$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa File: 8e39d174-0132-38c7-8666-3ddfd10c3f12.roa (raw, json) Hash identifier: zeC6DIXjyLR6+XbSg/7IPUqVBrVfM/oWElPmip9y0xw= Subject key identifier: 9E:47:07:3F:E1:2E:40:CC:54:03:A4:C9:13:03:5A:0F:46:E9:12:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC9DBADAB61A7BA68B4F84BC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.68.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:ad:ab:61:a7:ba:68:b4:f8:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=ae0d7869-d4c3-4141-b13b-4ca6c740e30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:9f:72:82:8e:bf:1f:39:4a:45:d5:1d:97: 83:d9:32:e8:52:7b:9b:83:d9:58:46:5a:6c:09:0e: 93:c4:62:1b:58:72:5a:f9:b7:2c:ef:52:86:78:84: 80:51:2e:0d:d0:e1:6f:01:8e:2b:f4:b7:bd:97:51: cc:7c:0b:b7:ba:b4:2f:3a:62:a8:a5:18:2b:4a:29: bd:35:a6:ac:14:2f:bf:8a:c5:31:63:7c:b3:2a:2d: 27:ab:2f:17:a6:31:0a:13:d4:57:30:e4:15:ca:2a: 87:52:71:51:3a:ab:ea:45:bc:28:c2:64:98:de:7e: cb:b1:c4:9a:ff:f5:54:94:15:f6:1c:fd:98:0b:6a: 2c:28:2f:34:30:4c:55:9f:09:b2:bc:01:9c:ee:f9: cf:37:bc:76:9c:e9:67:ce:fd:1d:f8:ff:2c:c9:17: bb:f5:e4:01:e5:f7:da:7d:95:42:68:5a:d9:26:50: 33:b9:f1:40:69:dc:32:bc:90:bf:2f:f4:b4:e4:46: bf:59:e4:dc:3b:42:e1:c2:de:7c:dc:5e:91:8c:21: 56:7f:f4:8b:9f:93:66:c6:24:05:99:44:0e:43:a1: b5:99:7b:13:73:fd:9c:26:39:43:0c:77:29:86:21: 85:d3:11:a2:d3:3f:0f:f1:a6:4a:a8:47:ad:aa:b1: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:47:07:3F:E1:2E:40:CC:54:03:A4:C9:13:03:5A:0F:46:E9:12:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c7:89:44:06:1d:fb:fb:17:18:77:30:02:65:ef:27:7f:72: 5d:dc:c9:11:6b:cd:9d:84:27:ef:1a:b0:bf:42:68:68:5e:6c: 0b:46:3c:f3:fc:3d:c4:0e:a1:9a:e5:36:40:74:21:c6:fa:5a: f2:fe:ad:26:55:37:09:2c:f9:bc:54:5f:21:84:15:c6:45:62: 62:f9:78:28:3c:b6:a9:51:0e:88:03:46:a7:ae:be:11:1c:e7: ab:04:7b:42:f0:f7:db:79:bf:40:3f:85:01:b9:70:50:5d:5d: a4:be:2c:cd:67:fc:45:94:a2:b2:39:22:78:1c:3f:27:09:b2: 1f:ff:1b:e5:85:ea:9c:9e:8b:6f:09:e5:c7:85:12:b9:98:e2: 5a:2b:f9:c4:1d:e2:f7:f7:14:f7:ee:25:8c:59:c7:38:9d:6f: 1b:43:f9:34:77:64:24:ff:40:97:88:4d:ae:31:8e:98:26:3b: a6:77:8a:4c:9a:b2:e7:f6:6b:0f:3b:f0:aa:f4:b5:35:b1:24: e5:f9:41:d8:38:75:d5:0c:cd:95:5a:52:58:0d:17:d3:2c:25: eb:cc:80:0f:3f:e4:1c:b3:21:0e:f0:bc:1a:a1:e0:19:4d:fd: 78:22:20:43:56:83:01:dc:59:57:7f:d3:63:7c:e5:9b:4a:92: ce:88:2a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ262rYae6aLT4S8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YWUwZDc4NjktZDRjMy00MTQxLWIxM2ItNGNhNmM3NDBlMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGCfcoKOvx85SkXVHZeD2TLoUnubg9lYRlps CQ6TxGIbWHJa+bcs71KGeISAUS4N0OFvAY4r9Le9l1HMfAu3urQvOmKopRgrSim9 NaasFC+/isUxY3yzKi0nqy8XpjEKE9RXMOQVyiqHUnFROqvqRbwowmSY3n7LscSa //VUlBX2HP2YC2osKC80MExVnwmyvAGc7vnPN7x2nOlnzv0d+P8syRe79eQB5ffa fZVCaFrZJlAzufFAadwyvJC/L/S05Ea/WeTcO0Lhwt583F6RjCFWf/SLn5NmxiQF mUQOQ6G1mXsTc/2cJjlDDHcphiGF0xGi0z8P8aZKqEetqrFTZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5HBz/hLkDMVAOkyRMDWg9G6RIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGUzOWQxNzQtMDEzMi0z OGM3LTg2NjYtM2RkZmQxMGMzZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzHiUQGHfv7Fxh3MAJl7yd/cl3cyRFrzZ2EJ+8asL9CaGhebAtGPPP8 PcQOoZrlNkB0Icb6WvL+rSZVNwks+bxUXyGEFcZFYmL5eCg8tqlRDogDRqeuvhEc 56sEe0Lw99t5v0A/hQG5cFBdXaS+LM1n/EWUorI5IngcPycJsh//G+WF6pyei28J 5ceFErmY4lor+cQd4vf3FPfuJYxZxzidbxtD+TR3ZCT/QJeITa4xjpgmO6Z3ikya suf2aw878Kr0tTWxJOX5Qdg4ddUMzZVaUlgNF9MsJevMgA8/5ByzIQ7wvBqh4BlN /XgiIENWgwHcWVd/02N85ZtKks6IKp0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:26 2025 by rpki-client