$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60eeb3fc-9a16-3e18-80fc-9ef633bc08db.roa File: 60eeb3fc-9a16-3e18-80fc-9ef633bc08db.roa (raw, json) Hash identifier: Qx7qPpmroUVV1Q+XXlkrfGj7ddlrlqkgcl9y/NVfYrw= Subject key identifier: 3E:04:0E:AE:4E:7C:B7:91:E5:1C:D7:5E:A4:9B:AD:92:F9:0B:85:B7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AE89145DBBD3F24BC04A461B0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60eeb3fc-9a16-3e18-80fc-9ef633bc08db.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 395747 IP address blocks: 172.68.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:45:db:bd:3f:24:bc:04:a4:61:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=e75d95d4-5f5e-4bd9-94b6-d875d3c265b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:d6:a2:8f:08:d1:53:45:9e:79:39:1d:37: 31:a1:89:92:a9:c2:fe:fc:86:a6:f6:9c:62:62:82: 7f:3b:18:d9:92:73:4a:73:01:2d:1a:f8:ec:34:93: 76:9d:a0:63:5f:14:14:da:3d:87:a7:5b:39:20:85: 21:cc:ab:4d:7a:e7:2c:dd:64:a8:fc:58:66:96:d5: bd:63:d7:b8:eb:ea:c4:7c:2c:a8:37:a9:45:f6:87: 36:66:15:5c:b9:f8:29:6b:43:6d:40:35:40:44:5b: 04:f6:a4:b2:82:fc:df:de:ed:ee:79:b6:64:2f:09: 73:82:9f:81:70:ab:83:9a:7d:73:82:a0:db:bd:21: 93:d5:eb:da:2d:c1:67:2a:57:7e:ca:99:0a:ca:c4: d7:44:99:59:c8:d0:f9:6f:9f:e5:15:11:58:bb:70: c9:b1:e2:7c:24:78:1a:f0:29:c2:e6:b8:8a:01:c1: 67:25:44:b6:b5:74:08:64:d4:67:f1:d8:ad:20:0b: 58:ba:fc:9e:5c:aa:f5:df:6a:91:60:f9:bc:c2:63: 5f:6d:e6:1c:9b:01:57:9c:4b:e5:24:7b:a8:4e:1a: e4:3c:43:3c:6c:40:26:f5:55:8a:2a:07:1d:b4:2c: eb:3f:f7:ab:94:a9:40:aa:8a:aa:ba:9f:19:b1:40: f0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:04:0E:AE:4E:7C:B7:91:E5:1C:D7:5E:A4:9B:AD:92:F9:0B:85:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60eeb3fc-9a16-3e18-80fc-9ef633bc08db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:aa:c2:06:b3:4e:92:6c:ce:37:65:e7:3a:0b:c8:d7:02:3f: 33:c9:b9:d5:2e:cf:a4:99:18:3f:df:fc:d5:6a:b8:41:1e:77: d3:63:3a:da:f8:f5:e2:d3:c4:d8:2f:e2:c8:c5:d7:8a:79:94: 17:38:4d:7c:dd:b1:c6:1c:e2:8d:2e:e2:57:ee:fa:10:f1:ed: 24:00:eb:3b:17:42:cc:cf:f0:a8:47:1a:3c:ce:cf:16:67:01: 60:ef:9c:cd:54:7e:50:48:6f:c4:71:f7:d9:c4:e8:a8:f2:99: 89:04:df:b0:67:3c:77:be:de:f8:96:7a:f3:a7:12:9b:a5:d7: fc:52:86:ee:90:c6:04:56:31:1b:4b:95:c0:2a:2a:40:3c:68: 6d:73:7b:11:e0:d8:98:07:f6:47:47:37:63:1d:d6:bf:b4:3d: 79:40:42:54:23:b0:bb:b2:a5:a3:d7:91:ac:b3:1e:48:eb:83: 7e:63:d9:0c:2b:0d:53:e6:d0:9d:af:3b:88:40:d8:66:87:75: bd:43:88:50:f5:da:78:66:28:a6:05:a9:bc:1b:d0:ea:08:ce: 3c:12:22:51:f1:cd:fd:75:19:c7:4f:6f:6b:01:28:70:9c:8b: b9:a5:fc:18:41:23:8e:28:4b:1b:71:d9:cb:55:55:4a:18:22: 60:07:c9:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokUXbvT8kvASkYbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZTc1ZDk1ZDQtNWY1ZS00YmQ5LTk0YjYtZDg3NWQzYzI2NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfnWoo8I0VNFnnk5HTcxoYmSqcL+/Iam9pxi YoJ/OxjZknNKcwEtGvjsNJN2naBjXxQU2j2Hp1s5IIUhzKtNeucs3WSo/FhmltW9 Y9e46+rEfCyoN6lF9oc2ZhVcufgpa0NtQDVARFsE9qSygvzf3u3uebZkLwlzgp+B cKuDmn1zgqDbvSGT1evaLcFnKld+ypkKysTXRJlZyND5b5/lFRFYu3DJseJ8JHga 8CnC5riKAcFnJUS2tXQIZNRn8ditIAtYuvyeXKr132qRYPm8wmNfbeYcmwFXnEvl JHuoThrkPEM8bEAm9VWKKgcdtCzrP/erlKlAqoqqup8ZsUDwDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4EDq5OfLeR5RzXXqSbrZL5C4W3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjBlZWIzZmMtOWExNi0z ZTE4LTgwZmMtOWVmNjMzYmMwOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGqwgazTpJszjdl5zoLyNcCPzPJudUuz6SZGD/f/NVquEEed9NjOtr4 9eLTxNgv4sjF14p5lBc4TXzdscYc4o0u4lfu+hDx7SQA6zsXQszP8KhHGjzOzxZn AWDvnM1UflBIb8Rx99nE6KjymYkE37BnPHe+3viWevOnEpul1/xShu6QxgRWMRtL lcAqKkA8aG1zexHg2JgH9kdHN2Md1r+0PXlAQlQjsLuypaPXkayzHkjrg35j2Qwr DVPm0J2vO4hA2GaHdb1DiFD12nhmKKYFqbwb0OoIzjwSIlHxzf11GcdPb2sBKHCc i7ml/BhBI44oSxtx2ctVVUoYImAHyW4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:13 2025 by rpki-client