$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b20c334e-fa3d-3a14-87c6-5bbee444be36.roa File: b20c334e-fa3d-3a14-87c6-5bbee444be36.roa (raw, json) Hash identifier: /a+Qyv5PLYjZU6EYT2yun2PiNjO02mNrWsJbpnocVY0= Subject key identifier: A1:56:C5:00:90:36:EE:7D:6C:C5:66:17:CE:F8:F0:82:0F:D0:18:8F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766C669F8034F3D0A94680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b20c334e-fa3d-3a14-87c6-5bbee444be36.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:6c:66:9f:80:34:f3:d0:a9:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=31362bfa-1c9f-4535-877d-753be7aca679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:08:e5:ee:7d:6d:b2:0b:34:6c:f8:f5:b6: ec:30:52:af:a9:dc:67:bf:d5:d9:ab:d4:5d:92:30: 10:75:99:27:38:e3:4d:14:05:af:fa:f5:2e:d0:6a: ef:cb:f6:c0:d4:81:98:39:f1:61:a5:8f:38:63:ee: 5c:dd:27:5a:3c:2a:04:a8:c9:c7:1e:d8:3a:11:41: 93:b7:df:e9:76:de:96:87:9d:86:11:dc:1d:cd:1f: 6c:96:b2:be:9a:52:6f:21:79:ec:ec:ee:b5:91:da: 2c:17:f9:95:a1:61:24:89:2a:c5:f7:59:1f:9d:d2: 9c:bd:4b:cb:10:c0:fe:a1:d0:42:a5:d9:a6:3e:7a: a5:b6:bf:90:c9:a0:c1:8a:aa:b8:9c:91:cb:3e:83: 0a:8a:49:21:db:de:dc:01:05:51:50:2f:22:d1:91: 2d:bd:8b:93:15:43:1e:77:ba:2b:4a:97:00:42:46: dc:da:4c:40:f9:54:7e:98:e0:6a:92:ef:72:dd:32: 8c:ff:60:00:ce:e7:37:20:27:f2:05:4f:93:ab:ed: 2d:13:3f:04:86:ab:8f:14:fe:85:66:31:c9:cd:0d: a3:1c:e1:70:61:75:ce:66:4d:8c:44:a8:91:83:99: 19:88:59:e0:26:3c:79:16:67:9f:69:22:15:46:ad: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:C5:00:90:36:EE:7D:6C:C5:66:17:CE:F8:F0:82:0F:D0:18:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b20c334e-fa3d-3a14-87c6-5bbee444be36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2c:e1:b8:b9:33:34:3c:8b:38:67:6c:91:03:95:86:c7:22: ad:4c:29:33:de:89:5e:32:36:d4:6b:6d:d4:1a:21:72:3d:06: 3f:24:31:b6:3b:a2:c9:e7:ab:98:44:cf:f5:9f:be:ce:61:43: ad:c4:e2:36:ab:9a:41:c1:67:aa:81:9e:f5:f7:24:97:0c:25: 08:b5:b6:79:a1:7e:32:8c:6b:60:9f:01:30:9e:cd:d7:fc:d5: c0:22:d9:03:c7:0e:ea:1f:d3:df:17:d9:01:89:a9:ea:c9:43: 1e:41:ed:80:d6:88:de:29:26:d3:7d:ec:fb:57:37:86:4f:ce: 1a:3b:63:a1:12:90:fd:59:c3:e5:6b:34:da:19:39:b7:e4:d5: 1e:67:28:f1:f7:a8:fb:82:d3:0b:a4:e9:0d:56:84:81:65:1e: f0:df:7a:0b:35:41:3c:3c:58:1a:2e:20:a9:05:c1:3c:c6:bb: 23:f2:84:e6:c1:b7:ee:58:47:d8:f9:6c:35:94:c7:14:b7:d2: 5e:ca:bd:05:5d:83:69:28:41:77:36:82:72:0b:13:15:d5:7d: a8:13:ce:59:90:f5:28:df:96:e0:c3:44:d3:44:2c:d5:c0:3e: fb:79:a4:b0:b2:bf:90:07:1f:a0:20:c8:d1:12:04:b2:a6:02: 1f:4f:fc:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmxmn4A089CpRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzEzNjJiZmEtMWM5Zi00NTM1LTg3N2QtNzUzYmU3YWNhNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pEI5e59bbILNGz49bbsMFKvqdxnv9XZq9Rd kjAQdZknOONNFAWv+vUu0Grvy/bA1IGYOfFhpY84Y+5c3SdaPCoEqMnHHtg6EUGT t9/pdt6Wh52GEdwdzR9slrK+mlJvIXns7O61kdosF/mVoWEkiSrF91kfndKcvUvL EMD+odBCpdmmPnqltr+QyaDBiqq4nJHLPoMKikkh297cAQVRUC8i0ZEtvYuTFUMe d7orSpcAQkbc2kxA+VR+mOBqku9y3TKM/2AAzuc3ICfyBU+Tq+0tEz8EhquPFP6F ZjHJzQ2jHOFwYXXOZk2MRKiRg5kZiFngJjx5FmefaSIVRq0sOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFWxQCQNu59bMVmF8748IIP0BiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjIwYzMzNGUtZmEzZC0z YTE0LTg3YzYtNWJiZWU0NDRiZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMs4bi5MzQ8izhnbJEDlYbHIq1MKTPeiV4yNtRrbdQaIXI9Bj8kMbY7 osnnq5hEz/Wfvs5hQ63E4jarmkHBZ6qBnvX3JJcMJQi1tnmhfjKMa2CfATCezdf8 1cAi2QPHDuof098X2QGJqerJQx5B7YDWiN4pJtN97PtXN4ZPzho7Y6ESkP1Zw+Vr NNoZObfk1R5nKPH3qPuC0wuk6Q1WhIFlHvDfegs1QTw8WBouIKkFwTzGuyPyhObB t+5YR9j5bDWUxxS30l7KvQVdg2koQXc2gnILExXVfagTzlmQ9SjfluDDRNNELNXA Pvt5pLCyv5AHH6AgyNESBLKmAh9P/HY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:17:59 2025 by rpki-client