$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/933fe89f-149f-3b12-aa04-c6bc82dc43cc.roa File: 933fe89f-149f-3b12-aa04-c6bc82dc43cc.roa (raw, json) Hash identifier: U17S5qZNzemDedkNWjGpDBvM6oeZwysuS/d0z5MGJsQ= Subject key identifier: F7:45:02:75:B0:91:94:FB:DD:76:4E:72:E5:34:6D:CA:B8:29:3F:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AEF8BC4618A463DA71E1A0580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/933fe89f-149f-3b12-aa04-c6bc82dc43cc.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c4:61:8a:46:3d:a7:1e:1a:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=b3b14743-42e7-4ecf-90df-c0031711a492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:da:d1:eb:3c:a9:3e:66:fe:81:87:5d:66:58: ee:89:e3:51:dd:50:ee:7a:6f:21:6e:ed:ee:12:57: 30:e6:c1:6b:5e:f8:fa:8b:da:4a:a5:f6:10:76:df: c1:92:cd:ab:a3:d4:fd:cf:e3:19:15:89:68:b9:40: c7:61:bb:41:66:df:0b:83:fe:a6:fa:8a:3e:17:19: ce:8d:9b:ef:9e:ff:0d:a2:bb:fc:2e:bc:e4:51:9f: 06:ea:3b:83:73:77:11:eb:02:d2:25:28:56:86:5c: 24:77:f2:cf:07:a8:87:de:df:e4:af:26:dc:bf:0f: 6a:e9:b3:a4:bd:40:d4:ff:04:28:4e:62:3d:1a:1e: 0c:fb:b7:5f:ca:a0:88:40:46:e5:a2:e9:4c:89:4d: d9:8d:53:2f:1c:68:b9:2b:3c:bd:93:9f:92:4c:42: 2d:99:30:fa:4a:e4:4c:11:35:35:65:a9:8e:61:00: ff:63:66:14:b6:5f:0f:25:8a:4a:68:18:b7:5a:14: 44:ad:2f:78:02:57:61:22:c5:e0:62:6b:72:de:c8: 05:45:94:fe:ec:ab:7d:9f:8b:93:fa:d5:25:e6:f3: d4:e9:40:23:ad:2b:d5:bc:32:9b:a5:74:9a:19:46: cb:d5:c5:45:65:ea:b3:90:db:65:d9:1f:f2:91:67: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:45:02:75:B0:91:94:FB:DD:76:4E:72:E5:34:6D:CA:B8:29:3F:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/933fe89f-149f-3b12-aa04-c6bc82dc43cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b6:fd:66:84:c6:dd:fb:4d:c6:f8:31:40:78:d3:e2:ff:04: a5:ea:67:c9:cc:b8:8c:18:1f:0a:0b:c5:54:b9:70:c6:c8:5a: cc:77:a9:f7:12:11:d6:14:84:5e:98:cd:6c:95:22:69:bb:44: f9:67:9f:45:cd:11:b5:b7:8d:94:08:7b:fa:e2:d2:79:a4:aa: 91:b0:6a:e7:e6:13:0b:cd:2f:b7:6c:a5:b3:cc:e1:c3:2b:cf: 59:b0:b4:33:6f:2a:11:21:30:b1:9e:63:f2:26:8a:e2:f9:fa: 96:ee:81:d4:23:4b:fd:de:6e:83:1f:69:a4:3e:88:85:6b:09: e5:fa:9f:b0:63:f4:c9:76:47:4d:5a:3d:72:2a:02:32:19:7e: 38:8f:a5:25:6d:1b:d3:26:22:0b:6f:a6:47:67:a3:32:4c:a7: 7d:2c:b6:ff:25:c9:b0:05:37:41:77:82:cd:1d:3e:e0:2a:eb: 04:c4:0a:88:1a:68:7f:76:81:2e:a2:64:e4:c1:34:8b:56:3d: a5:c9:60:7e:83:4b:24:ba:d2:ac:48:24:26:4a:c2:3b:ca:2d: 21:ca:0e:83:62:e2:c0:bf:fc:17:72:36:11:0d:f6:db:f8:64: 03:5f:99:9f:b4:8b:46:2a:5d:9a:94:1a:a3:eb:69:62:0e:3b: a8:36:2d:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8RhikY9px4aBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk YjNiMTQ3NDMtNDJlNy00ZWNmLTkwZGYtYzAwMzE3MTFhNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidrR6zypPmb+gYddZljuieNR3VDuem8hbu3u Elcw5sFrXvj6i9pKpfYQdt/Bks2ro9T9z+MZFYlouUDHYbtBZt8Lg/6m+oo+FxnO jZvvnv8Norv8LrzkUZ8G6juDc3cR6wLSJShWhlwkd/LPB6iH3t/krybcvw9q6bOk vUDU/wQoTmI9Gh4M+7dfyqCIQEbloulMiU3ZjVMvHGi5Kzy9k5+STEItmTD6SuRM ETU1ZamOYQD/Y2YUtl8PJYpKaBi3WhRErS94AldhIsXgYmty3sgFRZT+7Kt9n4uT +tUl5vPU6UAjrSvVvDKbpXSaGUbL1cVFZeqzkNtl2R/ykWdHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdFAnWwkZT73XZOcuU0bcq4KT8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTMzZmU4OWYtMTQ5Zi0z YjEyLWFhMDQtYzZiYzgyZGM0M2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm2/WaExt37Tcb4MUB40+L/BKXqZ8nMuIwYHwoLxVS5cMbIWsx3qfcS EdYUhF6YzWyVImm7RPlnn0XNEbW3jZQIe/ri0nmkqpGwaufmEwvNL7dspbPM4cMr z1mwtDNvKhEhMLGeY/ImiuL5+pbugdQjS/3eboMfaaQ+iIVrCeX6n7Bj9Ml2R01a PXIqAjIZfjiPpSVtG9MmIgtvpkdnozJMp30stv8lybAFN0F3gs0dPuAq6wTECoga aH92gS6iZOTBNItWPaXJYH6DSyS60qxIJCZKwjvKLSHKDoNi4sC//BdyNhEN9tv4 ZANfmZ+0i0YqXZqUGqPraWIOO6g2LVI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:34 2025 by rpki-client