$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa File: 9321b008-0f22-3d80-8c12-c151456cd1da.roa (raw, json) Hash identifier: ymEXdAOJhCYqw/ToKsDWgn8GkCdQnj8hhTOFF3ILbpI= Subject key identifier: E4:ED:3C:1C:5F:81:BE:63:15:3F:64:31:9E:65:4C:29:E8:FE:CE:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB40FE87A36849FD8F43BA40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:fe:87:a3:68:49:fd:8f:43:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=37dba072-6a3f-4276-a9a4-a16cec01e348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:03:e0:b0:50:11:e5:5f:2c:12:3f:4e:0e: e5:68:cc:3b:cd:8d:f5:d6:47:01:b0:50:64:3d:9b: 72:a9:84:51:6e:08:27:11:b0:bd:ea:99:91:59:c2: d8:97:49:99:09:fa:6a:c1:fa:aa:aa:71:32:2a:c0: 8e:a5:74:4d:55:a3:84:f9:fe:73:25:d0:bd:69:54: a1:7d:a6:85:b5:09:ed:ae:68:bc:3e:32:ce:cd:a3: 5d:db:38:38:1e:58:8f:e9:92:92:1b:fa:4b:b3:bc: b7:8a:39:52:0e:70:f3:58:92:38:3c:e1:1e:ad:73: fa:76:b9:63:4a:01:c8:6a:d3:02:94:e8:85:8c:a3: 0c:ee:5a:8b:e1:bc:b3:a7:fe:7d:1f:b5:d1:16:70: 5a:eb:d4:bd:ce:6d:bc:5d:f4:fe:f0:e6:fb:f2:ca: 25:9f:53:02:31:65:82:ae:d3:16:78:01:d9:65:f7: 6b:be:4e:c1:1a:44:53:21:4a:97:ba:02:cd:8a:81: 3d:b3:0b:72:11:98:6d:ed:9c:2e:ef:76:47:4d:a1: c3:61:36:44:df:7c:9b:e9:eb:ba:c9:b8:f3:1e:1f: c4:ef:01:36:b6:e7:f0:11:f4:3a:90:30:1a:4a:aa: 9f:df:07:d7:54:9d:09:84:00:9d:02:8c:f6:f1:94: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:ED:3C:1C:5F:81:BE:63:15:3F:64:31:9E:65:4C:29:E8:FE:CE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6f:91:3c:b5:81:3a:7b:ed:7d:d7:e7:d5:5c:49:4c:0c:c0: c0:0b:fb:4a:73:fd:57:7d:a9:e1:7b:1d:16:37:f1:04:93:98: 39:04:a4:99:f3:85:11:8b:95:3f:98:58:07:f5:97:71:d5:d6: 6e:c3:2c:63:7c:74:6c:30:d8:e1:4e:6a:76:d3:6a:67:71:f1: 7f:dd:40:86:7f:56:6d:2a:6d:09:39:04:17:a5:e6:f4:ed:ca: b3:e0:ef:d3:f3:39:4f:93:39:f4:c3:30:f9:f0:0e:67:9b:9e: 0c:50:c9:45:8d:a5:20:6e:b8:5a:0d:a2:db:29:5b:a9:1e:54: 6d:19:af:f1:f1:dc:29:dd:47:e2:7f:7a:30:1d:92:98:f0:80: 56:d3:0d:42:3d:f4:2a:f3:e5:af:d0:34:23:74:84:27:ba:34: d7:29:b9:c0:e3:de:16:45:a2:f2:1f:79:a6:df:79:dc:cf:b6: e5:ea:6e:11:85:ce:51:94:51:52:f1:43:3d:0d:ee:0d:cb:b5: 47:e1:02:58:24:af:24:7b:f3:3f:09:ab:8c:ca:56:f8:b9:d4: a5:5f:06:93:71:61:99:50:ae:dd:a8:aa:9e:7f:0f:70:61:eb: ea:50:64:d7:f0:ed:18:d6:71:19:24:86:bb:f5:5e:6d:4e:39: ce:e4:05:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQP6Ho2hJ/Y9DukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzdkYmEwNzItNmEzZi00Mjc2LWE5YTQtYTE2Y2VjMDFlMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/ED4LBQEeVfLBI/Tg7laMw7zY311kcBsFBk PZtyqYRRbggnEbC96pmRWcLYl0mZCfpqwfqqqnEyKsCOpXRNVaOE+f5zJdC9aVSh faaFtQntrmi8PjLOzaNd2zg4HliP6ZKSG/pLs7y3ijlSDnDzWJI4POEerXP6drlj SgHIatMClOiFjKMM7lqL4byzp/59H7XRFnBa69S9zm28XfT+8Ob78soln1MCMWWC rtMWeAHZZfdrvk7BGkRTIUqXugLNioE9swtyEZht7Zwu73ZHTaHDYTZE33yb6eu6 ybjzHh/E7wE2tufwEfQ6kDAaSqqf3wfXVJ0JhACdAoz28ZTrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTtPBxfgb5jFT9kMZ5lTCno/s4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTMyMWIwMDgtMGYyMi0z ZDgwLThjMTItYzE1MTQ1NmNkMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZvkTy1gTp77X3X59VcSUwMwMAL+0pz/Vd9qeF7HRY38QSTmDkEpJnz hRGLlT+YWAf1l3HV1m7DLGN8dGww2OFOanbTamdx8X/dQIZ/Vm0qbQk5BBel5vTt yrPg79PzOU+TOfTDMPnwDmebngxQyUWNpSBuuFoNotspW6keVG0Zr/Hx3CndR+J/ ejAdkpjwgFbTDUI99Crz5a/QNCN0hCe6NNcpucDj3hZFovIfeabfedzPtuXqbhGF zlGUUVLxQz0N7g3LtUfhAlgkryR78z8Jq4zKVvi51KVfBpNxYZlQrt2oqp5/D3Bh 6+pQZNfw7RjWcRkkhrv1Xm1OOc7kBZo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:18:39 2025 by rpki-client