$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5349d3e-37c0-306c-b1d2-90619d5fe639.roa File: c5349d3e-37c0-306c-b1d2-90619d5fe639.roa (raw, json) Hash identifier: eVHBi2CiXkvmBtZ+urQPoaVPpDS/s0l9tEYMKWoZowU= Subject key identifier: 49:4A:E7:9D:9D:D1:D5:F7:F1:BE:9D:ED:ED:27:B8:33:29:74:FA:6F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8765EB3BD7BDF06B2E708B4 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5349d3e-37c0-306c-b1d2-90619d5fe639.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:5e:b3:bd:7b:df:06:b2:e7:08:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=3ecad5a5-be5a-422f-bd72-d7ab686e8ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:10:88:e9:13:ca:d6:37:2a:28:75:ca:c2: c9:09:da:26:33:03:25:cb:d4:54:c2:2e:3b:2f:d8: f8:b3:eb:0c:78:e2:d2:80:a6:c1:5e:e8:7f:b8:da: a1:1d:ee:24:d3:bb:fd:4b:45:26:3b:3a:f9:d4:b1: 64:8e:15:ce:fb:5c:2f:54:e0:67:ff:5e:8c:24:a0: ff:97:e7:e8:fb:66:03:95:43:37:af:fc:75:91:e3: 35:19:9c:a0:a1:a9:ab:7b:e3:28:f2:ae:85:cb:12: d5:93:8e:d7:7e:3b:12:7e:db:b8:c0:21:7a:3c:cd: 19:8b:e5:46:1e:6d:b0:ab:bd:d6:ff:9f:58:a1:c4: d2:27:5d:47:4b:f3:e6:b5:70:1d:47:54:bf:dd:c7: 56:9e:0e:c1:2c:36:e7:c3:f6:ad:18:ff:38:e7:98: 8a:b9:96:11:dc:26:9e:a8:5b:57:3d:ed:a5:9f:69: 1a:9d:d0:33:c5:e1:98:5b:04:22:18:e4:b5:77:73: 64:9c:39:17:99:69:1b:97:3c:94:25:64:6b:a8:10: d2:05:e0:de:e6:ae:e0:b0:1c:d1:f5:82:e0:46:9f: ee:50:60:23:c9:31:0f:5f:30:0c:a4:44:bc:f2:3b: dc:2e:b2:19:d5:54:57:f3:2e:23:81:47:47:53:89: 5e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4A:E7:9D:9D:D1:D5:F7:F1:BE:9D:ED:ED:27:B8:33:29:74:FA:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c5349d3e-37c0-306c-b1d2-90619d5fe639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bc:5f:09:b1:e9:2b:ae:8f:b4:57:e2:a4:d8:6c:dd:54:67: b5:36:fe:c0:70:2c:c4:ee:45:25:97:aa:83:56:d4:9d:7b:44: 51:23:0b:98:b0:64:bd:69:25:95:06:c8:aa:34:6e:ee:e9:e5: 89:de:a4:51:67:04:95:37:7c:db:39:6f:5f:cc:1a:f0:9c:24: 9e:ee:d0:ca:ba:a8:ca:f6:1f:c5:06:50:34:d4:ea:de:95:49: cf:2c:86:33:44:3c:56:59:e5:d7:8c:07:ce:34:1c:8f:c9:93: d8:02:41:68:7e:e6:c9:b8:a8:bb:ab:82:6b:f7:e5:90:29:a4: b7:09:51:05:09:a9:e9:7d:60:38:6e:2b:91:b4:17:2b:3c:96: b2:67:60:c0:31:5a:d6:f9:d5:b0:a2:4f:5c:48:1e:9d:30:90: d1:5d:63:68:cb:cd:6a:f2:2c:07:51:b9:e4:1d:1e:61:7a:2f: d2:be:42:1f:bc:2b:9d:13:95:59:b0:88:17:b5:d7:00:b3:05: 24:b6:63:c6:35:75:f2:d1:ca:3e:ea:eb:f3:38:f3:89:a0:ca: 39:24:65:4c:26:c7:03:07:ed:61:24:2b:2d:e6:a0:9d:ab:5f: 4b:ed:c3:16:25:e8:e9:28:a5:b7:10:d4:eb:aa:19:19:ff:91: 08:8e:11:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdl6zvXvfBrLnCLQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2VjYWQ1YTUtYmU1YS00MjJmLWJkNzItZDdhYjY4NmU4ZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmkQiOkTytY3Kih1ysLJCdomMwMly9RUwi47 L9j4s+sMeOLSgKbBXuh/uNqhHe4k07v9S0UmOzr51LFkjhXO+1wvVOBn/16MJKD/ l+fo+2YDlUM3r/x1keM1GZygoamre+Mo8q6FyxLVk47XfjsSftu4wCF6PM0Zi+VG Hm2wq73W/59YocTSJ11HS/PmtXAdR1S/3cdWng7BLDbnw/atGP8455iKuZYR3Cae qFtXPe2ln2kandAzxeGYWwQiGOS1d3NknDkXmWkblzyUJWRrqBDSBeDe5q7gsBzR 9YLgRp/uUGAjyTEPXzAMpES88jvcLrIZ1VRX8y4jgUdHU4le8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElK552d0dX38b6d7e0nuDMpdPpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzUzNDlkM2UtMzdjMC0z MDZjLWIxZDItOTA2MTlkNWZlNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC8Xwmx6Suuj7RX4qTYbN1UZ7U2/sBwLMTuRSWXqoNW1J17RFEjC5iw ZL1pJZUGyKo0bu7p5YnepFFnBJU3fNs5b1/MGvCcJJ7u0Mq6qMr2H8UGUDTU6t6V Sc8shjNEPFZZ5deMB840HI/Jk9gCQWh+5sm4qLurgmv35ZAppLcJUQUJqel9YDhu K5G0Fys8lrJnYMAxWtb51bCiT1xIHp0wkNFdY2jLzWryLAdRueQdHmF6L9K+Qh+8 K50TlVmwiBe11wCzBSS2Y8Y1dfLRyj7q6/M484mgyjkkZUwmxwMH7WEkKy3moJ2r X0vtwxYl6OkopbcQ1OuqGRn/kQiOEeo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:49 2025 by rpki-client