$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa File: c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa (raw, json) Hash identifier: pOA4hMswY42wk4D1twKe4PwsbI87vaqUp1jElrCcpQM= Subject key identifier: C9:ED:85:98:73:1B:2C:DA:CF:CB:E3:4E:B1:AC:BD:68:D0:0B:1C:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC9DBAC08E1CDB105CEF1F100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.68.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:ac:08:e1:cd:b1:05:ce:f1:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=9b5537ce-3d25-473b-b375-56135d0fa0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:7a:80:b0:30:07:5c:5b:9b:3c:07:e0:af: 34:40:37:61:3f:6e:05:3d:53:d8:e0:1f:4f:44:8d: 81:e9:25:35:7c:98:30:b8:dd:34:b5:2c:bb:9e:89: 8d:4a:11:91:14:d6:28:91:18:e4:a8:7e:cc:97:4c: 13:93:6c:e5:c7:4c:bf:bd:43:3c:f2:e6:a3:89:ea: 8d:4a:b2:ee:b8:11:a9:32:e6:81:2e:02:7d:93:6f: 90:c2:d0:03:c9:a1:f8:d7:45:a4:aa:fe:7f:55:05: 86:e9:36:f5:71:31:0e:cb:7a:1c:ca:a4:89:d7:51: 01:d2:50:cd:0d:50:5d:e3:6b:d6:fa:41:81:21:0a: 98:e9:10:d1:6b:9f:5d:58:00:17:86:a4:1c:02:e3: 0f:24:25:aa:fb:37:a6:89:cc:1a:99:3c:be:69:d3: f3:d8:39:2b:44:8a:b5:9d:df:4e:31:23:89:2e:1f: 64:c9:53:a4:e1:1d:3c:4e:46:f9:65:f1:9f:82:fd: 4c:a2:1f:6a:59:70:e1:42:fa:e3:eb:00:f5:d9:3d: 79:ec:39:56:89:50:7b:d7:50:28:0e:e7:70:04:e6: 2c:de:01:79:78:0c:1f:18:d3:8a:ff:56:0d:b9:1e: 14:5d:ee:c4:ae:01:b4:81:49:71:ee:25:e0:04:5b: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:ED:85:98:73:1B:2C:DA:CF:CB:E3:4E:B1:AC:BD:68:D0:0B:1C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a1:e8:69:03:61:e7:21:8b:56:20:e0:df:83:dc:a6:81:46: 4e:0a:37:41:4d:a0:01:fa:36:98:cb:31:4f:57:71:24:f8:86: 33:51:7b:3b:f9:69:81:35:39:04:0e:0b:51:0d:e8:06:27:e6: 12:03:ee:66:f5:e5:3d:70:61:1b:1b:2d:ca:5a:65:1d:ed:ca: 64:22:d9:72:fa:d3:2b:d9:d9:6f:f0:04:16:18:68:6a:a8:03: 7c:23:4b:ff:d7:98:03:06:42:b3:8a:1a:05:5a:31:e1:b7:d7: 56:58:e5:55:de:13:e4:d8:cf:2c:47:58:53:b2:c2:b4:57:14: 95:ff:72:78:19:b3:7d:2d:bf:a2:4b:13:88:7d:b9:de:3b:f3: cb:5c:1c:7e:02:cc:55:0d:f7:76:3c:28:3a:0c:90:44:83:ff: 17:3b:9e:b1:02:a2:2d:7b:dc:cb:ba:d1:0e:86:4e:d4:bd:c5: 54:53:11:ba:b4:f8:26:a0:f1:7d:2b:19:50:29:c5:06:79:46: 73:f4:09:02:66:31:56:ec:bc:2a:32:66:b7:8c:3f:25:19:bc: 56:d0:40:2a:b4:48:b1:72:c1:00:68:74:f0:56:9a:9b:7e:34: 67:84:88:29:75:86:eb:b8:b4:81:66:25:73:13:a6:48:72:3f: 1a:bf:8b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26wI4c2xBc7x8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk OWI1NTM3Y2UtM2QyNS00NzNiLWIzNzUtNTYxMzVkMGZhMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zl6gLAwB1xbmzwH4K80QDdhP24FPVPY4B9P RI2B6SU1fJgwuN00tSy7nomNShGRFNYokRjkqH7Ml0wTk2zlx0y/vUM88uajieqN SrLuuBGpMuaBLgJ9k2+QwtADyaH410Wkqv5/VQWG6Tb1cTEOy3ocyqSJ11EB0lDN DVBd42vW+kGBIQqY6RDRa59dWAAXhqQcAuMPJCWq+zemicwamTy+adPz2DkrRIq1 nd9OMSOJLh9kyVOk4R08Tkb5ZfGfgv1Moh9qWXDhQvrj6wD12T157DlWiVB711Ao DudwBOYs3gF5eAwfGNOK/1YNuR4UXe7ErgG0gUlx7iXgBFvSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnthZhzGyzaz8vjTrGsvWjQCxwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzJhNzAxZDktNGZjZi0z Yjc4LTgxNDktMDIxNmIyZmI3M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmh6GkDYechi1Yg4N+D3KaBRk4KN0FNoAH6NpjLMU9XcST4hjNRezv5 aYE1OQQOC1EN6AYn5hID7mb15T1wYRsbLcpaZR3tymQi2XL60yvZ2W/wBBYYaGqo A3wjS//XmAMGQrOKGgVaMeG311ZY5VXeE+TYzyxHWFOywrRXFJX/cngZs30tv6JL E4h9ud4788tcHH4CzFUN93Y8KDoMkESD/xc7nrECoi173Mu60Q6GTtS9xVRTEbq0 +Cag8X0rGVApxQZ5RnP0CQJmMVbsvCoyZreMPyUZvFbQQCq0SLFywQBodPBWmpt+ NGeEiCl1huu4tIFmJXMTpkhyPxq/i+E= -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:35 2025 by rpki-client