$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a95c72c-4c3a-3661-8c15-522333021f1c.roa File: 0a95c72c-4c3a-3661-8c15-522333021f1c.roa (raw, json) Hash identifier: gs94K3gRvM8rWLIceQ5JQD+BPgUlbTwBYj3hy945s4A= Subject key identifier: A2:02:99:EC:D2:30:3C:80:AC:21:AB:7F:7F:EF:D6:70:8D:EA:0D:96 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAF533697BB0DD4546270 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a95c72c-4c3a-3661-8c15-522333021f1c.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:af:53:36:97:bb:0d:d4:54:62:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=4a8c251c-0022-46ac-a52c-e439428bc751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1a:db:4f:51:f5:c3:5e:27:67:b0:f3:7d:b3: 6b:8f:89:8e:0e:18:42:f4:9c:cb:71:ae:0f:1d:6d: 33:19:78:f6:fa:12:cb:d1:df:f3:5b:23:ca:a6:15: 77:3c:e5:30:43:10:2f:8c:f3:b6:8c:e1:b9:34:bb: 57:e8:1d:ce:32:22:42:dc:87:ad:75:65:3e:63:97: 75:08:e4:ed:59:21:6e:e3:12:87:98:78:6a:de:51: 3e:31:52:17:d2:68:06:59:3b:bb:7d:c4:1e:7e:6c: 16:1c:28:5c:84:7d:44:89:21:d2:fd:4f:39:f2:66: 88:1b:97:e9:a7:ee:90:c3:83:e6:69:d5:bc:18:86: 08:5c:80:50:94:20:e9:d4:19:e9:96:16:3f:13:d4: 1f:be:55:42:07:73:4d:53:b1:71:3d:56:58:24:20: 4a:54:fd:05:6b:eb:86:1d:cb:3d:a4:c6:f9:34:13: 43:1d:17:75:2e:57:f8:17:ae:f6:e3:03:84:07:5a: 21:fa:7f:af:98:76:f9:88:8c:97:f8:5c:f1:e0:5e: 35:60:35:b4:9b:c6:6e:fa:c4:0b:02:f7:fb:63:33: f8:19:34:9d:2a:dc:ec:73:76:7a:9c:68:d6:e0:19: 42:02:9c:e4:97:92:c2:35:fc:3b:00:fa:c1:f2:11: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:02:99:EC:D2:30:3C:80:AC:21:AB:7F:7F:EF:D6:70:8D:EA:0D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a95c72c-4c3a-3661-8c15-522333021f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b4:54:44:28:6a:f4:b0:e7:59:b3:12:d6:f7:8a:c4:64:8c: 0c:f2:d7:98:02:af:49:09:c7:b9:5e:6e:fc:a9:1a:cc:5e:eb: 89:16:53:d5:d1:36:07:55:1d:dc:97:7d:e9:31:36:2e:39:44: 47:c1:1f:fa:ee:b0:ed:d9:ee:58:bf:65:bc:ca:42:bc:10:b5: e5:f3:00:56:b7:bf:14:53:91:14:27:1a:45:88:05:5e:0b:4e: b7:f3:8b:b9:e8:bd:63:e9:14:99:2f:21:f7:e5:08:4c:d7:bc: aa:48:2c:6f:07:38:63:98:9f:00:1d:e5:43:52:e9:5d:05:7b: 68:1b:88:e0:4d:b8:27:be:39:b2:b4:32:43:44:66:66:a4:ae: 0a:2d:5d:f5:9b:64:41:14:30:ef:95:c8:54:b2:1c:f1:cc:eb: d4:85:8f:e4:e6:2a:4b:e6:fa:de:26:29:8a:6c:a7:b8:7b:69: 48:56:10:c2:8c:d1:13:2f:5b:2a:be:0b:cc:c7:87:3f:3b:02: bb:7a:77:30:04:86:28:a7:36:ce:ab:31:6c:22:c6:d4:0b:9d: e3:1f:70:54:48:35:ab:0c:23:8e:1d:7b:fb:2c:6d:3d:23:7c: 02:07:fb:d0:34:40:eb:c2:08:4b:79:4d:61:16:2d:dc:43:2c: ea:9e:48:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq69TNpe7DdRUYnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NGE4YzI1MWMtMDAyMi00NmFjLWE1MmMtZTQzOTQyOGJjNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BrbT1H1w14nZ7DzfbNrj4mODhhC9JzLca4P HW0zGXj2+hLL0d/zWyPKphV3POUwQxAvjPO2jOG5NLtX6B3OMiJC3IetdWU+Y5d1 COTtWSFu4xKHmHhq3lE+MVIX0mgGWTu7fcQefmwWHChchH1EiSHS/U858maIG5fp p+6Qw4PmadW8GIYIXIBQlCDp1BnplhY/E9QfvlVCB3NNU7FxPVZYJCBKVP0Fa+uG Hcs9pMb5NBNDHRd1Llf4F6724wOEB1oh+n+vmHb5iIyX+Fzx4F41YDW0m8Zu+sQL Avf7YzP4GTSdKtzsc3Z6nGjW4BlCApzkl5LCNfw7APrB8hHHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKICmezSMDyArCGrf3/v1nCN6g2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGE5NWM3MmMtNGMzYS0z NjYxLThjMTUtNTIyMzMzMDIxZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq0VEQoavSw51mzEtb3isRkjAzy15gCr0kJx7lebvypGsxe64kWU9XR NgdVHdyXfekxNi45REfBH/rusO3Z7li/ZbzKQrwQteXzAFa3vxRTkRQnGkWIBV4L Trfzi7novWPpFJkvIfflCEzXvKpILG8HOGOYnwAd5UNS6V0Fe2gbiOBNuCe+ObK0 MkNEZmakrgotXfWbZEEUMO+VyFSyHPHM69SFj+TmKkvm+t4mKYpsp7h7aUhWEMKM 0RMvWyq+C8zHhz87Art6dzAEhiinNs6rMWwixtQLneMfcFRINasMI44de/ssbT0j fAIH+9A0QOvCCEt5TWEWLdxDLOqeSGo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:57 2025 by rpki-client