$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be4e7b72-62f9-3e80-b64b-f7ec73938b6b.roa File: be4e7b72-62f9-3e80-b64b-f7ec73938b6b.roa (raw, json) Hash identifier: AIQWgEJMJnojOIdfLa8Hw0z1WpVRCop8Oz9r46DzaZw= Subject key identifier: 91:00:5B:6B:B9:AF:24:A0:50:CC:DC:57:B4:2E:17:CB:F9:D4:71:6E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC87676AB42D3AB0EF8ACF180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be4e7b72-62f9-3e80-b64b-f7ec73938b6b.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:76:ab:42:d3:ab:0e:f8:ac:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=33a20047-e6a3-4bce-908b-ddcd8307096e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:fa:f5:b1:4f:38:e7:20:93:51:b8:73:cd: 82:88:b4:04:35:95:7b:2c:26:43:66:70:03:15:4d: e2:0c:6c:5a:61:0e:02:53:f5:de:5d:a2:13:9f:e1: 53:0a:94:03:fb:c3:be:36:c9:e1:ce:80:f2:53:20: cd:e6:06:0b:84:2a:0f:23:b7:68:ef:19:f7:66:8f: f9:ee:ae:d9:02:45:0e:72:72:16:6b:8c:c1:cd:db: b5:2d:a7:f1:4f:db:4b:fe:04:2d:36:db:8f:22:06: 2c:cd:f5:40:87:82:f0:f6:7c:13:fa:a1:b6:f9:42: 13:6a:18:fb:28:51:55:f9:ba:2d:ce:97:83:3c:e1: 56:5c:de:42:01:33:1e:67:ef:4d:e9:83:7e:dc:85: 4d:93:24:73:71:6f:9f:1b:ae:90:7f:7a:b9:df:71: ec:9a:e6:ed:4d:3f:38:1a:e9:12:67:07:de:5b:b8: 0f:64:d0:d3:53:3e:f0:10:46:8b:c7:b8:28:29:fe: 9c:78:5d:1b:a7:6b:52:93:7e:6a:6f:9c:5d:14:b6: 78:a0:79:c8:3d:ea:1b:a8:80:9e:0e:14:ad:0e:b8: 23:e6:b5:3a:6e:0a:95:60:51:bf:69:21:00:a6:2f: 44:af:4d:5f:3c:c2:0a:90:e2:bc:20:16:95:ec:72: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:00:5B:6B:B9:AF:24:A0:50:CC:DC:57:B4:2E:17:CB:F9:D4:71:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/be4e7b72-62f9-3e80-b64b-f7ec73938b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b5:2e:3b:68:e9:ef:5f:13:19:fb:0b:b0:78:00:f5:5d:b7: 14:35:f3:e8:02:d3:4e:90:f9:3e:24:d2:21:ae:61:e9:96:6c: 12:f4:fc:6d:d6:e3:81:d6:80:8d:dc:75:7b:37:82:0c:ea:e3: d1:4a:c0:ba:f1:56:0f:cc:ad:e9:14:2c:5b:d8:16:bb:fb:91: ff:76:a7:83:8d:52:67:d4:fe:a0:3f:2f:0b:b7:d1:3e:e6:b4: 3e:34:bf:24:c9:eb:0e:bc:64:25:a1:8f:04:7e:6a:72:59:fe: 32:52:4c:72:f9:20:4f:f8:fe:48:16:f0:72:15:a7:95:72:d8: f1:df:bf:dc:e9:1a:a0:95:13:37:a0:88:5f:7b:31:7a:d9:2a: f7:18:28:14:1b:0d:e3:84:7a:60:be:5e:04:70:64:51:c8:76: 8a:e1:1d:35:ca:b9:6d:a3:2b:39:83:a2:c5:f6:bc:b7:68:36: 8d:d2:c1:0f:de:b2:29:d2:19:a0:99:c0:4b:ab:a1:f4:ef:c7: cd:f5:9b:b6:37:a5:63:68:e0:08:b4:9e:7c:5f:a1:13:f0:c3: 6e:46:85:4a:20:d1:21:54:9d:80:89:6e:ce:b1:30:2a:cb:96: 49:c1:21:0c:55:31:fa:39:6d:aa:e6:2b:4c:e2:06:64:0c:57: 19:e4:d2:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnarQtOrDvis8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzNhMjAwNDctZTZhMy00YmNlLTkwOGItZGRjZDgzMDcwOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+L69bFPOOcgk1G4c82CiLQENZV7LCZDZnAD FU3iDGxaYQ4CU/XeXaITn+FTCpQD+8O+NsnhzoDyUyDN5gYLhCoPI7do7xn3Zo/5 7q7ZAkUOcnIWa4zBzdu1LafxT9tL/gQtNtuPIgYszfVAh4Lw9nwT+qG2+UITahj7 KFFV+botzpeDPOFWXN5CATMeZ+9N6YN+3IVNkyRzcW+fG66Qf3q533HsmubtTT84 GukSZwfeW7gPZNDTUz7wEEaLx7goKf6ceF0bp2tSk35qb5xdFLZ4oHnIPeobqICe DhStDrgj5rU6bgqVYFG/aSEApi9Er01fPMIKkOK8IBaV7HI8mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEAW2u5rySgUMzcV7QuF8v51HFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmU0ZTdiNzItNjJmOS0z ZTgwLWI2NGItZjdlYzczOTM4YjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO1Ljto6e9fExn7C7B4APVdtxQ18+gC006Q+T4k0iGuYemWbBL0/G3W 44HWgI3cdXs3ggzq49FKwLrxVg/MrekULFvYFrv7kf92p4ONUmfU/qA/Lwu30T7m tD40vyTJ6w68ZCWhjwR+anJZ/jJSTHL5IE/4/kgW8HIVp5Vy2PHfv9zpGqCVEzeg iF97MXrZKvcYKBQbDeOEemC+XgRwZFHIdorhHTXKuW2jKzmDosX2vLdoNo3SwQ/e sinSGaCZwEurofTvx831m7Y3pWNo4Ai0nnxfoRPww25GhUog0SFUnYCJbs6xMCrL lknBIQxVMfo5barmK0ziBmQMVxnk0pk= -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:13 2025 by rpki-client