$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9f31911d-4601-33c7-9982-2f7c798b6a95.roa File: 9f31911d-4601-33c7-9982-2f7c798b6a95.roa (raw, json) Hash identifier: 0R75cPIO9qyYz1p4qqtz/y2cTE0byD6P0XaftnkQQ+E= Subject key identifier: 29:E9:58:C1:DF:4B:F9:C1:D6:53:75:AD:B8:B8:90:EF:A4:30:C7:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB40FF1CB647EE1D8E99A6C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9f31911d-4601-33c7-9982-2f7c798b6a95.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:ff:1c:b6:47:ee:1d:8e:99:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=41243b29-23cd-4b63-a0d0-c6d9a4808bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:4c:bb:33:b2:32:ee:62:87:3b:8c:bc:a9: d6:f2:25:9f:29:de:56:fc:a6:a5:c9:57:6b:5b:60: 64:55:dd:29:5f:9c:62:ce:d2:42:1b:a0:a8:31:7f: 81:fe:a1:df:81:db:cf:4c:1a:1d:13:ab:7f:07:31: 1e:97:b0:f1:85:a6:48:20:30:6f:53:c5:f7:bd:ff: c4:aa:d2:8f:25:15:5b:da:9b:35:68:71:23:a8:39: 1f:3a:72:8c:8e:2c:fc:4e:80:2f:f6:8d:22:29:be: 14:97:94:f8:ae:0b:ce:e1:90:33:2d:10:5a:77:19: 80:26:6c:a2:61:9b:25:d4:29:6b:cd:cf:86:4b:2a: 3d:0f:ef:1e:17:27:ea:8b:f8:24:3e:89:9d:85:2d: 3f:c1:0d:f3:4f:b8:a8:68:6d:22:6b:9d:78:d5:0f: 3a:81:c2:7a:a4:d8:29:4a:60:83:e4:95:e0:55:50: a5:a9:71:23:eb:a6:6f:4c:be:d5:5f:1f:70:46:02: 70:5a:48:71:87:90:fc:be:5e:b8:70:ae:ad:7c:36: 7a:43:f8:ee:1d:7f:59:dd:7f:ad:15:66:48:62:3a: 22:2c:47:b9:04:7b:eb:45:0c:2b:fe:c4:a2:d7:da: 0c:b1:fd:cd:a3:58:f1:0b:5e:47:aa:c8:df:b8:ca: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E9:58:C1:DF:4B:F9:C1:D6:53:75:AD:B8:B8:90:EF:A4:30:C7:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9f31911d-4601-33c7-9982-2f7c798b6a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:94:39:95:9b:8a:ac:ff:45:82:2d:d4:af:71:8e:55:5c:50: 20:96:2e:73:cd:94:ae:8b:45:09:2e:43:29:31:d7:9a:61:63: df:c0:28:7f:10:c3:f9:4a:c1:d8:91:51:a4:bf:dd:ee:5c:15: 9f:6e:ba:9e:b6:cd:ec:d9:25:12:cb:44:8e:cd:5b:92:af:06: fc:5c:ae:ca:e8:91:37:4a:4a:7d:27:c1:00:fd:47:fc:e3:de: 92:ac:78:de:1f:75:1a:c9:ed:c8:04:6c:0f:94:d7:e5:0b:cb: a2:4d:e4:e9:c0:8a:b9:69:88:7d:c6:23:44:e9:4a:91:e2:40: f4:1c:69:1e:c6:b7:4a:82:45:5b:d8:ea:ff:e5:84:b8:26:e6: 6b:73:9e:c0:4e:fb:34:1b:2a:c8:f9:57:c6:dd:24:6f:65:88: 51:a6:85:57:f1:62:4b:19:3c:01:47:ba:8f:0c:39:f3:c4:d9: 72:f6:39:e4:65:7d:4c:94:5d:7e:cd:8d:01:56:4f:f2:9d:8b: 34:a4:41:d7:a3:36:83:d2:b9:6d:cc:d2:4a:6e:f6:52:f5:cc: af:d3:0a:50:8b:4d:96:f6:b4:96:72:54:07:ea:17:75:1b:1c: dd:a7:6b:d1:66:53:0c:99:c7:89:3b:aa:d5:ee:10:24:1b:98: e9:36:99:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQP8ctkfuHY6ZpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDEyNDNiMjktMjNjZC00YjYzLWEwZDAtYzZkOWE0ODA4YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6hMuzOyMu5ihzuMvKnW8iWfKd5W/KalyVdr W2BkVd0pX5xiztJCG6CoMX+B/qHfgdvPTBodE6t/BzEel7DxhaZIIDBvU8X3vf/E qtKPJRVb2ps1aHEjqDkfOnKMjiz8ToAv9o0iKb4Ul5T4rgvO4ZAzLRBadxmAJmyi YZsl1Clrzc+GSyo9D+8eFyfqi/gkPomdhS0/wQ3zT7ioaG0ia5141Q86gcJ6pNgp SmCD5JXgVVClqXEj66ZvTL7VXx9wRgJwWkhxh5D8vl64cK6tfDZ6Q/juHX9Z3X+t FWZIYjoiLEe5BHvrRQwr/sSi19oMsf3No1jxC15HqsjfuMpK/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnpWMHfS/nB1lN1rbi4kO+kMMflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWYzMTkxMWQtNDYwMS0z M2M3LTk5ODItMmY3Yzc5OGI2YTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGUOZWbiqz/RYIt1K9xjlVcUCCWLnPNlK6LRQkuQykx15phY9/AKH8Q w/lKwdiRUaS/3e5cFZ9uup62zezZJRLLRI7NW5KvBvxcrsrokTdKSn0nwQD9R/zj 3pKseN4fdRrJ7cgEbA+U1+ULy6JN5OnAirlpiH3GI0TpSpHiQPQcaR7Gt0qCRVvY 6v/lhLgm5mtznsBO+zQbKsj5V8bdJG9liFGmhVfxYksZPAFHuo8MOfPE2XL2OeRl fUyUXX7NjQFWT/KdizSkQdejNoPSuW3M0kpu9lL1zK/TClCLTZb2tJZyVAfqF3Ub HN2na9FmUwyZx4k7qtXuECQbmOk2mWw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:09:06 2025 by rpki-client