$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d5f6b2d-3745-3a8b-bdc6-f4c39b7d9ee1.roa File: 6d5f6b2d-3745-3a8b-bdc6-f4c39b7d9ee1.roa (raw, json) Hash identifier: BRQAGhc6g9zGM5aasv2fL4fQlvmObTI6H3zw/7S4VUg= Subject key identifier: 67:2E:42:82:A0:40:5A:A9:F5:97:83:75:83:65:D4:9C:DE:A9:7B:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC87669B9686A1D80A911F480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d5f6b2d-3745-3a8b-bdc6-f4c39b7d9ee1.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:69:b9:68:6a:1d:80:a9:11:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=f6abf399-1528-4cfa-9893-7b3fb6e1b97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:25:f0:a9:49:44:bb:36:31:52:44:07:85:fc: e8:18:6a:fd:66:3c:46:b0:a3:cf:b2:5f:63:88:dd: 41:f5:68:ac:b6:b4:b2:31:8d:3e:ad:62:3e:3a:5c: 53:40:3a:cc:a6:ae:85:d9:de:30:27:35:55:b6:02: d9:db:fa:8c:f5:63:99:da:96:81:35:90:6b:24:65: b9:d4:5f:f9:02:46:d9:6d:80:f7:97:33:0f:29:ef: 90:74:64:84:69:97:42:c7:6b:3f:0d:d5:5b:1a:af: 51:ff:98:5d:7a:12:89:39:03:a2:0b:7f:10:d7:90: 77:0c:bc:eb:87:09:56:62:95:23:d9:a8:fb:8f:fe: 74:cb:8f:21:12:9e:56:ce:99:fa:4c:bc:a3:68:26: 58:04:f8:29:40:59:02:ba:d0:e7:de:1a:63:e7:a0: c2:59:ef:9c:21:55:b1:c4:ee:87:dc:f3:21:c6:de: ab:29:e1:a6:2c:4c:fa:e3:09:c9:d7:04:d9:37:b3: b4:f5:fb:4d:c9:16:0d:6f:5d:7f:d1:e0:d7:7a:af: af:f6:0f:f8:1c:dc:f2:c5:1d:d2:f3:ee:d2:8b:0d: c4:3f:00:23:11:a0:2b:c3:95:09:36:e2:98:6f:f3: e8:76:c9:3f:76:1a:a8:cf:09:57:aa:4a:28:bc:09: 16:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:42:82:A0:40:5A:A9:F5:97:83:75:83:65:D4:9C:DE:A9:7B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d5f6b2d-3745-3a8b-bdc6-f4c39b7d9ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:92:08:55:be:74:1a:e3:3f:61:1c:42:c3:a6:b9:9a:9e:a8: c8:87:39:50:0c:6b:db:c5:46:bc:49:c4:f6:82:26:3a:04:9f: 3d:94:83:04:f6:5a:aa:48:d3:27:8a:b4:76:dd:9f:78:79:ea: f5:12:ef:80:e8:11:9f:31:1b:fb:34:b8:54:1e:fc:46:be:65: 63:cc:16:3b:36:56:f6:4b:24:83:cf:6e:1f:1e:ee:cc:a0:91: 7a:ba:e8:4b:d2:68:34:a5:84:4c:07:48:d5:aa:c9:63:a3:fc: 45:8f:8d:75:b9:55:00:fc:ff:84:08:92:ac:b0:5d:fa:df:50: a2:8a:92:64:a2:08:36:0c:13:bc:01:3e:f4:e6:81:7f:75:b3: cd:9c:7c:93:98:55:c2:00:36:fa:87:8d:36:34:16:67:9a:99: 21:3a:3d:de:53:1e:bc:d4:a5:40:4d:d9:5b:b9:a4:f1:55:97: 05:22:47:33:45:dd:99:93:3a:72:55:10:15:05:90:5f:14:4b: 77:9a:74:77:0e:26:45:d0:75:12:4e:c4:96:af:49:fb:4f:ea: 50:88:4c:a9:5c:40:9f:0c:7a:6e:31:ff:63:6b:36:7e:c8:de: 98:d9:ef:1e:1e:df:3a:49:ad:7f:bf:ac:90:77:d3:3f:94:3d: 7b:05:49:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmm5aGodgKkR9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjZhYmYzOTktMTUyOC00Y2ZhLTk4OTMtN2IzZmI2ZTFiOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCXwqUlEuzYxUkQHhfzoGGr9ZjxGsKPPsl9j iN1B9WistrSyMY0+rWI+OlxTQDrMpq6F2d4wJzVVtgLZ2/qM9WOZ2paBNZBrJGW5 1F/5AkbZbYD3lzMPKe+QdGSEaZdCx2s/DdVbGq9R/5hdehKJOQOiC38Q15B3DLzr hwlWYpUj2aj7j/50y48hEp5Wzpn6TLyjaCZYBPgpQFkCutDn3hpj56DCWe+cIVWx xO6H3PMhxt6rKeGmLEz64wnJ1wTZN7O09ftNyRYNb11/0eDXeq+v9g/4HNzyxR3S 8+7Siw3EPwAjEaArw5UJNuKYb/Podsk/dhqozwlXqkoovAkW/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcuQoKgQFqp9ZeDdYNl1JzeqXulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmQ1ZjZiMmQtMzc0NS0z YThiLWJkYzYtZjRjMzliN2Q5ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2SCFW+dBrjP2EcQsOmuZqeqMiHOVAMa9vFRrxJxPaCJjoEnz2UgwT2 WqpI0yeKtHbdn3h56vUS74DoEZ8xG/s0uFQe/Ea+ZWPMFjs2VvZLJIPPbh8e7syg kXq66EvSaDSlhEwHSNWqyWOj/EWPjXW5VQD8/4QIkqywXfrfUKKKkmSiCDYME7wB PvTmgX91s82cfJOYVcIANvqHjTY0FmeamSE6Pd5THrzUpUBN2Vu5pPFVlwUiRzNF 3ZmTOnJVEBUFkF8US3eadHcOJkXQdRJOxJavSftP6lCITKlcQJ8Mem4x/2NrNn7I 3pjZ7x4e3zpJrX+/rJB30z+UPXsFSRQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:00:28 2025 by rpki-client