$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa File: efd0da62-170f-3a0e-b80d-9db169fdb224.roa (raw, json) Hash identifier: l1QbN6J4hqy8JbVIChVfVFCq0LB1rIZgGoafq+vAYZ8= Subject key identifier: 70:0A:4D:AA:2C:0D:19:53:8C:91:0E:01:CC:D3:DD:AA:77:77:A1:5C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB40FEF6CB444C98822AB680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:fe:f6:cb:44:4c:98:82:2a:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=00b1247d-4806-49ae-b3c0-f1e0b89d01be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fc:55:db:65:20:70:a7:cd:e7:6a:78:52:ae: 79:c0:ed:37:01:30:a0:f5:f4:4f:87:5d:18:b1:c0: fd:33:54:e1:35:bd:fd:c0:7e:9c:ff:0c:87:5e:f8: c5:3c:90:ff:80:94:f2:ed:03:08:4c:26:04:63:10: 3d:1b:25:f5:34:7c:2e:56:34:b1:b4:87:19:72:72: 70:cf:72:da:b3:ec:83:16:ba:59:4d:81:96:81:b6: 8b:bf:72:5a:6b:0f:4f:72:c6:f5:64:24:83:ce:d6: 58:b4:ac:1b:8e:6f:ff:39:a3:6e:7d:31:69:96:4d: ad:80:4f:c9:b0:b8:2a:c5:b6:90:d0:f8:81:77:20: 29:b2:17:91:d6:db:a3:02:1e:94:ce:72:3c:b9:48: 7c:25:fd:a5:82:44:f7:f5:97:50:2b:69:f5:16:d2: a8:9d:68:c1:6d:46:fe:88:ef:e9:cb:b7:ba:ab:7f: 3a:d6:1a:28:aa:76:c8:2e:b3:22:1a:a5:af:45:4b: 13:fc:ca:79:46:eb:9c:df:69:30:19:31:4f:c1:2d: 19:72:73:58:b2:9a:d5:47:04:1c:85:03:39:36:1c: 6e:9c:67:fc:ab:ac:11:3f:1d:da:dd:97:36:a7:2a: 3d:b7:1f:17:82:a6:71:30:5d:86:db:df:5f:ed:0d: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0A:4D:AA:2C:0D:19:53:8C:91:0E:01:CC:D3:DD:AA:77:77:A1:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:37:f7:a8:67:7c:e3:8e:e7:99:44:47:f9:f6:d9:9c:72:72: ef:ed:7c:9f:11:c7:44:3d:70:06:15:64:c4:90:e7:10:95:a8: 43:dd:91:c9:6e:c3:3d:20:40:3d:5a:0c:58:ce:cf:36:3d:4a: 16:fd:35:08:8b:43:84:60:1d:3f:2f:b3:59:88:c9:71:53:f6: d7:b6:3e:8f:ca:72:3d:50:8b:1b:a5:cf:ee:ca:2c:4f:47:de: b9:cc:42:87:84:02:a9:4e:f1:f5:2d:9c:28:40:6f:55:f5:c7: 71:f0:9a:b7:ed:ed:2d:f9:a0:17:ea:c3:ce:f2:41:57:ea:4e: e2:c6:6b:82:21:24:ed:c5:fc:f1:0c:fc:55:81:3c:15:8e:0d: 2f:a0:e2:2b:e9:6b:6a:eb:94:1e:82:bc:4e:f2:38:3b:71:a4: 51:fc:7f:a1:1a:52:b9:6d:3d:0e:8b:72:5f:2e:50:79:89:ae: 12:38:be:ec:f8:c6:5f:5c:d9:c0:98:08:0f:c4:9b:2e:7d:d1: 84:8d:70:3c:6d:6b:86:5d:12:39:70:92:c4:72:52:0e:6d:00: 82:75:1b:7e:3d:92:5e:70:67:df:68:eb:7b:40:3f:a9:b0:f5: a8:b3:6c:03:a1:da:8d:a7:1e:68:ac:f8:f6:75:e4:d6:62:02: 52:d4:30:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQP72y0RMmIIqtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDBiMTI0N2QtNDgwNi00OWFlLWIzYzAtZjFlMGI4OWQwMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivxV22UgcKfN52p4Uq55wO03ATCg9fRPh10Y scD9M1ThNb39wH6c/wyHXvjFPJD/gJTy7QMITCYEYxA9GyX1NHwuVjSxtIcZcnJw z3Las+yDFrpZTYGWgbaLv3Jaaw9Pcsb1ZCSDztZYtKwbjm//OaNufTFplk2tgE/J sLgqxbaQ0PiBdyApsheR1tujAh6UznI8uUh8Jf2lgkT39ZdQK2n1FtKonWjBbUb+ iO/py7e6q3861hooqnbILrMiGqWvRUsT/Mp5Ruuc32kwGTFPwS0ZcnNYsprVRwQc hQM5NhxunGf8q6wRPx3a3Zc2pyo9tx8XgqZxMF2G299f7Q1sOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAKTaosDRlTjJEOAczT3ap3d6FcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWZkMGRhNjItMTcwZi0z YTBlLWI4MGQtOWRiMTY5ZmRiMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0396hnfOOO55lER/n22Zxycu/tfJ8Rx0Q9cAYVZMSQ5xCVqEPdkclu wz0gQD1aDFjOzzY9Shb9NQiLQ4RgHT8vs1mIyXFT9te2Po/Kcj1Qixulz+7KLE9H 3rnMQoeEAqlO8fUtnChAb1X1x3Hwmrft7S35oBfqw87yQVfqTuLGa4IhJO3F/PEM /FWBPBWODS+g4ivpa2rrlB6CvE7yODtxpFH8f6EaUrltPQ6Lcl8uUHmJrhI4vuz4 xl9c2cCYCA/Emy590YSNcDxta4ZdEjlwksRyUg5tAIJ1G349kl5wZ99o63tAP6mw 9aizbAOh2o2nHmis+PZ15NZiAlLUMOA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:54 2025 by rpki-client