$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa File: 9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa (raw, json) Hash identifier: XdFnRvsr+bhFc7JNhtVrBf53lSi4CR6sB4njuPdbVx8= Subject key identifier: AE:47:ED:D1:C1:8E:EB:35:3C:86:1F:13:E9:20:17:A0:DA:DB:1F:FE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC2E11B468B5D43765442D980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1b:46:8b:5d:43:76:54:42:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=e9079e2f-b98d-40fe-a4f2-e017d28da7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:74:84:01:4f:5c:ed:37:ba:51:62:06:fd: ec:12:32:32:78:a4:eb:00:51:0e:84:8f:d8:2c:40: 8b:41:5d:70:82:91:61:94:c3:23:d2:7b:25:fc:1a: 5a:57:98:4e:67:28:90:d2:3e:a1:cc:c9:5a:83:3d: 64:93:9f:9d:4e:90:f4:ba:94:d4:ad:1c:fa:3c:b2: 14:7c:5a:d6:50:a7:aa:a0:54:3d:0e:21:c4:d2:f5: 83:37:ae:15:f0:79:dc:0a:bb:8c:3b:80:e9:06:57: 94:b7:b2:c3:22:5f:3a:f3:33:52:c2:11:0a:ec:1e: 18:0c:63:95:8b:58:de:54:43:98:e3:53:20:0c:09: 70:26:1b:dc:95:53:fa:ef:62:a6:df:a1:3a:d8:b7: 0c:51:df:06:47:3a:88:a3:20:cd:ac:33:26:de:19: 62:80:8d:1a:55:0f:68:98:d5:1d:45:17:91:e4:d3: ec:dc:ef:24:70:ed:25:9d:dd:4a:1d:97:98:f5:d4: f2:33:1d:b3:51:67:e0:d2:c0:18:7a:af:06:ee:74: ac:e2:b7:de:d6:87:a9:5b:61:b1:ee:81:a0:d6:50: 54:db:46:df:f9:b4:2e:dd:26:6e:d1:1b:cc:35:e5: 87:21:7e:7b:8f:c3:fe:35:96:fb:f2:fb:f6:0f:62: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:47:ED:D1:C1:8E:EB:35:3C:86:1F:13:E9:20:17:A0:DA:DB:1F:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9d97061d-b2c5-3b8b-9009-f596f0ac7f07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5c:e6:64:38:6e:68:8b:bf:29:2f:d7:92:df:71:bf:d7:50: c8:96:2d:31:9c:7e:4d:c0:c6:9a:f9:42:bd:98:1a:60:7d:83: 33:3c:5f:7d:81:c4:b0:5a:1b:36:ed:f6:d7:63:00:29:b8:aa: f7:b4:32:f7:0d:99:5c:56:98:44:4b:6b:f7:e9:74:7d:a8:4c: 78:05:4b:20:9c:a9:89:b0:6e:3e:1a:99:5e:aa:09:51:e8:61: dc:ff:4d:59:60:13:86:3c:3b:31:6d:86:ec:d1:06:95:e4:f6: 54:90:db:7f:7f:83:f9:35:7b:e0:be:50:3b:30:74:b9:ab:f8: 14:29:c2:9a:9b:ef:6e:10:9c:2d:d9:f6:39:04:ac:98:41:54: fb:11:8a:ea:7d:c5:be:ad:ca:53:ed:00:34:4b:bf:32:e5:39: 1c:61:f7:87:1e:c1:15:60:7f:6e:e2:bd:a9:83:08:d4:0f:89: 44:5c:58:8c:cb:e1:4d:3a:0f:70:58:7d:ef:fc:9e:4b:fa:10: ad:a7:6f:33:53:57:90:20:7f:4f:4f:39:41:1c:2e:d1:d9:d0: e7:43:17:cb:29:f9:47:15:f4:40:83:0b:90:7f:da:c0:42:39: bc:d2:f2:08:59:4e:de:88:de:3e:3d:bb:3f:66:ec:f0:64:a5: e0:4b:bd:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RtGi11DdlRC2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTkwNzllMmYtYjk4ZC00MGZlLWE0ZjItZTAxN2QyOGRhN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L50hAFPXO03ulFiBv3sEjIyeKTrAFEOhI/Y LECLQV1wgpFhlMMj0nsl/BpaV5hOZyiQ0j6hzMlagz1kk5+dTpD0upTUrRz6PLIU fFrWUKeqoFQ9DiHE0vWDN64V8HncCruMO4DpBleUt7LDIl868zNSwhEK7B4YDGOV i1jeVEOY41MgDAlwJhvclVP672Km36E62LcMUd8GRzqIoyDNrDMm3hligI0aVQ9o mNUdRReR5NPs3O8kcO0lnd1KHZeY9dTyMx2zUWfg0sAYeq8G7nSs4rfe1oepW2Gx 7oGg1lBU20bf+bQu3SZu0RvMNeWHIX57j8P+NZb78vv2D2KgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5H7dHBjus1PIYfE+kgF6Da2x/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWQ5NzA2MWQtYjJjNS0z YjhiLTkwMDktZjU5NmYwYWM3ZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhc5mQ4bmiLvykv15Lfcb/XUMiWLTGcfk3Axpr5Qr2YGmB9gzM8X32B xLBaGzbt9tdjACm4qve0MvcNmVxWmERLa/fpdH2oTHgFSyCcqYmwbj4amV6qCVHo Ydz/TVlgE4Y8OzFthuzRBpXk9lSQ239/g/k1e+C+UDswdLmr+BQpwpqb724QnC3Z 9jkErJhBVPsRiup9xb6tylPtADRLvzLlORxh94cewRVgf27ivamDCNQPiURcWIzL 4U06D3BYfe/8nkv6EK2nbzNTV5Agf09POUEcLtHZ0OdDF8sp+UcV9ECDC5B/2sBC ObzS8ghZTt6I3j49uz9m7PBkpeBLvWg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:37 2025 by rpki-client