$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea889f97-d597-3f31-a846-eaa18b6fa964.roa File: ea889f97-d597-3f31-a846-eaa18b6fa964.roa (raw, json) Hash identifier: /fjmr1BoSWFV4rhV1Wzi/RwmP+JgKeKgDAKe/rZnf9k= Subject key identifier: 47:DF:FA:FD:85:4D:7A:04:09:1E:6F:5B:09:BF:3B:5D:D7:46:F9:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D14FCF5549E9328925E300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea889f97-d597-3f31-a846-eaa18b6fa964.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 396982 IP address blocks: 172.68.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:4f:cf:55:49:e9:32:89:25:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=466ad20c-ad00-4cd8-9169-156c063fc8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:27:09:fa:de:cf:72:61:8d:49:a6:eb:bf: 15:e3:71:bb:ee:40:89:16:7b:7e:2c:0e:ba:e2:0d: 95:25:77:f1:e9:fc:6f:d5:64:12:5a:00:29:c4:a7: f6:1c:ad:1a:85:9b:a1:95:b5:45:9c:dc:a7:c4:a4: e5:a0:2c:25:e2:65:b0:0f:ee:d5:f5:ef:43:aa:4f: a1:e4:33:eb:c2:74:c5:4d:cb:d2:46:0c:75:76:f8: 36:e3:ae:b9:c0:d1:de:1b:d1:3f:45:b8:d3:61:ac: ff:1f:07:b6:64:83:3c:68:c0:7d:32:49:d7:6d:63: a1:50:75:b2:34:51:15:e2:e0:e6:90:c8:ec:be:43: 2e:85:9c:68:9f:b9:fe:13:be:ea:cb:a5:8e:5b:72: df:3b:f6:bd:4d:16:1a:00:32:ce:82:b7:34:dd:64: 82:02:64:68:12:6d:b6:c4:b2:d6:fc:0a:72:c8:51: 77:2d:47:01:e4:63:b6:0d:66:5a:2e:66:c2:f8:c5: e4:fe:10:e1:bf:25:b5:1c:31:5e:a7:02:37:8d:b6: 21:ce:14:f7:20:1f:5b:a3:ef:ad:3b:26:29:11:1b: 0e:c1:fd:82:4d:3c:0b:d8:57:71:b4:bc:54:52:32: 55:81:0d:97:c3:cc:d5:20:41:22:57:af:59:8d:10: bd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DF:FA:FD:85:4D:7A:04:09:1E:6F:5B:09:BF:3B:5D:D7:46:F9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea889f97-d597-3f31-a846-eaa18b6fa964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:30:12:3d:d1:f3:b8:0d:78:0b:85:70:43:7e:77:3e:64:c5: 3e:b4:a0:30:c4:06:27:57:79:32:ad:d5:f5:37:e8:34:de:17: 71:9b:98:32:64:e8:e5:0b:63:a6:a1:92:67:8a:12:ac:f0:ff: 6e:72:32:3e:01:60:38:5b:8b:9c:13:a3:05:08:f6:95:17:25: e8:3f:a2:3f:c4:5e:6c:95:da:8a:17:70:a2:bb:f0:fb:22:39: d2:2e:02:0a:d2:87:45:26:08:62:0c:21:9f:1c:65:f0:c6:b9: 08:c1:51:0b:18:28:f9:c1:07:6f:07:c7:ec:78:c0:68:0f:76: 8f:15:de:f0:e8:7e:3f:e4:7b:ba:59:e3:b8:55:6f:01:fb:7c: 90:64:0d:3b:03:ca:44:81:c7:9f:e9:a2:ae:5d:3c:10:d4:29: d6:0f:45:4b:29:58:63:43:85:ac:22:f1:bf:8c:56:cc:cb:d7: 90:f5:d6:4b:52:12:53:59:85:a0:4b:12:a6:3a:fd:ab:00:de: d6:25:83:94:de:7a:92:1d:88:ae:75:15:25:44:cd:aa:78:c9: 36:59:ac:dc:1e:90:e5:ab:b2:e7:3a:d5:c8:0c:a4:d1:b7:19: af:da:67:ed:5e:ab:97:59:ff:97:c0:eb:d4:ec:ea:4d:a8:9e: d2:4e:0e:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0U/PVUnpMokl4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NDY2YWQyMGMtYWQwMC00Y2Q4LTkxNjktMTU2YzA2M2ZjOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeYnCfrez3JhjUmm678V43G77kCJFnt+LA66 4g2VJXfx6fxv1WQSWgApxKf2HK0ahZuhlbVFnNynxKTloCwl4mWwD+7V9e9Dqk+h 5DPrwnTFTcvSRgx1dvg24665wNHeG9E/RbjTYaz/Hwe2ZIM8aMB9MknXbWOhUHWy NFEV4uDmkMjsvkMuhZxon7n+E77qy6WOW3LfO/a9TRYaADLOgrc03WSCAmRoEm22 xLLW/ApyyFF3LUcB5GO2DWZaLmbC+MXk/hDhvyW1HDFepwI3jbYhzhT3IB9bo++t OyYpERsOwf2CTTwL2FdxtLxUUjJVgQ2Xw8zVIEEiV69ZjRC9ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEff+v2FTXoECR5vWwm/O13XRvm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWE4ODlmOTctZDU5Ny0z ZjMxLWE4NDYtZWFhMThiNmZhOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwwEj3R87gNeAuFcEN+dz5kxT60oDDEBidXeTKt1fU36DTeF3GbmDJk 6OULY6ahkmeKEqzw/25yMj4BYDhbi5wTowUI9pUXJeg/oj/EXmyV2ooXcKK78Psi OdIuAgrSh0UmCGIMIZ8cZfDGuQjBUQsYKPnBB28Hx+x4wGgPdo8V3vDofj/ke7pZ 47hVbwH7fJBkDTsDykSBx5/poq5dPBDUKdYPRUspWGNDhawi8b+MVszL15D11ktS ElNZhaBLEqY6/asA3tYlg5TeepIdiK51FSVEzap4yTZZrNwekOWrsuc61cgMpNG3 Ga/aZ+1eq5dZ/5fA69Ts6k2ontJODv0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:18:41 2025 by rpki-client