$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1c163f5-29eb-3c03-ac55-d66c2cb881d8.roa File: a1c163f5-29eb-3c03-ac55-d66c2cb881d8.roa (raw, json) Hash identifier: rJQtvfZP8TKxTWZN7iq94FgWkXwNQvXVOTgukZRU27c= Subject key identifier: E0:E7:E2:51:23:63:DC:C9:06:37:5A:89:2D:2D:C1:C1:9F:D7:E6:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAF322B99D7CCD4DDB300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1c163f5-29eb-3c03-ac55-d66c2cb881d8.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:af:32:2b:99:d7:cc:d4:dd:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=1f2b57b9-0ba9-45a3-aee4-2ae3c509172f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0c:eb:ac:2b:50:0b:21:8f:00:42:e9:3a:c3: e9:29:ed:f7:bf:05:9a:49:94:c6:76:bc:c9:08:4d: 63:f2:62:19:1b:1a:fc:f6:99:40:f6:0f:3b:3f:77: de:b8:b7:64:6e:d9:f9:3e:0a:62:e7:19:59:48:8e: 3f:04:7f:80:cd:64:dd:84:3c:1b:9f:16:cb:b1:33: 5f:9d:d6:d7:d0:ad:00:aa:b8:d9:bd:a3:58:95:02: 25:62:ae:c5:e9:55:64:93:46:c5:a2:f0:ee:fd:ea: 6e:af:d6:b4:94:26:18:84:93:e2:64:ef:68:c9:06: 8c:15:d4:9f:29:10:27:9d:31:1b:d7:96:92:55:76: ee:35:dc:92:cb:88:16:21:9d:8b:d0:09:e6:e6:b4: a1:e0:d9:22:c8:d4:38:73:09:30:72:ed:33:bd:27: d2:75:26:3b:52:d5:71:a1:05:8a:51:4c:0d:8e:8e: 73:40:a1:13:f4:9e:be:c9:ad:ca:f9:c4:65:ea:d1: 87:4e:35:3d:2d:2d:5e:95:fc:a9:ff:6f:7b:7d:a6: e9:4d:cf:69:d8:c2:af:db:df:e0:38:bb:d4:06:e0: b0:06:c0:8a:f2:43:e6:47:ac:04:b0:cc:4f:d2:1c: f1:0a:c3:87:60:30:cc:4a:1a:e4:7c:bd:87:fe:f9: c0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E7:E2:51:23:63:DC:C9:06:37:5A:89:2D:2D:C1:C1:9F:D7:E6:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1c163f5-29eb-3c03-ac55-d66c2cb881d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:48:bc:76:1a:c3:64:c8:9a:32:d0:f6:75:80:26:e0:f1:ae: 80:5b:0e:5b:fb:d4:a0:a4:ff:c7:ce:2a:aa:33:90:75:f3:8a: ec:89:fd:6a:4a:71:20:a3:d7:07:c4:f9:0d:b5:f5:5e:a2:46: 46:8c:95:2f:e7:44:86:18:7b:b7:42:24:9c:cd:4f:55:1b:a3: c1:e3:dd:18:c4:5d:df:6d:eb:2e:21:fc:e5:a0:91:64:89:b8: 45:07:9c:d5:31:e2:6a:77:64:b4:0f:ec:ac:a8:19:be:8a:e3: bc:05:dc:70:4e:11:ed:02:41:93:5a:e8:bf:82:67:87:6d:11: 9c:71:8b:1a:6e:84:60:79:ad:49:e6:9e:d5:65:2a:b0:50:bb: df:4e:b0:18:f1:84:e9:18:2d:70:9d:5d:2d:d3:c9:74:07:4b: c9:66:71:0c:2f:9a:d0:fd:b6:c3:d9:3a:7f:c8:89:95:37:c4: 09:b4:5c:20:e8:cf:a5:a8:91:6e:da:d4:e8:fa:36:01:05:98: 48:ed:c2:6b:dc:6a:f6:ea:fe:f8:4f:c3:14:75:f0:c9:8b:a4: 9a:d3:af:d3:ec:9d:ce:f8:41:ee:49:cb:5f:5b:d9:6d:91:ab: 93:8a:c0:8e:ce:49:2c:62:d3:c4:ea:c5:99:57:8a:f6:81:ea: 26:da:30:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq68yK5nXzNTdswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MWYyYjU3YjktMGJhOS00NWEzLWFlZTQtMmFlM2M1MDkxNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwzrrCtQCyGPAELpOsPpKe33vwWaSZTGdrzJ CE1j8mIZGxr89plA9g87P3feuLdkbtn5Pgpi5xlZSI4/BH+AzWTdhDwbnxbLsTNf ndbX0K0AqrjZvaNYlQIlYq7F6VVkk0bFovDu/epur9a0lCYYhJPiZO9oyQaMFdSf KRAnnTEb15aSVXbuNdySy4gWIZ2L0Anm5rSh4NkiyNQ4cwkwcu0zvSfSdSY7UtVx oQWKUUwNjo5zQKET9J6+ya3K+cRl6tGHTjU9LS1elfyp/297fabpTc9p2MKv29/g OLvUBuCwBsCK8kPmR6wEsMxP0hzxCsOHYDDMShrkfL2H/vnA9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODn4lEjY9zJBjdaiS0twcGf1+YaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTFjMTYzZjUtMjllYi0z YzAzLWFjNTUtZDY2YzJjYjg4MWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtIvHYaw2TImjLQ9nWAJuDxroBbDlv71KCk/8fOKqozkHXziuyJ/WpK cSCj1wfE+Q219V6iRkaMlS/nRIYYe7dCJJzNT1Ubo8Hj3RjEXd9t6y4h/OWgkWSJ uEUHnNUx4mp3ZLQP7KyoGb6K47wF3HBOEe0CQZNa6L+CZ4dtEZxxixpuhGB5rUnm ntVlKrBQu99OsBjxhOkYLXCdXS3TyXQHS8lmcQwvmtD9tsPZOn/IiZU3xAm0XCDo z6WokW7a1Oj6NgEFmEjtwmvcavbq/vhPwxR18MmLpJrTr9Psnc74Qe5Jy19b2W2R q5OKwI7OSSxi08TqxZlXivaB6ibaMIk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:59 2025 by rpki-client