$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa File: 9881220c-9ede-3293-a734-f3010f86829e.roa (raw, json) Hash identifier: KFiI/axrzmcBFWLGZvgx4ZQIyu9jYL/xzvjWj5pR08A= Subject key identifier: 0C:5E:85:29:7B:2E:AB:47:92:1A:A1:EA:C2:21:C6:CB:C7:1D:31:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766BFDFD63CBD11DB29240 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:6b:fd:fd:63:cb:d1:1d:b2:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=afe5e819-1b32-44bc-9fef-30c86f0eb267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:f8:02:28:7e:e8:8e:10:35:dd:83:97:9f: 7e:ee:38:e2:ff:75:8a:7a:02:e3:82:83:00:ea:17: 37:6b:30:c7:7d:cf:f0:ae:2b:8e:aa:8d:cf:e9:03: 6c:36:46:53:47:33:da:4f:a4:ba:b2:f1:43:3b:26: 08:d0:89:48:e7:08:19:ae:e4:ee:61:fa:81:86:19: b5:31:a4:66:7c:fb:72:91:0c:96:db:3a:e4:76:ec: 39:61:e8:e5:c4:57:d7:e0:97:c7:a2:d2:7f:e6:8f: b2:89:3f:00:55:9e:0c:dc:f4:09:2b:a4:17:05:a8: c7:5d:80:14:00:50:cf:ec:45:5f:ef:36:2f:c9:a0: a4:0c:61:c6:c0:ac:fe:44:e0:44:fa:ab:c2:3f:0b: 32:7a:ca:88:21:fd:88:3f:54:e9:a9:3d:5d:a2:bd: 4a:94:99:13:85:df:58:cd:fc:e3:9f:bd:da:8c:be: bd:a4:df:87:a5:0a:14:e1:13:e9:4a:62:14:15:85: 57:13:81:36:4f:91:7a:0c:16:47:7e:21:a1:d8:b6: 95:18:fa:05:f1:78:15:19:a2:dc:e2:43:83:71:2c: c1:41:8f:2a:1d:11:16:7a:2c:82:d5:7d:94:03:cb: c8:94:94:c0:9b:b7:83:d5:eb:e7:6e:e2:4c:99:ae: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5E:85:29:7B:2E:AB:47:92:1A:A1:EA:C2:21:C6:CB:C7:1D:31:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5b:a1:1a:13:2e:6e:79:ff:ba:2e:98:e0:ef:38:65:e8:f3: 93:3d:8c:1e:09:e8:ae:9a:04:05:a3:ac:b6:e6:c6:8f:0d:bf: 7e:9b:ce:c2:8e:91:80:cf:0f:ff:5f:07:0f:00:8f:42:10:7f: a3:df:4d:15:56:1a:ea:26:85:b1:39:5d:29:e5:4e:c9:9f:cc: e0:2f:7f:90:6d:54:7b:7c:7c:ce:a9:22:bb:a6:3f:65:90:35: bf:0e:fc:04:80:c0:6a:7e:d0:ab:21:aa:54:42:9e:e2:ee:6d: aa:60:04:78:c1:50:21:2c:db:15:de:09:cc:41:da:00:75:44: 00:e3:c5:bd:15:f7:69:1a:64:5d:6f:b3:06:12:91:85:2d:8c: 21:e1:83:fc:9a:22:15:01:c4:92:55:1b:66:19:67:f8:4a:fa: fd:3b:9b:2f:71:07:ce:38:02:ee:48:f7:b2:51:10:ca:47:4d: bd:44:ba:31:4b:f4:b2:8a:37:2d:c3:a0:41:69:1e:7b:96:fc: c0:e3:13:3e:88:bd:e8:ad:76:4e:33:92:9f:45:1d:93:1a:67: 33:1e:98:48:4f:67:52:fc:a1:75:03:07:11:ab:46:0f:bc:a2: d2:9b:d0:db:92:04:b1:fe:b2:fc:78:10:34:82:5c:83:76:7b: 2b:dc:21:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmv9/WPL0R2ykkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk YWZlNWU4MTktMWIzMi00NGJjLTlmZWYtMzBjODZmMGViMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg834Aih+6I4QNd2Dl59+7jji/3WKegLjgoMA 6hc3azDHfc/wriuOqo3P6QNsNkZTRzPaT6S6svFDOyYI0IlI5wgZruTuYfqBhhm1 MaRmfPtykQyW2zrkduw5YejlxFfX4JfHotJ/5o+yiT8AVZ4M3PQJK6QXBajHXYAU AFDP7EVf7zYvyaCkDGHGwKz+ROBE+qvCPwsyesqIIf2IP1TpqT1dor1KlJkThd9Y zfzjn73ajL69pN+HpQoU4RPpSmIUFYVXE4E2T5F6DBZHfiGh2LaVGPoF8XgVGaLc 4kODcSzBQY8qHREWeiyC1X2UA8vIlJTAm7eD1evnbuJMma7gewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxehSl7LqtHkhqh6sIhxsvHHTEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg4MTIyMGMtOWVkZS0z MjkzLWE3MzQtZjMwMTBmODY4MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxboRoTLm55/7oumODvOGXo85M9jB4J6K6aBAWjrLbmxo8Nv36bzsKO kYDPD/9fBw8Aj0IQf6PfTRVWGuomhbE5XSnlTsmfzOAvf5BtVHt8fM6pIrumP2WQ Nb8O/ASAwGp+0KshqlRCnuLubapgBHjBUCEs2xXeCcxB2gB1RADjxb0V92kaZF1v swYSkYUtjCHhg/yaIhUBxJJVG2YZZ/hK+v07my9xB844Au5I97JREMpHTb1EujFL 9LKKNy3DoEFpHnuW/MDjEz6Iveitdk4zkp9FHZMaZzMemEhPZ1L8oXUDBxGrRg+8 otKb0NuSBLH+svx4EDSCXIN2eyvcIRc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:18:24 2025 by rpki-client