:46:15:a3:6d:97:fa:9d:f6:23:0b:e3:1d:07: 63:b6:51:bc:c1:dc:14:ef:b7:5e:ab:c0:1d:e8:c5: 93:87:d4:91:19:4c:9e:ce:94:45:27:a9:a1:f8:30: db:e6:91:ac:13:77:8f:79:1d:a3:3e:8f:d6:05:73: a0:1e:6d:dc:59:62:d6:eb:04:3d:6c:b0:cf:a1:a3: 22:e1:f0:3d:4b:cb:94:f6:58:e0:6f:d8:7f:c0:03: b3:29:1b:d7:a5:4e:15:4c:cc:66:6d:e0:81:22:f9: 76:2e:17:70:6a:1d:58:7f:00:65:f4:d6:aa:27:82: 6e:35:86:f1:09:a9:4d:2d:24:bb:4b:e0:60:21:39: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:72:9A:DE:CE:81:6D:21:0B:00:37:38:0B:24:4D:4F:AC:A1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f42991f-fab2-3c78-a1fb-48360c1afa2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c0:db:cf:c9:13:b4:07:a9:a2:72:67:5a:3a:40:e1:45:fa: a3:dd:db:eb:7b:4e:55:32:b8:9f:bd:99:b3:0b:32:42:bd:de: cd:05:86:b6:bb:4d:b2:35:0d:be:92:1d:22:9d:a0:93:80:b3: 18:fb:fa:2e:78:62:5d:34:44:6e:f7:86:0f:8f:a5:9d:7c:b6: 6b:ea:a4:0f:e0:ed:81:d7:f9:5b:e3:e4:3f:9c:27:f1:8b:07: c9:c4:43:5d:cc:e1:24:a9:fe:22:47:dd:65:5d:ec:7e:cb:53: ce:53:55:2c:b9:eb:c0:f7:45:48:89:79:0f:cb:78:d6:0e:f8: d7:80:97:50:4b:b1:6e:05:c6:35:eb:9a:35:cd:b6:85:4a:26: 35:df:ee:39:59:7a:8f:5e:6a:81:92:3a:73:27:9b:84:4c:45: af:98:9d:5e:38:24:27:64:f8:30:58:04:f8:2c:5c:0b:60:d2: db:d6:31:09:fb:17:b4:b0:2c:6e:64:c4:86:01:f1:0a:70:c8: d2:c8:77:c5:c2:1f:9f:0b:5a:d7:a6:80:be:17:25:73:9b:ce: e4:01:6e:db:28:46:12:4a:a2:92:64:ff:82:a7:96:d9:ea:1f: a7:8c:0d:70:97:cd:40:b0:df:96:df:25:71:db:0b:29:37:3c: eb:cd:51:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmseqf84iq0AMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MWNjMzc1OGEtNzI3My00MGI3LThmYTUtNjlhYzdjMDhhNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EzEzsNey6FaO/rIq5t9WECHiBj+HhXmYyek 3xezwHiPj5dX9eSS4kfjIR3rB3jj9a2FZz+yt7rEiDsxhatBAH0fKlJOBgM21+8O ozTM8AhaCw1UGxa29GkSHTqjPaC+weFVMm7Y79Ua8xOjxMrkWIoLGcqJYAiBxkYV o22X+p32IwvjHQdjtlG8wdwU77deq8Ad6MWTh9SRGUyezpRFJ6mh+DDb5pGsE3eP eR2jPo/WBXOgHm3cWWLW6wQ9bLDPoaMi4fA9S8uU9ljgb9h/wAOzKRvXpU4VTMxm beCBIvl2Lhdwah1YfwBl9NaqJ4JuNYbxCalNLSS7S+BgITklCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNTcprezoFtIQsANzgLJE1PrKEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWY0Mjk5MWYtZmFiMi0z Yzc4LWExZmItNDgzNjBjMWFmYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDA28/JE7QHqaJyZ1o6QOFF+qPd2+t7TlUyuJ+9mbMLMkK93s0Fhra7 TbI1Db6SHSKdoJOAsxj7+i54Yl00RG73hg+PpZ18tmvqpA/g7YHX+Vvj5D+cJ/GL B8nEQ13M4SSp/iJH3WVd7H7LU85TVSy568D3RUiJeQ/LeNYO+NeAl1BLsW4FxjXr mjXNtoVKJjXf7jlZeo9eaoGSOnMnm4RMRa+YnV44JCdk+DBYBPgsXAtg0tvWMQn7 F7SwLG5kxIYB8QpwyNLId8XCH58LWtemgL4XJXObzuQBbtsoRhJKopJk/4Knltnq H6eMDXCXzUCw35bfJXHbCyk3POvNUfY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:10 2025 by rpki-client