$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa File: ffefb04b-439d-329a-b0a7-11b8923ec659.roa (raw, json) Hash identifier: lpIvzSZ3Q5R7iozQ7EYhg6wvT/0A7dbdckSLlKf9z30= Subject key identifier: 3D:AC:B3:01:91:DB:32:F7:6A:15:D9:84:52:83:9A:CA:DE:AD:78:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC87678AB8735B73438280660 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.68.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:78:ab:87:35:b7:34:38:28:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=8b7f9162-a08b-4471-ae2e-3d9818fb0599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:b3:3c:13:c5:46:76:04:79:3e:f7:7e:09: 45:eb:08:57:3a:da:13:80:4a:22:3b:64:c3:8e:b7: 4d:12:b6:e4:5d:d6:4c:f2:67:2f:c9:61:44:34:31: 98:8e:96:4f:7f:4a:4a:24:9f:3f:6f:da:e2:e0:53: 33:56:47:b5:9c:4a:49:ec:c4:1c:65:b5:83:a1:ac: 1e:c0:b9:8c:f1:14:7a:96:1c:18:31:da:ad:78:ac: 2e:88:c0:a3:4e:cc:67:02:0c:01:c4:55:aa:15:f6: 9c:b8:39:63:56:4c:3b:7c:f2:d2:a7:b3:3e:93:1d: db:b3:8e:0c:c5:90:76:e8:f8:4f:08:00:db:e8:e1: 29:9d:ee:f5:cd:e0:71:ad:d1:80:d6:32:64:1b:a9: dc:b4:61:b3:03:15:db:a2:13:e6:ca:ae:cd:a5:af: c0:f4:5b:59:e7:87:6e:ef:cc:6c:e3:05:3e:1f:de: 67:06:f8:95:be:92:b7:aa:e2:5f:7d:68:1f:1c:5d: 33:75:b9:e8:7e:30:9a:f3:ad:32:51:5c:5f:2f:6e: f6:7f:1f:d7:4c:3a:3a:39:e6:e2:4c:a2:24:48:3d: b6:21:16:d4:c4:9b:e2:32:a1:d0:97:77:75:62:e3: 9d:70:d8:2d:23:a4:b4:e0:b7:59:40:c0:fa:55:58: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AC:B3:01:91:DB:32:F7:6A:15:D9:84:52:83:9A:CA:DE:AD:78:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:87:cf:7c:5b:69:6c:75:24:56:f0:0a:02:47:7c:3f:40:79: 7e:38:e5:40:74:e6:26:54:bb:aa:76:10:85:22:01:df:e1:92: c2:40:91:99:aa:34:f9:fc:c8:a7:15:02:dd:ac:be:e6:6f:14: b5:34:8d:c4:e1:d8:1c:85:11:7d:4f:25:f3:71:73:ab:aa:81: ec:d9:60:a1:20:43:e1:0e:0e:61:08:5a:b4:b9:f9:9e:24:1b: 5e:b1:a7:f3:0c:b2:ec:19:08:f9:a1:ba:39:e5:70:33:77:b0: 4d:61:64:33:45:d3:89:9c:de:05:0d:ef:00:65:18:5b:e6:21: b2:ae:fc:1b:26:59:68:79:ab:09:33:d7:28:b0:64:a6:3c:6f: 14:0e:db:fb:72:c9:3e:1d:4a:0b:b8:4f:1b:24:59:f2:a2:98: 07:61:d8:40:2d:0d:e0:9f:5b:80:34:47:22:3b:d0:66:4e:99: bb:25:bf:fe:08:6b:71:f0:47:52:0d:ad:be:c7:26:c5:08:93: 35:4a:5c:9a:78:f1:0c:82:4d:a8:aa:c7:a3:63:4c:81:62:07: 33:d0:31:56:5b:5e:70:4c:80:5e:15:c4:b4:5b:ec:c1:64:0a: 3c:e3:14:4b:59:d1:76:91:a9:fe:09:70:4a:eb:8d:40:ff:ac: 77:b9:2d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnirhzW3NDgoBmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk OGI3ZjkxNjItYTA4Yi00NDcxLWFlMmUtM2Q5ODE4ZmIwNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKezPBPFRnYEeT73fglF6whXOtoTgEoiO2TD jrdNErbkXdZM8mcvyWFENDGYjpZPf0pKJJ8/b9ri4FMzVke1nEpJ7MQcZbWDoawe wLmM8RR6lhwYMdqteKwuiMCjTsxnAgwBxFWqFfacuDljVkw7fPLSp7M+kx3bs44M xZB26PhPCADb6OEpne71zeBxrdGA1jJkG6nctGGzAxXbohPmyq7Npa/A9FtZ54du 78xs4wU+H95nBviVvpK3quJffWgfHF0zdbnofjCa860yUVxfL272fx/XTDo6Oebi TKIkSD22IRbUxJviMqHQl3d1YuOdcNgtI6S04LdZQMD6VVhD0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2sswGR2zL3ahXZhFKDmsrerXg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmZlZmIwNGItNDM5ZC0z MjlhLWIwYTctMTFiODkyM2VjNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2Hz3xbaWx1JFbwCgJHfD9AeX445UB05iZUu6p2EIUiAd/hksJAkZmq NPn8yKcVAt2svuZvFLU0jcTh2ByFEX1PJfNxc6uqgezZYKEgQ+EODmEIWrS5+Z4k G16xp/MMsuwZCPmhujnlcDN3sE1hZDNF04mc3gUN7wBlGFvmIbKu/BsmWWh5qwkz 1yiwZKY8bxQO2/tyyT4dSgu4TxskWfKimAdh2EAtDeCfW4A0RyI70GZOmbslv/4I a3HwR1INrb7HJsUIkzVKXJp48QyCTaiqx6NjTIFiBzPQMVZbXnBMgF4VxLRb7MFk CjzjFEtZ0XaRqf4JcErrjUD/rHe5LTs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:37 2025 by rpki-client