$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9bb7ef7-8870-34ae-8eaa-cff24b2520c4.roa File: a9bb7ef7-8870-34ae-8eaa-cff24b2520c4.roa (raw, json) Hash identifier: QljYNO5tPxwEFvTIBudiMryX5nXadcM/w6RDZoJ3fps= Subject key identifier: BA:4B:9E:F9:97:29:F3:9A:4D:BA:D4:41:96:70:EE:E8:3D:56:6E:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AF686951E66C5CCDC26CB4460 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9bb7ef7-8870-34ae-8eaa-cff24b2520c4.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 13335 IP address blocks: 172.68.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:95:1e:66:c5:cc:dc:26:cb:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=9ab28342-d8f2-485d-8a95-acb19e442958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:80:35:9f:c9:01:c6:63:f6:f5:d0:b7:1d: a3:01:26:91:a0:89:64:f6:e9:ab:a8:f7:6a:e4:cb: d8:59:f8:fb:b4:92:7e:b4:91:e8:00:fe:d3:71:16: ec:03:0b:38:91:e3:3d:8e:4c:69:1c:a2:3c:7d:0a: 70:e5:a1:5e:4a:f6:c0:0b:e9:db:b0:87:95:d7:2a: f6:09:99:bf:72:9a:73:6b:ff:76:e3:c7:c7:fa:73: 83:55:0b:e8:26:1b:aa:fd:a9:0b:c8:de:69:1f:af: 28:0b:0c:68:a0:95:64:91:dd:39:ef:c5:55:45:48: f0:cc:d3:4e:e7:94:41:bd:1b:fd:c9:9f:b6:92:1a: bb:40:71:20:fb:44:9a:c7:e4:d7:da:20:f0:6f:b1: 83:cb:09:04:dc:7b:64:16:aa:d1:1f:c6:df:a8:45: af:3a:aa:d0:84:8e:f2:87:ed:2b:0f:63:c2:4d:c6: db:fe:7c:de:ba:89:1d:a5:3a:34:3a:0a:f2:ce:07: 5a:d0:f3:b7:1a:b2:b5:54:c3:77:7e:df:07:72:df: 75:25:a2:9b:d5:d1:94:12:18:9c:2c:ec:08:aa:40: eb:36:d8:73:a9:05:44:2f:55:5a:1d:bb:40:9d:29: 04:a2:eb:e9:55:5d:47:eb:ac:e8:8c:0c:a8:2a:6d: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4B:9E:F9:97:29:F3:9A:4D:BA:D4:41:96:70:EE:E8:3D:56:6E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9bb7ef7-8870-34ae-8eaa-cff24b2520c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:03:27:06:ff:99:a5:76:6b:0f:f2:19:a6:ac:7e:12:e9:d6: 18:1b:11:ac:19:fb:d6:ea:cd:de:a9:c9:d3:4d:10:15:76:f7: 25:20:d7:de:2a:f4:a8:3e:3e:f3:bb:0f:72:ac:bc:3b:91:7d: 7b:fb:ce:34:23:58:32:63:48:d7:41:14:89:c0:b6:c4:a4:36: 40:81:ca:fa:0c:71:b9:6e:32:67:41:d4:d0:0b:a2:83:4b:b3: ab:e3:7a:13:c4:c5:9b:94:9b:2b:fa:da:1f:c0:57:82:93:fb: 4b:eb:bd:3b:78:00:8e:4a:ca:c0:a7:b8:6a:33:26:97:1b:7e: cf:1a:b8:db:4c:a9:86:68:b4:87:d8:c8:82:d6:27:5a:b0:10: 53:64:61:81:15:7d:ac:f0:2a:4f:a1:a7:8c:c7:66:55:1b:c1: 52:e4:38:80:9a:64:a2:c3:6c:94:21:f6:58:23:2d:d7:dc:ca: 0d:e7:83:3b:ae:1a:db:0c:4d:8c:7a:e7:2a:8c:06:6f:de:5b: ef:ad:69:02:74:46:3e:74:0f:31:32:fe:93:c7:08:73:d4:51: b6:6e:5a:bf:68:6a:b8:fa:c9:1c:bb:1d:73:0d:63:e3:93:3c: 55:ba:46:5e:57:aa:06:00:a0:4d:e7:fd:9d:1f:91:5a:17:e5: f3:b3:8b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpUeZsXM3CbLRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk OWFiMjgzNDItZDhmMi00ODVkLThhOTUtYWNiMTllNDQyOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP2ANZ/JAcZj9vXQtx2jASaRoIlk9umrqPdq 5MvYWfj7tJJ+tJHoAP7TcRbsAws4keM9jkxpHKI8fQpw5aFeSvbAC+nbsIeV1yr2 CZm/cppza/9248fH+nODVQvoJhuq/akLyN5pH68oCwxooJVkkd0578VVRUjwzNNO 55RBvRv9yZ+2khq7QHEg+0Sax+TX2iDwb7GDywkE3HtkFqrRH8bfqEWvOqrQhI7y h+0rD2PCTcbb/nzeuokdpTo0Ogryzgda0PO3GrK1VMN3ft8Hct91JaKb1dGUEhic LOwIqkDrNthzqQVEL1VaHbtAnSkEouvpVV1H66zojAyoKm1T3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpLnvmXKfOaTbrUQZZw7ug9Vm6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTliYjdlZjctODg3MC0z NGFlLThlYWEtY2ZmMjRiMjUyMGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYDJwb/maV2aw/yGaasfhLp1hgbEawZ+9bqzd6pydNNEBV29yUg194q 9Kg+PvO7D3KsvDuRfXv7zjQjWDJjSNdBFInAtsSkNkCByvoMcbluMmdB1NALooNL s6vjehPExZuUmyv62h/AV4KT+0vrvTt4AI5KysCnuGozJpcbfs8auNtMqYZotIfY yILWJ1qwEFNkYYEVfazwKk+hp4zHZlUbwVLkOICaZKLDbJQh9lgjLdfcyg3ngzuu GtsMTYx65yqMBm/eW++taQJ0Rj50DzEy/pPHCHPUUbZuWr9oarj6yRy7HXMNY+OT PFW6Rl5XqgYAoE3n/Z0fkVoX5fOzi+E= -----END CERTIFICATE-----Generated at Tue Sep 9 06:58:54 2025 by rpki-client