$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b329aaec-6417-3fe6-ae19-23aa69bf7770.roa File: b329aaec-6417-3fe6-ae19-23aa69bf7770.roa (raw, json) Hash identifier: iuDTeCsnOeuC0alh8EuecsY+/YQJXdbihv8vmoCZT68= Subject key identifier: 29:09:8B:98:96:2C:CC:40:89:09:4F:E8:88:5E:86:32:33:57:92:00 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71119687A5CB58610A3F680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b329aaec-6417-3fe6-ae19-23aa69bf7770.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.68.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:19:68:7a:5c:b5:86:10:a3:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=cfdb159a-1707-4cc4-9e0a-211193757a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:e4:83:0b:9d:22:98:d9:5f:09:b8:8c:8d: 95:cf:e5:9a:db:00:46:89:30:c0:13:41:78:07:59: 5c:68:15:d2:8d:8d:47:3e:27:21:da:48:36:8e:47: 4e:06:fd:5d:63:96:d3:9d:17:30:a9:4d:e9:91:99: 56:61:4c:db:c9:79:ac:eb:b3:b1:22:14:50:06:5c: 2c:45:48:53:b4:b7:78:45:b4:41:de:0c:6d:70:4d: c3:e1:94:0b:81:1b:ab:00:20:19:f5:d0:67:bd:28: 11:18:15:31:93:19:51:94:01:01:78:6c:6a:3a:13: 73:78:18:c3:96:11:c9:47:43:6a:db:c1:c9:02:7f: 57:ef:c6:95:02:47:20:11:0e:46:e5:9d:84:38:ba: f9:92:10:34:25:04:d1:0c:8d:ee:26:f4:dd:89:64: 4f:63:80:75:7c:a6:d6:f6:d7:f9:ae:22:81:8a:48: 1d:53:31:88:a9:cd:58:c5:03:02:79:39:a2:6c:c0: b9:43:73:96:3b:5e:d9:6a:da:51:dc:fe:03:c2:97: 57:58:28:bf:6f:29:bb:05:51:e5:28:14:12:bb:36: c2:c2:0e:c5:ab:2d:33:89:a9:69:bd:bf:c8:3d:8a: ae:be:41:ec:f8:e6:24:0a:10:c2:5d:19:3a:40:a7: 01:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:8B:98:96:2C:CC:40:89:09:4F:E8:88:5E:86:32:33:57:92:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b329aaec-6417-3fe6-ae19-23aa69bf7770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:de:db:50:f9:62:52:c8:3d:b9:ea:58:3e:b4:99:d7:0b:a7: 21:b9:05:2e:bb:d6:6e:cd:3e:46:a2:c0:07:ee:89:26:f3:cb: 0c:c2:df:65:66:ac:5c:68:b2:ba:a7:b8:d3:43:ec:7a:b8:fc: 5f:37:38:75:50:c7:56:ae:b7:e4:c1:f0:2e:93:c8:65:3f:01: 6c:f5:f3:43:ed:62:7c:ad:b2:f1:43:2c:ee:22:16:0f:1f:6e: 57:d2:6a:c9:14:94:64:12:20:5c:29:50:7b:99:95:6a:de:ea: c3:e9:fd:31:17:c6:77:5f:61:92:07:8a:3a:cb:e3:6c:12:88: 92:28:96:e9:bd:71:92:f5:ee:54:ee:31:26:d6:ef:48:5e:f4: fe:50:24:55:01:d8:b0:93:f8:47:d6:44:c8:05:89:8a:40:90: ee:a8:bb:61:81:05:55:8d:09:e0:67:cf:62:36:80:52:51:6c: 80:23:43:4a:6f:45:ed:78:1c:9c:e2:42:3b:d2:25:4c:cb:e5: aa:0a:24:b6:0d:b2:8a:b7:5f:e2:5a:84:43:dc:52:3a:2d:42: 26:01:fc:15:23:fa:f7:65:23:72:e6:06:42:91:13:4a:7f:fa: 0f:ec:6e:34:6a:b7:ce:84:8f:20:ca:5d:45:52:32:c5:68:23: 87:18:39:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERloely1hhCj9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk Y2ZkYjE1OWEtMTcwNy00Y2M0LTllMGEtMjExMTkzNzU3YTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzbkgwudIpjZXwm4jI2Vz+Wa2wBGiTDAE0F4 B1lcaBXSjY1HPich2kg2jkdOBv1dY5bTnRcwqU3pkZlWYUzbyXms67OxIhRQBlws RUhTtLd4RbRB3gxtcE3D4ZQLgRurACAZ9dBnvSgRGBUxkxlRlAEBeGxqOhNzeBjD lhHJR0Nq28HJAn9X78aVAkcgEQ5G5Z2EOLr5khA0JQTRDI3uJvTdiWRPY4B1fKbW 9tf5riKBikgdUzGIqc1YxQMCeTmibMC5Q3OWO17ZatpR3P4DwpdXWCi/bym7BVHl KBQSuzbCwg7Fqy0zialpvb/IPYquvkHs+OYkChDCXRk6QKcBUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkJi5iWLMxAiQlP6IhehjIzV5IAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjMyOWFhZWMtNjQxNy0z ZmU2LWFlMTktMjNhYTY5YmY3NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLe21D5YlLIPbnqWD60mdcLpyG5BS671m7NPkaiwAfuiSbzywzC32Vm rFxosrqnuNND7Hq4/F83OHVQx1aut+TB8C6TyGU/AWz180PtYnytsvFDLO4iFg8f blfSaskUlGQSIFwpUHuZlWre6sPp/TEXxndfYZIHijrL42wSiJIolum9cZL17lTu MSbW70he9P5QJFUB2LCT+EfWRMgFiYpAkO6ou2GBBVWNCeBnz2I2gFJRbIAjQ0pv Re14HJziQjvSJUzL5aoKJLYNsoq3X+JahEPcUjotQiYB/BUj+vdlI3LmBkKRE0p/ +g/sbjRqt86EjyDKXUVSMsVoI4cYOZc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:18:35 2025 by rpki-client