$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ed6bf9c-4096-3a40-a58d-0504e39a0898.roa File: 0ed6bf9c-4096-3a40-a58d-0504e39a0898.roa (raw, json) Hash identifier: YB3wdplPbjLtWhfwIxXfnCV4FcaxmEre2ZA6DzV+jUs= Subject key identifier: 05:03:92:AF:CD:89:F1:9A:F4:8C:AF:53:4B:85:59:A2:69:9C:DD:01 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ADD669CBF2B150873E7F5FD80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ed6bf9c-4096-3a40-a58d-0504e39a0898.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.64.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:9c:bf:2b:15:08:73:e7:f5:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=1a53dfc5-d389-46f0-b544-8c98320ebad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:25:a6:ba:38:6a:72:47:5a:a2:21:61:b2:c8: 9b:02:2b:0a:05:da:b9:36:dd:60:0e:7d:0a:fa:d9: 94:a2:15:a8:4d:88:ae:ed:c1:7c:1e:a4:8f:07:1f: ab:6f:e5:85:42:8e:d0:53:0a:89:98:06:50:50:8c: 1d:d8:91:b2:f9:a6:8d:72:8d:41:28:ec:c7:b0:8b: ff:e5:58:45:79:cd:a7:38:17:f5:3d:49:96:cc:c9: 37:61:70:d7:ef:ed:3d:39:1a:7d:a6:1c:67:6a:4e: d5:0e:d7:ed:6b:15:d8:7a:da:04:8e:92:9e:be:8c: bd:4e:c2:5f:8a:77:da:f4:f9:ab:ff:41:1c:d2:ba: 16:13:a6:9a:5b:7d:7c:c3:dc:06:35:4b:4f:3c:73: 83:18:a0:05:67:d7:b2:52:d7:18:c1:69:ea:74:f7: 37:66:e3:cd:ec:db:01:62:ee:b2:38:3e:d1:f8:2d: 90:28:01:ff:73:71:19:46:d5:c0:f8:31:69:5e:07: 21:3b:ee:3d:8f:69:3e:66:86:31:c2:5e:30:82:90: a0:ea:3a:88:8a:9d:9b:81:10:fd:9e:04:77:91:d4: 71:8f:cd:0c:db:07:23:72:46:d5:80:fb:17:e1:fd: 72:d7:bd:bd:d1:f2:39:f4:56:77:8f:f8:b7:18:ce: b3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:03:92:AF:CD:89:F1:9A:F4:8C:AF:53:4B:85:59:A2:69:9C:DD:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0ed6bf9c-4096-3a40-a58d-0504e39a0898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:66:d9:3e:53:b1:42:43:80:71:12:14:1b:9f:61:75:22:35: 6b:60:9c:5e:a2:17:52:2f:60:4d:c4:e1:ad:c9:59:fa:bd:8c: 39:8c:e3:45:5e:47:88:c9:68:70:71:bd:5f:78:d8:01:df:cd: 24:df:aa:fd:a5:2b:d4:1d:4c:5b:8a:19:f4:ee:96:1a:38:9b: c8:c7:ae:9d:dd:5c:82:ac:45:3a:ac:96:4e:25:4f:03:5b:1f: 79:1d:61:2c:f5:5e:fb:88:7f:df:5c:62:f5:62:8a:8d:80:af: cd:bf:de:47:97:f3:cd:e0:7e:c6:fd:fe:fd:f4:34:7b:e8:01: 0e:1b:2e:10:3e:6e:c6:14:47:1c:49:ba:51:59:5c:86:aa:80: ea:e7:80:79:40:e0:ab:1b:7f:fb:05:b1:be:53:10:3e:ce:01: 99:94:22:15:02:e3:14:54:45:fa:87:c1:60:9d:eb:2e:86:57: 60:3a:ab:35:61:ae:bd:2b:07:3f:40:66:56:8d:de:d1:e7:60: 6e:f0:01:af:62:4f:b9:25:33:61:a2:98:a1:fb:39:c2:17:54: 3b:07:1a:6e:bd:b6:f3:da:2d:60:27:43:0d:5c:95:57:bc:6f: 7e:34:0b:68:c7:98:66:63:d6:f4:0f:12:3d:8b:7d:fa:ca:86: ef:d2:0b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpy/KxUIc+f1/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MWE1M2RmYzUtZDM4OS00NmYwLWI1NDQtOGM5ODMyMGViYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiWmujhqckdaoiFhssibAisKBdq5Nt1gDn0K +tmUohWoTYiu7cF8HqSPBx+rb+WFQo7QUwqJmAZQUIwd2JGy+aaNco1BKOzHsIv/ 5VhFec2nOBf1PUmWzMk3YXDX7+09ORp9phxnak7VDtftaxXYetoEjpKevoy9TsJf infa9Pmr/0Ec0roWE6aaW318w9wGNUtPPHODGKAFZ9eyUtcYwWnqdPc3ZuPN7NsB Yu6yOD7R+C2QKAH/c3EZRtXA+DFpXgchO+49j2k+ZoYxwl4wgpCg6jqIip2bgRD9 ngR3kdRxj80M2wcjckbVgPsX4f1y17290fI59FZ3j/i3GM6zDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUDkq/NifGa9IyvU0uFWaJpnN0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGVkNmJmOWMtNDA5Ni0z YTQwLWE1OGQtMDUwNGUzOWEwODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNm2T5TsUJDgHESFBufYXUiNWtgnF6iF1IvYE3E4a3JWfq9jDmM40Ve R4jJaHBxvV942AHfzSTfqv2lK9QdTFuKGfTulho4m8jHrp3dXIKsRTqslk4lTwNb H3kdYSz1XvuIf99cYvViio2Ar82/3keX883gfsb9/v30NHvoAQ4bLhA+bsYURxxJ ulFZXIaqgOrngHlA4Ksbf/sFsb5TED7OAZmUIhUC4xRURfqHwWCd6y6GV2A6qzVh rr0rBz9AZlaN3tHnYG7wAa9iT7klM2GimKH7OcIXVDsHGm69tvPaLWAnQw1clVe8 b340C2jHmGZj1vQPEj2LffrKhu/SC6Q= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:19 2025 by rpki-client