$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8d35b3c-9cc7-3396-aa3e-edb6894499a8.roa File: d8d35b3c-9cc7-3396-aa3e-edb6894499a8.roa (raw, json) Hash identifier: hazY/+uDq2O6HZy8rr5mYjS90JRdCTfPqYxQKD93+Yk= Subject key identifier: 9A:15:BA:73:30:7B:56:C4:81:C3:44:72:D9:7E:B3:8F:6E:1E:D6:EB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB4115150BFD5FCF17073100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8d35b3c-9cc7-3396-aa3e-edb6894499a8.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:15:15:0b:fd:5f:cf:17:07:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=e3e1f09b-31ca-49b8-a7c4-79c1f897a96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:9d:56:22:80:37:a2:3b:82:80:c0:05:6a: c2:b3:c0:c0:39:b9:85:12:86:07:2a:b2:2a:28:06: 00:0a:6c:c5:2b:ff:ee:94:49:9c:ce:25:75:f7:25: c8:ba:c2:34:a9:69:f8:5d:c2:67:f6:fb:a4:3a:a6: 88:ff:df:26:a6:d4:ac:02:86:31:fb:39:33:9e:19: 6e:d9:5e:ed:5a:05:cb:67:ed:90:ad:2d:25:ec:ee: eb:a4:2f:f7:a6:a9:3d:b9:ac:ca:ab:0d:3e:3f:62: af:1a:6e:1f:5d:49:85:76:5e:16:48:e4:97:34:7c: 8f:e7:c6:4b:8d:6b:b5:1b:44:fe:c6:9d:e7:a0:51: 95:f4:08:f5:fe:13:b0:8c:8d:83:2b:6b:02:1a:a0: 67:a4:3e:02:56:0a:c2:49:b1:71:b8:79:a7:0a:3c: f8:ac:bf:07:0f:16:14:1e:df:f3:ad:67:5e:a2:93: e0:a4:e6:3b:42:dc:43:51:bf:57:85:52:14:7f:0b: 7c:02:99:fa:ec:f1:8b:7d:b7:89:91:0d:26:22:80: d3:dc:6c:16:aa:78:f8:b8:04:76:2e:48:13:fe:d1: c4:97:24:c3:96:f6:2e:6b:fb:9c:79:bb:a1:5b:c6: 05:19:7e:e0:87:44:02:33:7f:ff:cb:44:e9:e0:02: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:15:BA:73:30:7B:56:C4:81:C3:44:72:D9:7E:B3:8F:6E:1E:D6:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8d35b3c-9cc7-3396-aa3e-edb6894499a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:df:27:75:2c:53:d4:53:36:51:8a:0f:dd:9a:0f:3e:87:c3: 95:2f:c0:27:13:03:0a:57:7d:e1:6f:a4:fa:44:c1:d3:21:88: 32:7c:23:08:09:eb:f8:76:68:d4:47:cd:c1:36:c5:45:17:de: f0:54:cb:fd:32:1f:36:7f:89:6c:77:f3:9f:c3:c6:a1:d2:c2: b9:83:97:d3:4f:e3:75:ff:d8:ea:75:6b:56:e8:43:77:11:18: 0e:37:bb:d3:76:60:f5:88:94:3a:ac:17:cb:01:49:fd:a5:23: 35:b1:19:3e:18:47:9e:13:d9:e1:0f:03:56:2c:84:58:8d:d7: 8d:b6:4a:31:7a:61:37:73:cb:2e:6d:aa:36:79:f7:4a:24:77: 0a:70:b2:73:c5:21:2e:cb:91:bd:9d:48:59:9d:87:8e:cf:ba: 80:47:11:b6:1f:fb:4b:3c:6e:bf:92:6c:5a:79:87:f6:7c:f4: e5:ef:64:27:26:77:d8:b5:8c:f7:92:1f:07:b9:e2:40:78:ee: 41:06:7c:5a:04:dc:b4:97:ba:02:44:6e:19:b5:18:db:ab:f4: 20:f4:62:c8:73:01:95:3d:77:d9:74:a3:5d:91:b7:7f:24:17: 39:0e:d0:4b:1b:66:48:58:ec:ca:59:b9:8b:d3:9e:c6:6f:36: 92:5d:a0:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRUVC/1fzxcHMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZTNlMWYwOWItMzFjYS00OWI4LWE3YzQtNzljMWY4OTdhOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzydViKAN6I7goDABWrCs8DAObmFEoYHKrIq KAYACmzFK//ulEmcziV19yXIusI0qWn4XcJn9vukOqaI/98mptSsAoYx+zkznhlu 2V7tWgXLZ+2QrS0l7O7rpC/3pqk9uazKqw0+P2KvGm4fXUmFdl4WSOSXNHyP58ZL jWu1G0T+xp3noFGV9Aj1/hOwjI2DK2sCGqBnpD4CVgrCSbFxuHmnCjz4rL8HDxYU Ht/zrWdeopPgpOY7QtxDUb9XhVIUfwt8Apn67PGLfbeJkQ0mIoDT3GwWqnj4uAR2 LkgT/tHElyTDlvYua/ucebuhW8YFGX7gh0QCM3//y0Tp4AKB1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoVunMwe1bEgcNEctl+s49uHtbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDhkMzViM2MtOWNjNy0z Mzk2LWFhM2UtZWRiNjg5NDQ5OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3fJ3UsU9RTNlGKD92aDz6Hw5UvwCcTAwpXfeFvpPpEwdMhiDJ8IwgJ 6/h2aNRHzcE2xUUX3vBUy/0yHzZ/iWx385/DxqHSwrmDl9NP43X/2Op1a1boQ3cR GA43u9N2YPWIlDqsF8sBSf2lIzWxGT4YR54T2eEPA1YshFiN1422SjF6YTdzyy5t qjZ590okdwpwsnPFIS7Lkb2dSFmdh47PuoBHEbYf+0s8br+SbFp5h/Z89OXvZCcm d9i1jPeSHwe54kB47kEGfFoE3LSXugJEbhm1GNur9CD0YshzAZU9d9l0o12Rt38k FzkO0EsbZkhY7MpZuYvTnsZvNpJdoEE= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:36 2025 by rpki-client