$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fae6929e-13de-3bca-9176-21e245c1c9d1.roa File: fae6929e-13de-3bca-9176-21e245c1c9d1.roa (raw, json) Hash identifier: 8wdT65Df3fG2cRU50EuDKfOhUuXxeJ4eH9Se/BB9cHo= Subject key identifier: 26:2F:F9:03:CD:15:0B:C1:E5:5B:1D:5D:4E:30:BE:9C:40:72:93:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB411523A698DBE2F8D23FC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fae6929e-13de-3bca-9176-21e245c1c9d1.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:15:23:a6:98:db:e2:f8:d2:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=2b0c77a9-f3c7-402b-bff4-c24c3c23916b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:ab:20:6d:c4:d3:f8:aa:39:49:4c:df:18: 6f:75:66:7d:d2:01:d4:0c:ac:54:65:8f:ca:16:db: b0:e4:ee:2d:c2:24:19:3c:80:17:ee:b8:f1:fc:3a: fe:59:74:b2:3c:cc:40:27:56:06:8c:12:a2:17:12: d6:d3:39:0f:5d:40:d7:c6:24:f5:6d:d7:9d:70:68: 96:de:b3:a4:9f:90:65:a8:bb:2f:b9:a9:04:4a:d4: 30:ce:0c:49:f4:54:56:1d:65:ff:be:97:d2:2b:6b: 53:db:83:62:23:93:dd:8c:ea:b1:49:99:e1:83:b5: a9:47:19:f2:43:d3:95:98:25:b5:39:a5:95:7f:90: 86:f5:42:82:2d:3d:1c:10:61:76:ee:1b:c2:14:f6: dc:7f:3f:04:e2:8e:c6:61:74:d8:15:88:4f:12:37: 3c:58:58:2f:8c:83:33:a5:ff:9c:11:2f:11:60:49: 4e:68:80:e1:f1:3d:5d:b2:50:d2:5d:09:4a:bf:e7: 16:70:0e:4a:ba:f9:ec:a8:93:73:3c:39:62:7a:c5: 8b:66:0e:d9:69:04:4e:5c:ff:d2:e6:e3:58:75:d0: 8b:e4:5c:d1:bf:bb:f3:f3:c0:62:33:70:fe:71:b9: 82:d8:8f:d4:f4:ea:0f:a5:5c:7c:a2:76:26:2f:63: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2F:F9:03:CD:15:0B:C1:E5:5B:1D:5D:4E:30:BE:9C:40:72:93:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fae6929e-13de-3bca-9176-21e245c1c9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6c:4e:5a:57:ef:8c:03:10:1f:fc:a5:4e:4e:25:4b:91:05: 82:8a:76:73:91:9e:04:5f:d9:84:d1:b8:2c:e5:80:ba:57:ee: f9:37:26:48:93:fd:3e:31:31:8d:00:10:22:c7:95:03:a0:28: 77:38:a6:14:93:86:e8:46:e2:c6:21:7e:1c:4e:09:d4:b0:88: 00:62:be:3b:fd:32:6a:39:b2:45:a2:c3:31:22:36:36:52:a8: 77:85:14:ea:56:25:87:dc:60:50:4b:b5:43:2b:cf:8d:6b:e4: e8:6e:42:db:f8:9e:54:90:da:d6:a2:19:f7:42:b1:0e:cf:cc: d7:67:04:15:a0:27:e7:b4:9c:7c:d0:c9:ad:a2:06:b6:5d:23: d3:c6:bb:08:7b:32:eb:94:5e:95:f3:6c:b1:c3:4a:d5:92:dd: 55:fb:a6:26:0f:c2:83:d3:92:55:24:cf:74:08:e3:bf:98:0c: 39:52:82:9e:e0:e4:25:7c:2d:70:10:16:c4:89:3c:14:48:ed: ea:ba:53:2d:e5:b5:56:76:c3:02:d3:b0:a9:e0:1b:4d:e0:07: d5:aa:48:b2:8a:9b:ef:fd:2f:df:86:ca:e2:28:be:26:b4:50: 47:95:e5:bc:cc:3f:e2:a7:ef:97:c2:88:2b:72:51:50:39:20: 1f:56:25:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRUjppjb4vjSP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MmIwYzc3YTktZjNjNy00MDJiLWJmZjQtYzI0YzNjMjM5MTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkGrIG3E0/iqOUlM3xhvdWZ90gHUDKxUZY/K Ftuw5O4twiQZPIAX7rjx/Dr+WXSyPMxAJ1YGjBKiFxLW0zkPXUDXxiT1bdedcGiW 3rOkn5BlqLsvuakEStQwzgxJ9FRWHWX/vpfSK2tT24NiI5PdjOqxSZnhg7WpRxny Q9OVmCW1OaWVf5CG9UKCLT0cEGF27hvCFPbcfz8E4o7GYXTYFYhPEjc8WFgvjIMz pf+cES8RYElOaIDh8T1dslDSXQlKv+cWcA5KuvnsqJNzPDliesWLZg7ZaQROXP/S 5uNYddCL5FzRv7vz88BiM3D+cbmC2I/U9OoPpVx8onYmL2PRhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYv+QPNFQvB5VsdXU4wvpxAcpNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmFlNjkyOWUtMTNkZS0z YmNhLTkxNzYtMjFlMjQ1YzFjOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpsTlpX74wDEB/8pU5OJUuRBYKKdnORngRf2YTRuCzlgLpX7vk3JkiT /T4xMY0AECLHlQOgKHc4phSThuhG4sYhfhxOCdSwiABivjv9Mmo5skWiwzEiNjZS qHeFFOpWJYfcYFBLtUMrz41r5OhuQtv4nlSQ2taiGfdCsQ7PzNdnBBWgJ+e0nHzQ ya2iBrZdI9PGuwh7MuuUXpXzbLHDStWS3VX7piYPwoPTklUkz3QI47+YDDlSgp7g 5CV8LXAQFsSJPBRI7eq6Uy3ltVZ2wwLTsKngG03gB9WqSLKKm+/9L9+GyuIovia0 UEeV5bzMP+Kn75fCiCtyUVA5IB9WJVk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:20 2025 by rpki-client