$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc6e3d1f-aa76-3c3f-8221-9ef6fe01f5fa.roa File: dc6e3d1f-aa76-3c3f-8221-9ef6fe01f5fa.roa (raw, json) Hash identifier: VrO7PF1qTHfUKmOmac8YltrKoFzjfiVWqgXqJEbEEVE= Subject key identifier: 64:66:E8:9E:42:80:E0:46:6F:81:FF:EA:CF:19:7B:49:40:5F:F2:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC87676D01E313CD2C14260E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc6e3d1f-aa76-3c3f-8221-9ef6fe01f5fa.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:76:d0:1e:31:3c:d2:c1:42:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=45da3468-6865-4c1b-8119-98ab18d52961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:6c:9d:88:29:27:86:4b:91:5b:bf:84:fa: 45:47:79:16:34:5d:7c:12:13:e5:48:dd:bb:78:fc: cc:12:fd:18:18:4a:91:24:48:97:3d:29:83:44:3d: 6b:b7:76:af:1c:3e:0b:d3:46:8b:ec:6b:20:e3:43: 97:c9:35:9a:3b:7d:c7:61:da:c0:f1:42:03:5a:fb: 22:fe:c3:1b:34:a9:bf:ea:d3:7a:32:d2:15:9c:59: 1b:7f:a0:f2:4d:84:b8:c7:1c:a7:32:4f:01:6d:c8: 22:22:98:36:de:81:51:c7:a7:27:42:73:96:bb:d4: 0e:0b:c3:c4:05:c0:a3:62:63:50:a6:99:47:c7:b7: 47:a9:af:61:09:d2:59:a2:7c:80:d9:fa:88:70:b3: 21:1c:72:7c:92:e4:bb:ac:32:d3:8b:bc:3c:f5:64: 42:5a:09:b9:5e:93:69:85:87:76:62:95:ab:7d:eb: 1b:c8:25:80:ae:47:f2:00:37:50:ec:a7:b3:0b:8b: 89:32:d5:33:08:11:b3:42:4c:dc:64:10:ce:f4:24: e4:de:21:c7:11:76:b4:41:7e:55:b6:9f:b6:ee:83: 08:34:70:ae:84:d5:4e:85:43:80:ea:8b:78:6a:51: a0:4c:d6:cf:17:79:af:44:b2:9f:54:53:cb:73:e0: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:66:E8:9E:42:80:E0:46:6F:81:FF:EA:CF:19:7B:49:40:5F:F2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc6e3d1f-aa76-3c3f-8221-9ef6fe01f5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7e:ba:ac:33:3b:42:95:b5:05:0e:98:11:8f:91:b8:a9:61: 20:59:e1:b4:a2:1f:14:e5:1b:ac:40:3a:ff:37:8b:26:ca:09: 02:64:b8:43:6a:42:82:1c:17:5f:e6:7c:60:a5:79:88:99:31: 30:1a:5c:64:08:db:0d:53:10:5a:4e:01:cb:3f:fa:49:08:c9: 91:a7:23:f0:19:14:0a:77:6f:54:3e:71:d6:ad:f1:e0:b8:3b: cb:c9:c2:10:75:b6:6d:09:17:5a:7f:1d:89:40:59:71:29:1a: bf:d4:b3:0a:41:bf:1d:b6:8c:57:16:77:61:4b:a0:21:27:1c: 6e:93:8a:d2:7b:5c:2c:f5:ae:2b:aa:a2:c2:6d:0d:9c:62:ea: 05:52:14:58:cb:c7:dd:d1:bc:b0:3d:96:a8:57:ba:67:76:d8: 15:88:35:49:b9:e2:2f:3b:0a:e8:20:35:83:32:94:2b:b8:8c: 65:5e:f9:27:1c:98:8b:41:c9:2e:d9:cb:fe:d1:13:c5:b1:8c: a8:03:6c:b7:80:9f:eb:5a:1c:52:d3:bc:c1:4f:a4:0e:d1:0b: 58:38:0c:4a:e3:a9:8a:0f:a1:bf:bb:3d:4b:1b:85:d6:4a:f4: f3:8a:fe:c1:0c:50:2f:10:45:2b:2b:0d:5c:cb:ae:be:02:ba: 40:0a:be:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnbQHjE80sFCYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NDVkYTM0NjgtNjg2NS00YzFiLTgxMTktOThhYjE4ZDUyOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR9snYgpJ4ZLkVu/hPpFR3kWNF18EhPlSN27 ePzMEv0YGEqRJEiXPSmDRD1rt3avHD4L00aL7Gsg40OXyTWaO33HYdrA8UIDWvsi /sMbNKm/6tN6MtIVnFkbf6DyTYS4xxynMk8BbcgiIpg23oFRx6cnQnOWu9QOC8PE BcCjYmNQpplHx7dHqa9hCdJZonyA2fqIcLMhHHJ8kuS7rDLTi7w89WRCWgm5XpNp hYd2YpWrfesbyCWArkfyADdQ7KezC4uJMtUzCBGzQkzcZBDO9CTk3iHHEXa0QX5V tp+27oMINHCuhNVOhUOA6ot4alGgTNbPF3mvRLKfVFPLc+BJPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRm6J5CgOBGb4H/6s8Ze0lAX/JaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGM2ZTNkMWYtYWE3Ni0z YzNmLTgyMjEtOWVmNmZlMDFmNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN+uqwzO0KVtQUOmBGPkbipYSBZ4bSiHxTlG6xAOv83iybKCQJkuENq QoIcF1/mfGCleYiZMTAaXGQI2w1TEFpOAcs/+kkIyZGnI/AZFAp3b1Q+cdat8eC4 O8vJwhB1tm0JF1p/HYlAWXEpGr/UswpBvx22jFcWd2FLoCEnHG6TitJ7XCz1riuq osJtDZxi6gVSFFjLx93RvLA9lqhXumd22BWINUm54i87CuggNYMylCu4jGVe+Scc mItByS7Zy/7RE8WxjKgDbLeAn+taHFLTvMFPpA7RC1g4DErjqYoPob+7PUsbhdZK 9POK/sEMUC8QRSsrDVzLrr4CukAKvgA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:10:51 2025 by rpki-client