$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7baff904-2187-3e6d-a308-6053d042470c.roa File: 7baff904-2187-3e6d-a308-6053d042470c.roa (raw, json) Hash identifier: lioxC4jyuv+XEbhF/Wj4aktVBYpiXQiqwF8QOF7Bcb4= Subject key identifier: 0D:58:07:F8:6A:10:60:FF:73:F8:D3:C6:01:6A:EB:AA:B7:56:CD:A7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A81460033CEAF06A00F9ED380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7baff904-2187-3e6d-a308-6053d042470c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 13335 IP address blocks: 172.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:00:33:ce:af:06:a0:0f:9e:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=a698eb34-b83e-4544-acc0-54606ba8883a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:0f:87:6d:63:fe:fe:32:20:2c:fe:4d:54: e3:f3:c4:92:ef:53:2f:18:2a:b7:7a:f2:f0:b4:b3: f6:04:ea:73:9b:12:2c:6b:48:cb:f3:c7:80:ba:e0: b1:57:70:90:5c:da:f2:74:e0:6c:e7:35:70:24:9a: 4e:71:92:3c:b4:05:94:6b:b2:2e:15:84:5f:d2:9f: 04:23:59:33:e8:4f:d0:31:92:d1:bb:16:2f:aa:6a: 46:a1:df:44:53:c2:1d:47:9f:3b:50:8d:45:84:f6: 9e:bd:90:4e:a0:bc:6e:d4:73:29:3f:cb:a6:dd:3a: e0:67:cf:d7:07:8c:0b:a4:01:ee:b2:d2:84:17:58: 62:e1:c8:6c:36:52:4e:ff:01:da:37:72:99:fe:8c: 0f:1c:b3:8d:22:b7:bc:51:3d:8b:fb:9e:ae:63:e1: 0a:02:ed:6a:ad:fc:bb:f6:0f:0b:42:6a:80:33:b0: 92:1e:4d:8a:47:9a:30:f7:61:43:dc:c5:a7:af:86: 3a:90:07:7b:1b:5e:f2:db:b9:c9:61:94:8e:c1:c6: db:85:9f:6e:b6:57:34:56:31:49:74:e7:d8:94:93: d3:f7:67:93:4b:72:e9:00:69:8b:2e:05:f5:35:c9: 3d:9f:a4:1c:9b:03:e5:e0:ea:e4:13:10:05:3e:a9: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:07:F8:6A:10:60:FF:73:F8:D3:C6:01:6A:EB:AA:B7:56:CD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7baff904-2187-3e6d-a308-6053d042470c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b9:cf:b7:71:a8:c7:74:07:00:a3:43:b5:78:7b:ef:77:05: 0c:df:62:94:6d:fe:6f:d7:c5:df:b1:c7:00:f8:d2:83:f5:66: 33:7e:9a:3b:47:1c:fe:8b:27:e0:68:f7:ff:96:0b:92:be:47: f9:2a:86:52:b6:b2:fc:0e:c8:eb:1c:d3:f3:4f:09:11:bd:57: e9:64:f5:96:18:3b:b0:00:15:7d:c5:ad:c9:9e:14:fe:10:85: 9e:ab:38:e8:05:59:2d:13:8c:48:64:dc:2f:01:45:fa:44:d5: 19:50:67:c8:fa:ad:ef:bf:23:1e:01:13:8d:b0:b0:c0:e5:45: 35:50:88:66:e5:92:5a:8f:3d:2b:8d:45:b9:ed:e8:07:11:0b: 70:4b:0a:6c:05:e9:d2:6d:61:97:b8:c1:60:e6:f5:12:cc:b2: 36:9d:22:b1:e0:b4:6a:23:6d:0a:1a:e0:da:fd:19:a8:69:1e: fc:f0:36:3d:dc:5b:fe:8f:9c:60:c3:e0:40:34:bb:c4:a7:44: 2c:3b:08:ca:d4:05:6b:3d:3f:9b:d2:10:a6:14:c5:9d:32:57: 62:f0:a3:a9:2b:9b:4f:19:4e:b0:1b:81:c3:6d:ca:2a:bf:cc: 06:b2:25:88:ca:5c:15:9c:62:65:63:c8:06:9d:99:be:fc:1e: 26:e0:5d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgAzzq8GoA+e04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YTY5OGViMzQtYjgzZS00NTQ0LWFjYzAtNTQ2MDZiYTg4ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L0Ph21j/v4yICz+TVTj88SS71MvGCq3evLw tLP2BOpzmxIsa0jL88eAuuCxV3CQXNrydOBs5zVwJJpOcZI8tAWUa7IuFYRf0p8E I1kz6E/QMZLRuxYvqmpGod9EU8IdR587UI1FhPaevZBOoLxu1HMpP8um3TrgZ8/X B4wLpAHustKEF1hi4chsNlJO/wHaN3KZ/owPHLONIre8UT2L+56uY+EKAu1qrfy7 9g8LQmqAM7CSHk2KR5ow92FD3MWnr4Y6kAd7G17y27nJYZSOwcbbhZ9utlc0VjFJ dOfYlJPT92eTS3LpAGmLLgX1Nck9n6QcmwPl4OrkExAFPqnJnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1YB/hqEGD/c/jTxgFq66q3Vs2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2JhZmY5MDQtMjE4Ny0z ZTZkLWEzMDgtNjA1M2QwNDI0NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe5z7dxqMd0BwCjQ7V4e+93BQzfYpRt/m/Xxd+xxwD40oP1ZjN+mjtH HP6LJ+Bo9/+WC5K+R/kqhlK2svwOyOsc0/NPCRG9V+lk9ZYYO7AAFX3FrcmeFP4Q hZ6rOOgFWS0TjEhk3C8BRfpE1RlQZ8j6re+/Ix4BE42wsMDlRTVQiGblklqPPSuN Rbnt6AcRC3BLCmwF6dJtYZe4wWDm9RLMsjadIrHgtGojbQoa4Nr9GahpHvzwNj3c W/6PnGDD4EA0u8SnRCw7CMrUBWs9P5vSEKYUxZ0yV2Lwo6krm08ZTrAbgcNtyiq/ zAayJYjKXBWcYmVjyAadmb78HibgXdY= -----END CERTIFICATE-----Generated at Thu Jul 24 11:59:28 2025 by rpki-client