$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad73e9b7-2259-3e54-a72c-3ce1c8ee5e2a.roa File: ad73e9b7-2259-3e54-a72c-3ce1c8ee5e2a.roa (raw, json) Hash identifier: PKRZY4R6HRZpWClFsSn/NJp378C+BtXnBTFNpLEmhEc= Subject key identifier: 98:2F:40:CE:9E:68:3B:0C:D9:59:CC:50:81:74:76:2D:8B:C4:7E:60 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB41158AA2EECC6A7B07ED60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad73e9b7-2259-3e54-a72c-3ce1c8ee5e2a.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:15:8a:a2:ee:cc:6a:7b:07:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=155d1d0d-34e5-47f0-beb2-671e74860bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:62:ec:be:e3:19:6a:8b:70:43:b7:e7:09:d9: c8:1e:b1:54:cf:a8:2e:d1:a2:74:5c:2d:8e:de:ef: d5:bb:38:5b:3d:26:07:46:a7:9d:1b:d9:92:6d:b8: 65:88:eb:df:e2:f2:d8:79:e0:2f:0d:0e:5b:50:ee: 9a:b7:3f:fd:5e:ba:c2:c7:2c:69:c3:14:6c:74:27: 43:6b:e0:bb:24:2f:5d:35:26:b4:49:7d:b7:97:13: 21:16:1f:37:46:6d:24:45:b0:69:3a:45:c7:3a:07: 85:3f:bd:ab:8b:3c:73:3f:bc:55:f5:c6:18:a5:b1: db:c1:16:3e:be:ce:0d:05:fd:ae:37:76:86:55:18: 42:1d:aa:ad:4a:1b:fd:26:2a:f3:2a:11:a2:b1:39: 97:34:e2:1e:57:47:41:d8:bf:6c:10:c0:2d:2a:21: 28:e6:cf:8e:3e:97:d8:ba:ff:b1:5d:aa:84:bc:d8: 48:18:b9:c6:f9:f4:3d:39:f6:ee:67:03:85:34:33: d1:57:23:90:87:f6:23:7e:fa:58:6d:39:a5:af:2b: d5:14:07:1f:f0:75:f5:83:c7:18:1c:ef:1c:47:51: 7d:55:e2:f8:9d:d5:be:2d:f2:02:eb:44:a2:14:fd: 20:a7:72:31:d4:3e:e2:06:82:0f:c5:77:73:c9:6c: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2F:40:CE:9E:68:3B:0C:D9:59:CC:50:81:74:76:2D:8B:C4:7E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad73e9b7-2259-3e54-a72c-3ce1c8ee5e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:34:4e:49:9e:16:26:cd:65:5c:54:d4:80:39:c1:dc:3d:ff: 3c:23:5d:04:ca:66:7c:e6:d8:c3:5c:b2:ec:ab:0f:d0:b3:62: 97:66:5c:d4:51:b3:d0:b7:f2:64:b0:bf:8a:c9:3d:48:64:d5: 5c:16:f1:a2:33:92:57:8c:cb:a3:bb:fe:1a:70:62:6a:52:81: 42:ca:ba:2d:1c:a3:4a:27:eb:ff:4e:3f:9e:aa:b6:5f:ae:58: c1:9c:93:ef:da:6d:62:f3:ce:2e:6d:5f:64:bc:d0:3a:c7:e9: 91:27:5e:27:21:cf:fd:d6:46:38:30:08:dd:f8:15:33:e2:df: 6e:d0:62:37:9c:16:6b:1e:d5:30:ef:a6:8a:48:b1:2a:38:86: ae:86:f6:08:92:05:d1:81:f1:a3:70:95:ee:ab:5d:be:b9:a6: 97:24:82:08:e8:ea:0c:ef:40:7a:6d:6b:be:f9:8e:8c:05:25: 6c:35:9a:7a:1e:a3:45:df:e2:ef:89:36:83:6c:79:4e:00:de: 34:8a:57:91:bd:23:1f:65:65:a2:e1:cc:86:66:39:11:24:5b: 96:91:ad:48:97:49:57:57:20:84:21:25:8a:09:e1:cf:28:11: 47:a0:fa:41:58:ee:c0:9f:d8:36:a2:a9:23:65:ef:d2:17:7b: e7:a7:27:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRWKou7MansH7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTU1ZDFkMGQtMzRlNS00N2YwLWJlYjItNjcxZTc0ODYwYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWLsvuMZaotwQ7fnCdnIHrFUz6gu0aJ0XC2O 3u/VuzhbPSYHRqedG9mSbbhliOvf4vLYeeAvDQ5bUO6atz/9XrrCxyxpwxRsdCdD a+C7JC9dNSa0SX23lxMhFh83Rm0kRbBpOkXHOgeFP72rizxzP7xV9cYYpbHbwRY+ vs4NBf2uN3aGVRhCHaqtShv9JirzKhGisTmXNOIeV0dB2L9sEMAtKiEo5s+OPpfY uv+xXaqEvNhIGLnG+fQ9OfbuZwOFNDPRVyOQh/YjfvpYbTmlryvVFAcf8HX1g8cY HO8cR1F9VeL4ndW+LfIC60SiFP0gp3Ix1D7iBoIPxXdzyWzpdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgvQM6eaDsM2VnMUIF0di2LxH5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWQ3M2U5YjctMjI1OS0z ZTU0LWE3MmMtM2NlMWM4ZWU1ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMY0TkmeFibNZVxU1IA5wdw9/zwjXQTKZnzm2MNcsuyrD9CzYpdmXNRR s9C38mSwv4rJPUhk1VwW8aIzkleMy6O7/hpwYmpSgULKui0co0on6/9OP56qtl+u WMGck+/abWLzzi5tX2S80DrH6ZEnXichz/3WRjgwCN34FTPi327QYjecFmse1TDv popIsSo4hq6G9giSBdGB8aNwle6rXb65ppckggjo6gzvQHpta775jowFJWw1mnoe o0Xf4u+JNoNseU4A3jSKV5G9Ix9lZaLhzIZmOREkW5aRrUiXSVdXIIQhJYoJ4c8o EUeg+kFY7sCf2DaiqSNl79IXe+enJ0k= -----END CERTIFICATE-----Generated at Sat Aug 23 16:53:54 2025 by rpki-client