$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa File: ae6fa773-9177-396c-a066-b77fbe30b7ba.roa (raw, json) Hash identifier: byGP1HWVfmIPANXN+AOOfERFUNIErAaiLeQ/ungD9iE= Subject key identifier: 10:3C:97:B7:8E:CF:B7:44:AB:91:BD:35:9D:A0:D3:B7:C8:09:F9:BC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB40FDE8D3F5A79815C2D200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:fd:e8:d3:f5:a7:98:15:c2:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=87ce3fbb-db09-49cc-b2fc-cd243b10871d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:6b:eb:d1:a7:3a:c9:ff:47:53:25:da:9e: 81:e1:b0:22:10:fb:33:66:28:ef:3d:b0:f2:9e:c4: ce:e4:79:21:a2:66:ac:c4:c0:48:a3:d8:24:9b:38: f4:df:63:ec:53:59:4e:72:26:11:ed:13:2d:09:59: c9:d1:a6:af:82:c4:0c:a8:6f:7a:94:3c:6c:ec:2d: 9c:3f:75:b9:b7:bf:2e:9e:ff:8f:57:fc:57:30:4d: 3f:0f:d1:b6:d7:12:67:e4:c0:3e:75:b0:61:30:70: 1a:80:7d:59:15:52:fa:13:89:d4:92:b5:92:08:09: 02:8e:5b:95:22:49:be:24:ac:81:5b:12:f6:a9:68: 74:80:d9:cb:ca:c1:6e:72:e6:22:9c:d5:ca:47:1a: e6:5a:d3:4b:e6:e9:43:97:2d:5c:14:e0:bf:e2:77: a1:21:a7:9d:a2:e3:b2:19:6d:c2:69:b0:30:82:96: 14:aa:fe:d9:71:82:78:1e:71:b3:e8:02:20:55:c9: 5c:d8:64:fe:13:12:83:f8:77:02:c8:a4:31:1d:bf: 7c:86:6a:e7:b4:c7:ed:0e:6a:dd:72:66:c4:12:15: 74:56:7d:27:85:e1:3c:b6:2d:d5:66:ca:f8:52:72: 3a:8b:8d:48:39:37:fe:bf:e3:66:d9:bc:bb:c7:57: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3C:97:B7:8E:CF:B7:44:AB:91:BD:35:9D:A0:D3:B7:C8:09:F9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae6fa773-9177-396c-a066-b77fbe30b7ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b5:09:20:7a:b3:3f:6a:f7:52:79:4d:5d:d1:89:f5:bb:d1: 18:9e:ae:07:56:3b:72:eb:0e:06:fc:4b:62:37:11:ea:1b:2d: 6c:90:60:bd:13:07:86:9d:be:35:6a:30:1f:1c:c4:28:be:13: db:ec:f9:b6:04:e0:4f:eb:0f:a8:ff:9e:8c:51:08:ea:77:ff: bb:cc:89:b7:7b:0f:a6:30:11:dd:f6:21:e1:10:1e:4e:e1:fb: 2a:11:dd:ed:f5:17:93:45:4a:fc:57:0d:8a:a0:6c:93:0f:4d: d5:c5:1d:88:1c:50:7d:59:eb:7d:4d:30:5c:e1:3b:c5:f9:4c: 8e:bc:8e:75:4c:dc:c1:26:88:42:84:37:45:93:97:83:05:b8: 50:12:82:82:10:8e:51:61:13:05:ac:de:24:5b:f2:cc:24:98: 31:35:dd:2b:ab:8d:66:35:bf:54:21:2b:cc:e6:60:6a:d9:a0: 30:7a:b7:c5:42:c3:9b:17:c9:66:32:f4:e2:5f:ee:fe:4c:8e: 7f:da:f4:29:4b:c2:20:57:62:c6:3c:9e:90:cd:3f:93:a3:d8: 30:4d:16:5c:64:52:e1:02:ca:8d:c0:aa:05:20:9a:0a:91:5d: 11:fb:78:50:13:fc:fc:30:46:90:5f:8d:7c:72:e0:43:64:c7: ee:b4:80:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQP3o0/WnmBXC0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODdjZTNmYmItZGIwOS00OWNjLWIyZmMtY2QyNDNiMTA4NzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFBr69GnOsn/R1Ml2p6B4bAiEPszZijvPbDy nsTO5HkhomasxMBIo9gkmzj032PsU1lOciYR7RMtCVnJ0aavgsQMqG96lDxs7C2c P3W5t78unv+PV/xXME0/D9G21xJn5MA+dbBhMHAagH1ZFVL6E4nUkrWSCAkCjluV Ikm+JKyBWxL2qWh0gNnLysFucuYinNXKRxrmWtNL5ulDly1cFOC/4nehIaedouOy GW3CabAwgpYUqv7ZcYJ4HnGz6AIgVclc2GT+ExKD+HcCyKQxHb98hmrntMftDmrd cmbEEhV0Vn0nheE8ti3VZsr4UnI6i41IOTf+v+Nm2by7x1eb0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA8l7eOz7dEq5G9NZ2g07fICfm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU2ZmE3NzMtOTE3Ny0z OTZjLWEwNjYtYjc3ZmJlMzBiN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrETEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu1CSB6sz9q91J5TV3RifW70RiergdWO3LrDgb8S2I3EeobLWyQYL0T B4advjVqMB8cxCi+E9vs+bYE4E/rD6j/noxRCOp3/7vMibd7D6YwEd32IeEQHk7h +yoR3e31F5NFSvxXDYqgbJMPTdXFHYgcUH1Z631NMFzhO8X5TI68jnVM3MEmiEKE N0WTl4MFuFASgoIQjlFhEwWs3iRb8swkmDE13SurjWY1v1QhK8zmYGrZoDB6t8VC w5sXyWYy9OJf7v5Mjn/a9ClLwiBXYsY8npDNP5Oj2DBNFlxkUuECyo3AqgUgmgqR XRH7eFAT/PwwRpBfjXxy4ENkx+60gCk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:14 2025 by rpki-client