$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b5fef39-5a4c-321e-84b1-eddc4e632be8.roa File: 1b5fef39-5a4c-321e-84b1-eddc4e632be8.roa (raw, json) Hash identifier: 7L+8ZtalNJS5m7i2JpXkWOJGdKPit6hDDLcsCr0FZko= Subject key identifier: 61:9D:BD:DB:A4:A0:F4:2C:C5:3F:F1:90:76:2B:71:CE:1D:39:52:84 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA5D7B0983DDF439D1640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b5fef39-5a4c-321e-84b1-eddc4e632be8.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.64.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a5:d7:b0:98:3d:df:43:9d:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=8325a5d9-97f4-42a6-8665-0db87af94390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:fb:50:e0:46:69:4f:d9:c4:20:e5:93:7d: bc:bf:38:72:b5:7d:e9:16:81:6e:60:00:5b:bb:90: db:d6:d2:56:c0:73:11:9e:f9:22:10:66:8f:59:a6: b0:22:ab:da:7b:75:ee:ae:38:8f:b4:f6:64:fa:e7: 60:89:53:6e:59:20:ac:85:96:a2:72:9a:70:75:60: 44:d6:dc:d4:ad:e7:7a:6c:07:85:03:a9:95:8f:a1: 55:9b:23:75:83:4d:61:a6:f1:23:0f:25:c8:0f:eb: 6c:39:c1:2a:71:72:67:ee:a8:eb:e7:67:c3:11:59: 10:98:0d:df:f2:af:85:42:12:c2:23:4e:d3:59:75: ac:f4:8d:6f:84:ca:db:f1:82:b7:59:53:8a:c2:f5: be:c2:67:28:1b:f8:52:52:34:3e:64:7d:d2:ca:7a: a7:50:c2:49:1c:b0:93:6e:43:85:57:4f:e1:2e:15: 6f:0d:97:5d:9c:d2:01:b0:e3:e7:c3:fc:06:a6:cc: bd:50:de:9d:e1:01:58:b8:47:ab:99:f6:7c:8c:e4: eb:52:bc:49:e0:40:4c:e0:17:b4:2f:b9:e8:4e:03: 0c:09:79:09:62:eb:a8:b2:0f:3f:4f:97:97:7c:1b: 8b:76:18:2d:2f:d5:39:16:b9:fd:fa:dc:05:45:b5: 1d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:BD:DB:A4:A0:F4:2C:C5:3F:F1:90:76:2B:71:CE:1D:39:52:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b5fef39-5a4c-321e-84b1-eddc4e632be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:56:9c:d3:e9:26:db:8f:2e:85:0f:e3:7b:f5:d7:b1:de:6b: 73:6f:d4:11:8a:93:98:02:27:04:75:4a:e3:44:04:d1:39:7b: 6f:ed:93:d0:3b:f5:1b:5d:57:ab:f1:e2:48:31:bb:b3:cc:40: fe:8b:76:ae:07:52:6d:96:74:49:cc:96:8a:27:1d:22:a1:be: 1d:dc:31:0a:48:1f:aa:03:bc:8f:99:a2:cd:fc:8e:cd:f4:ec: d7:1a:b9:95:16:a4:a5:e3:c7:4f:8c:06:a4:7e:02:c9:c4:7d: b1:0a:52:b2:15:e9:5c:8a:93:9f:37:88:17:7c:fb:5d:57:c5: d9:5b:88:a9:37:15:d3:c1:f5:f4:14:55:58:db:92:8b:e5:be: e6:7b:e6:10:b0:50:0b:03:1b:a4:46:ac:7a:40:7f:2c:04:36: 10:6a:ea:09:ea:f1:12:07:01:92:ae:d5:c9:36:d3:74:7d:d9: 28:0f:c3:76:c3:78:49:02:df:3b:e9:f9:d1:a0:77:46:4c:16: bf:b4:ee:6b:20:40:75:08:49:30:87:47:ba:de:f3:fd:2c:a0: 1a:d0:9b:9f:9a:4c:7c:f2:c8:45:ee:b3:22:31:e0:e1:62:c4: 57:e2:f7:d1:b4:43:8c:eb:60:5a:20:86:d6:7e:97:a0:6e:64: c0:4f:3d:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6XXsJg930OdFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ODMyNWE1ZDktOTdmNC00MmE2LTg2NjUtMGRiODdhZjk0MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjub7UOBGaU/ZxCDlk328vzhytX3pFoFuYABb u5Db1tJWwHMRnvkiEGaPWaawIqvae3XurjiPtPZk+udgiVNuWSCshZaicppwdWBE 1tzUred6bAeFA6mVj6FVmyN1g01hpvEjDyXID+tsOcEqcXJn7qjr52fDEVkQmA3f 8q+FQhLCI07TWXWs9I1vhMrb8YK3WVOKwvW+wmcoG/hSUjQ+ZH3SynqnUMJJHLCT bkOFV0/hLhVvDZddnNIBsOPnw/wGpsy9UN6d4QFYuEermfZ8jOTrUrxJ4EBM4Be0 L7noTgMMCXkJYuuosg8/T5eXfBuLdhgtL9U5Frn9+twFRbUd2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGdvdukoPQsxT/xkHYrcc4dOVKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWI1ZmVmMzktNWE0Yy0z MjFlLTg0YjEtZWRkYzRlNjMyYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxWnNPpJtuPLoUP43v117Hea3Nv1BGKk5gCJwR1SuNEBNE5e2/tk9A7 9RtdV6vx4kgxu7PMQP6Ldq4HUm2WdEnMloonHSKhvh3cMQpIH6oDvI+Zos38js30 7NcauZUWpKXjx0+MBqR+AsnEfbEKUrIV6VyKk583iBd8+11XxdlbiKk3FdPB9fQU VVjbkovlvuZ75hCwUAsDG6RGrHpAfywENhBq6gnq8RIHAZKu1ck203R92SgPw3bD eEkC3zvp+dGgd0ZMFr+07msgQHUISTCHR7re8/0soBrQm5+aTHzyyEXusyIx4OFi xFfi99G0Q4zrYFoghtZ+l6BuZMBPPX4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:00:31 2025 by rpki-client