$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63785228-354f-33e6-91fa-c717fdb1b495.roa File: 63785228-354f-33e6-91fa-c717fdb1b495.roa (raw, json) Hash identifier: pBkUCHw8XL5K3q4Wpv+Jld4VtUDiWWZSuLbFJ8GuMsc= Subject key identifier: 71:6D:80:1D:1A:ED:1D:40:50:F8:97:22:39:2E:74:AC:2C:D1:C8:37 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AF686950A5F419A6E1DAFEB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63785228-354f-33e6-91fa-c717fdb1b495.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 13335 IP address blocks: 172.68.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:95:0a:5f:41:9a:6e:1d:af:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=585173e1-ad0e-4d60-9a7d-906cb302d3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:25:3d:6a:bf:14:83:1a:2d:ef:41:54:20:eb: e6:b1:22:7e:3b:46:8e:d9:7d:88:89:5b:0e:e0:68: c3:a0:be:11:93:55:94:4a:08:5d:3c:68:10:38:99: 1f:a9:1f:36:38:2e:29:2c:03:cc:fd:99:07:9b:ea: 84:8d:01:08:ce:34:1b:dd:9e:28:59:1e:c0:de:74: 19:20:21:d0:b5:ee:f5:71:8a:1d:72:de:73:3b:e0: bf:56:0d:ab:c0:48:93:2b:68:76:cd:81:a8:a5:08: b4:ca:80:41:d6:e8:94:52:8e:3a:11:29:bc:1b:2a: 77:92:d7:8d:52:e0:57:de:c4:3a:fe:23:33:f9:5d: 25:bc:48:f5:41:13:10:45:be:84:fb:12:a6:f7:d5: 27:11:1c:4a:6b:49:76:c1:b9:e9:42:7b:78:6f:a2: b0:04:f4:85:67:7f:6c:93:52:8a:48:c6:be:14:49: f7:95:8e:f4:ad:e9:65:50:24:3b:d8:cc:8a:4c:ac: 91:e8:20:d0:cb:ba:d6:b7:1e:e7:b6:27:c1:da:b1: 4a:d9:f7:e1:ea:61:50:20:4a:16:f6:1a:95:8c:a3: e3:a3:b1:44:b3:e6:2f:16:3a:07:4b:ab:96:67:b2: bb:d0:b8:bb:6d:b2:33:5a:0c:bc:53:26:9e:a6:e1: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6D:80:1D:1A:ED:1D:40:50:F8:97:22:39:2E:74:AC:2C:D1:C8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/63785228-354f-33e6-91fa-c717fdb1b495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:16:3c:3b:7d:9d:10:68:94:0b:d0:bc:1c:5b:17:e7:38:96: a6:f0:57:dd:8a:95:49:89:8f:9d:e2:19:59:dc:fa:ee:a9:72: 73:2f:5c:94:35:b0:8b:1c:aa:41:28:e2:c5:7d:22:15:68:ed: 0e:64:dd:bd:43:b8:6b:bd:98:fd:ce:6e:f9:5e:c9:45:8e:ca: 26:59:06:b8:84:21:68:7f:c9:52:f3:3b:bb:6e:56:aa:e7:2c: d6:dc:72:50:f4:27:30:6d:5f:22:25:7f:87:cb:39:12:e8:2f: eb:8c:55:67:68:39:b2:24:86:ea:60:6c:41:34:bf:9d:87:9b: f7:31:55:fa:2b:7e:21:dc:df:56:06:95:2f:b4:2f:fc:91:c7: e5:c8:1d:b1:28:7b:29:0e:eb:e0:9a:ff:a1:b3:47:75:11:d6: 2e:81:76:2f:64:b1:57:1f:d8:56:21:7a:5c:b8:6b:35:15:6a: 9d:a3:ef:9a:7b:07:66:45:76:f3:1d:2c:c6:00:65:ff:0f:72: 44:56:7f:0a:69:b4:df:27:61:9c:cd:60:ed:5e:d5:d8:b1:ca: af:92:2f:b8:34:06:4e:9b:d5:ba:d4:13:f1:61:a3:fd:d9:be: 7a:e0:36:bb:fa:d8:72:cd:aa:8a:8e:3f:25:d2:b1:30:33:dc: ac:62:94:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpUKX0Gabh2v64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NTg1MTczZTEtYWQwZS00ZDYwLTlhN2QtOTA2Y2IzMDJkM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCU9ar8Ugxot70FUIOvmsSJ+O0aO2X2IiVsO 4GjDoL4Rk1WUSghdPGgQOJkfqR82OC4pLAPM/ZkHm+qEjQEIzjQb3Z4oWR7A3nQZ ICHQte71cYodct5zO+C/Vg2rwEiTK2h2zYGopQi0yoBB1uiUUo46ESm8Gyp3kteN UuBX3sQ6/iMz+V0lvEj1QRMQRb6E+xKm99UnERxKa0l2wbnpQnt4b6KwBPSFZ39s k1KKSMa+FEn3lY70rellUCQ72MyKTKyR6CDQy7rWtx7ntifB2rFK2ffh6mFQIEoW 9hqVjKPjo7FEs+YvFjoHS6uWZ7K70Li7bbIzWgy8UyaepuEg7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFtgB0a7R1AUPiXIjkudKws0cg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjM3ODUyMjgtMzU0Zi0z M2U2LTkxZmEtYzcxN2ZkYjFiNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIWPDt9nRBolAvQvBxbF+c4lqbwV92KlUmJj53iGVnc+u6pcnMvXJQ1 sIscqkEo4sV9IhVo7Q5k3b1DuGu9mP3ObvleyUWOyiZZBriEIWh/yVLzO7tuVqrn LNbcclD0JzBtXyIlf4fLORLoL+uMVWdoObIkhupgbEE0v52Hm/cxVforfiHc31YG lS+0L/yRx+XIHbEoeykO6+Ca/6GzR3UR1i6Bdi9ksVcf2FYhely4azUVap2j75p7 B2ZFdvMdLMYAZf8PckRWfwpptN8nYZzNYO1e1dixyq+SL7g0Bk6b1brUE/Fho/3Z vnrgNrv62HLNqoqOPyXSsTAz3KxilDc= -----END CERTIFICATE-----Generated at Tue Sep 9 07:01:30 2025 by rpki-client