$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b936e453-d0e2-3bfb-b80d-6fef940a9001.roa File: b936e453-d0e2-3bfb-b80d-6fef940a9001.roa (raw, json) Hash identifier: B3Hntj9iPXUK+b026TQCU885YzvcArWU/0tNafdI8Gg= Subject key identifier: 46:5A:54:17:E2:86:41:E7:EF:97:03:3D:BF:B3:73:F7:2F:5A:49:6F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD8A8A7CED9F9AA67961AC700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b936e453-d0e2-3bfb-b80d-6fef940a9001.roa Signing time: Wed 13 Aug 2025 20:15:11 +0000 ROA not before: Wed 13 Aug 2025 20:15:11 +0000 ROA not after: Tue 11 Nov 2025 21:15:11 +0000 asID: 14789 IP address blocks: 172.68.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d8:a8:a7:ce:d9:f9:aa:67:96:1a:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 20:15:11 2025 GMT Not After : Nov 11 21:15:11 2025 GMT Subject: CN=2e8de24c-2b7c-4ad2-bcf6-00978872a576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:cb:ce:83:b8:11:7c:56:a0:ae:7c:18:01: d3:2e:6c:11:9c:6d:ff:e1:2e:d9:1c:59:71:27:c8: 2c:08:e0:d7:60:32:b5:92:cf:ae:b6:ef:20:ea:67: 3d:ff:48:a7:a6:35:1d:7b:e1:09:71:5f:d0:78:e8: 1f:21:01:08:79:b2:de:d1:68:b4:87:e0:fb:92:e6: 48:c0:3c:76:4e:e0:b8:0d:a3:7c:58:fe:6c:b5:f4: e9:e1:0a:84:13:70:37:f4:b4:9a:10:b7:51:fd:b0: 73:2e:81:93:22:9e:e1:84:21:6b:47:15:cc:c8:97: 5a:9d:4a:1b:2c:ef:df:3d:cf:2c:ca:a1:a2:f2:bc: 49:6a:ed:c8:6a:5d:f3:f3:ec:ab:bd:63:d8:a4:1e: 9e:84:7a:ec:1e:bd:b7:a7:db:b7:29:ad:88:36:80: 59:08:d1:0c:84:a9:49:a0:e3:1c:d5:6d:2e:57:21: 00:ee:67:7c:5d:8f:18:a7:bb:cc:c5:38:5f:10:fa: 74:52:7a:d7:f4:df:05:28:06:95:34:fc:2f:51:d1: 88:fc:f3:3d:32:3a:96:2b:dd:96:46:1e:02:42:fe: c3:80:a2:c5:33:92:20:fb:1e:65:2e:e6:b8:d4:8c: b4:e4:a4:e2:5e:f3:f1:f5:53:5e:33:9f:03:b8:2c: db:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5A:54:17:E2:86:41:E7:EF:97:03:3D:BF:B3:73:F7:2F:5A:49:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b936e453-d0e2-3bfb-b80d-6fef940a9001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:70:bf:6b:98:75:fe:c6:25:59:4e:d6:dd:d5:93:52:cc:b2: d1:57:48:cf:1b:e9:35:f0:24:85:bf:29:c8:c0:32:99:71:e2: b3:7d:a8:8c:82:e2:e6:3b:b6:5a:bb:32:ae:17:de:61:50:f9: a7:1e:cc:1f:14:03:8c:0c:f3:94:07:35:fd:b4:23:e5:44:0a: 72:cd:4a:d4:53:38:35:19:60:c6:f8:7f:ec:c0:9e:93:a0:39: 56:01:35:5b:fb:db:66:48:d6:97:a4:d0:0a:40:f9:47:fe:97: 8a:2d:e5:4f:9f:54:03:42:ad:71:d8:4e:15:43:18:c5:73:19: d2:10:c9:a7:ef:6a:20:38:d6:ac:c8:5e:1a:25:ae:85:62:4f: 29:e0:f9:2b:e4:15:a2:5f:dd:5c:a1:33:80:d8:90:ab:a2:3b: 01:2c:e9:88:8b:e7:a5:dc:67:2d:84:51:47:b6:24:bc:a7:02: 87:53:a8:d4:f6:0f:d8:db:cc:6d:2f:42:58:2c:c7:85:38:64: b7:78:41:08:ce:67:93:dc:fb:6f:d8:c9:9c:36:5e:bc:37:be: 9f:41:d4:8d:b9:b8:b6:6f:a5:22:7c:3a:1e:b4:0b:b1:c2:e0: 58:e9:77:bb:d4:78:b8:ce:94:09:b5:42:ac:5a:20:f8:36:c2: dd:ba:bf:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErYqKfO2fmqZ5YaxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzIwMTUxMVoXDTI1MTExMTIxMTUxMVowLzEtMCsGA1UEAxMk MmU4ZGUyNGMtMmI3Yy00YWQyLWJjZjYtMDA5Nzg4NzJhNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBnLzoO4EXxWoK58GAHTLmwRnG3/4S7ZHFlx J8gsCODXYDK1ks+utu8g6mc9/0inpjUde+EJcV/QeOgfIQEIebLe0Wi0h+D7kuZI wDx2TuC4DaN8WP5stfTp4QqEE3A39LSaELdR/bBzLoGTIp7hhCFrRxXMyJdanUob LO/fPc8syqGi8rxJau3Ial3z8+yrvWPYpB6ehHrsHr23p9u3Ka2INoBZCNEMhKlJ oOMc1W0uVyEA7md8XY8Yp7vMxThfEPp0UnrX9N8FKAaVNPwvUdGI/PM9MjqWK92W Rh4CQv7DgKLFM5Ig+x5lLua41Iy05KTiXvPx9VNeM58DuCzbqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZaVBfihkHn75cDPb+zc/cvWklvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjkzNmU0NTMtZDBlMi0z YmZiLWI4MGQtNmZlZjk0MGE5MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBwv2uYdf7GJVlO1t3Vk1LMstFXSM8b6TXwJIW/KcjAMplx4rN9qIyC 4uY7tlq7Mq4X3mFQ+acezB8UA4wM85QHNf20I+VECnLNStRTODUZYMb4f+zAnpOg OVYBNVv722ZI1pek0ApA+Uf+l4ot5U+fVANCrXHYThVDGMVzGdIQyafvaiA41qzI XholroViTyng+SvkFaJf3VyhM4DYkKuiOwEs6YiL56XcZy2EUUe2JLynAodTqNT2 D9jbzG0vQlgsx4U4ZLd4QQjOZ5Pc+2/YyZw2Xrw3vp9B1I25uLZvpSJ8Oh60C7HC 4Fjpd7vUeLjOlAm1QqxaIPg2wt26v9k= -----END CERTIFICATE-----Generated at Wed Oct 29 22:02:20 2025 by rpki-client