$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8962d4-6998-363c-995d-41f1a8571cbc.roa File: ae8962d4-6998-363c-995d-41f1a8571cbc.roa (raw, json) Hash identifier: fMSDmJcUcDyDgzsLTCjH8mezIvk+jAMA242p8wq52rw= Subject key identifier: B1:C3:68:A9:C9:A9:17:25:E0:C3:90:CA:26:B4:C1:94:D6:BD:AF:23 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB40FD980D2C0E73D4069780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8962d4-6998-363c-995d-41f1a8571cbc.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:fd:98:0d:2c:0e:73:d4:06:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=b1331ab5-34cb-4371-9f8f-3341a6519476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:a0:3d:3b:13:a6:b5:f3:82:bb:33:31:26: c8:25:31:3e:e9:aa:36:ce:53:2b:53:ac:72:c7:73: 5c:18:05:bf:c6:d7:a5:e1:c6:06:b2:51:e6:af:1e: b7:35:07:19:b6:91:05:28:98:85:48:9b:a4:ac:3d: 5c:42:22:57:ca:f9:41:7a:e5:05:22:aa:8d:b7:34: 1a:91:38:49:51:a6:cc:75:6b:47:49:fd:44:c8:07: 90:01:ec:b9:5b:fa:7d:c6:fd:f9:8a:49:19:01:0b: 72:98:90:3a:a2:08:cf:0b:04:f4:30:0c:48:84:fe: ef:e6:4e:92:56:16:26:21:4a:8f:86:2f:7f:80:c6: 3a:b3:12:d7:2d:34:0c:44:fd:5c:33:99:62:7f:23: 56:bf:03:2b:dd:4d:06:d2:45:b2:3a:3f:ab:c4:02: d5:22:2f:8b:4b:6f:5a:e4:ff:bd:71:3b:fd:97:a7: 12:e0:11:30:57:7e:81:e7:7e:33:a5:d1:67:2f:45: d5:4b:7e:ab:a0:5a:a7:cf:da:87:45:d5:a6:e8:05: 27:c8:1f:9b:b1:52:ec:10:c4:f6:f4:93:87:80:9b: b9:d8:22:1f:03:8a:87:d6:d9:7c:42:97:b8:37:ad: 41:d6:7f:42:a2:c4:3a:bb:fd:57:a7:7a:5d:98:7a: 89:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C3:68:A9:C9:A9:17:25:E0:C3:90:CA:26:B4:C1:94:D6:BD:AF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8962d4-6998-363c-995d-41f1a8571cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:80:7d:dd:3a:22:ea:22:34:d0:01:be:4e:a2:37:76:33:02: 88:0d:5f:9b:fc:22:8e:e9:95:4b:25:69:2b:d1:11:8f:a6:15: 02:d2:62:53:96:a4:b4:28:30:03:55:18:49:27:64:27:11:f1: 69:bb:82:a1:ff:d1:eb:9c:d8:96:a1:18:42:99:05:22:75:7c: 12:19:17:26:05:94:23:26:65:a5:94:06:7f:be:ac:72:7f:c9: bd:ea:b7:47:29:88:74:36:cb:37:42:78:83:23:e6:2f:72:3e: df:b4:1d:88:4e:ff:5c:df:cf:ef:fc:d1:e8:97:2a:23:dd:bb: ca:5c:13:70:e6:f7:f1:49:5d:37:23:f9:74:ef:06:8e:03:87: 8e:a4:9e:a2:0b:9b:42:c9:7b:7b:86:0e:97:f6:4f:34:17:69: 83:34:7c:48:de:85:5b:7c:62:02:e9:20:98:61:bb:82:89:4f: a9:f9:3f:b9:f0:ac:04:59:35:30:e5:fd:3f:7a:67:82:55:23: 9d:6d:3c:02:58:09:ed:bc:b7:81:93:0c:a8:5d:27:91:7f:ed: c1:7d:97:68:fb:dc:6d:a3:0d:1c:61:91:b6:c1:8d:59:47:33: 31:4b:68:50:87:38:e8:21:62:bd:f9:63:80:1e:da:ba:88:67: ea:15:98:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQP2YDSwOc9QGl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YjEzMzFhYjUtMzRjYi00MzcxLTlmOGYtMzM0MWE2NTE5NDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSGgPTsTprXzgrszMSbIJTE+6ao2zlMrU6xy x3NcGAW/xtel4cYGslHmrx63NQcZtpEFKJiFSJukrD1cQiJXyvlBeuUFIqqNtzQa kThJUabMdWtHSf1EyAeQAey5W/p9xv35ikkZAQtymJA6ogjPCwT0MAxIhP7v5k6S VhYmIUqPhi9/gMY6sxLXLTQMRP1cM5lifyNWvwMr3U0G0kWyOj+rxALVIi+LS29a 5P+9cTv9l6cS4BEwV36B534zpdFnL0XVS36roFqnz9qHRdWm6AUnyB+bsVLsEMT2 9JOHgJu52CIfA4qH1tl8Qpe4N61B1n9CosQ6u/1Xp3pdmHqJxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHDaKnJqRcl4MOQyia0wZTWva8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU4OTYyZDQtNjk5OC0z NjNjLTk5NWQtNDFmMWE4NTcxY2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWAfd06IuoiNNABvk6iN3YzAogNX5v8Io7plUslaSvREY+mFQLSYlOW pLQoMANVGEknZCcR8Wm7gqH/0euc2JahGEKZBSJ1fBIZFyYFlCMmZaWUBn++rHJ/ yb3qt0cpiHQ2yzdCeIMj5i9yPt+0HYhO/1zfz+/80eiXKiPdu8pcE3Dm9/FJXTcj +XTvBo4Dh46knqILm0LJe3uGDpf2TzQXaYM0fEjehVt8YgLpIJhhu4KJT6n5P7nw rARZNTDl/T96Z4JVI51tPAJYCe28t4GTDKhdJ5F/7cF9l2j73G2jDRxhkbbBjVlH MzFLaFCHOOghYr35Y4Ae2rqIZ+oVmEg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:44 2025 by rpki-client