$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c3b485d-5c20-3a8f-b4b2-973c69dd7e15.roa File: 1c3b485d-5c20-3a8f-b4b2-973c69dd7e15.roa (raw, json) Hash identifier: +YrNd5grHFyWQ+7qOt1uZcWf/TkZfyEY23wMWPsmHxE= Subject key identifier: 8D:5F:50:5C:1F:7F:E7:70:A0:B7:0A:DB:B1:7B:42:26:EF:08:03:A1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACF71064B9B6CC8934577E8C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c3b485d-5c20-3a8f-b4b2-973c69dd7e15.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.69.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:06:4b:9b:6c:c8:93:45:77:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=40122b91-53a1-494e-8ed2-220f9fbdff88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:aa:22:9d:47:89:46:f9:16:88:3c:60:a0: 00:ad:d7:5e:08:42:c0:35:56:b0:13:4e:80:c9:1e: d6:e5:b0:4b:9c:b3:54:e9:85:8a:1e:98:be:ad:a6: a9:29:17:77:d4:a6:15:bf:9a:74:5c:fa:42:b1:1f: e4:5b:d4:c1:5b:dd:d7:4e:89:70:bc:e7:35:3d:43: a4:a8:07:50:4b:1d:a5:57:4b:56:70:71:d1:27:e9: 10:d2:17:6c:59:42:aa:7a:77:07:6b:c1:d0:bc:ae: c6:44:07:18:8f:85:d4:bc:26:7b:25:9e:2e:ed:b0: 4d:5f:fa:63:8a:be:d5:34:64:68:4b:8b:a9:22:f8: b2:86:6f:b9:ac:2a:e5:cd:6e:fc:ea:73:0f:b0:0f: 82:3c:bc:0e:5d:50:7f:cb:07:47:bf:d1:12:07:64: 88:d6:2b:c3:6a:6f:22:66:a3:bf:d5:73:31:be:d7: c4:28:0a:b1:ec:5f:00:d6:91:4e:dc:60:61:d7:7b: 1b:a3:d9:1c:70:b0:66:90:10:c4:ff:e9:10:73:d4: 99:b6:e1:ec:72:a8:e8:c4:ea:45:aa:6f:6c:9a:71: 71:27:ba:fe:35:27:53:25:43:a3:49:d5:1b:05:21: 3f:84:ef:12:c7:57:78:71:eb:7c:ae:2e:d7:39:fe: ab:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5F:50:5C:1F:7F:E7:70:A0:B7:0A:DB:B1:7B:42:26:EF:08:03:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1c3b485d-5c20-3a8f-b4b2-973c69dd7e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d7:fe:71:6b:0a:60:59:f5:d8:71:bc:0a:c8:4d:4a:62:94: 78:9d:c8:8d:14:3e:c6:8d:c5:aa:74:a9:26:1b:3b:6b:8e:b0: 2f:43:ac:bd:aa:4d:6d:ee:e1:c4:26:2b:a4:6f:d6:52:df:c4: 27:d1:c5:97:d8:d2:fa:05:9d:78:39:4a:d6:72:90:79:08:6e: 7a:bf:cd:2e:55:a6:17:ab:8d:13:52:f9:03:1a:2d:1c:e2:cb: 1b:74:a5:e5:58:31:22:1f:69:55:54:4b:d5:3c:1a:6a:db:98: ff:7e:fc:8f:bc:5f:ba:04:db:19:82:c0:cd:81:b8:f2:43:3e: 82:5a:23:86:e3:16:05:9b:e9:e8:5f:90:ac:bc:92:88:91:19: 40:3a:b1:6f:47:e0:a0:53:6d:80:72:ee:40:e9:c4:2e:b9:93: b7:11:99:b8:e4:62:46:f2:d9:42:6d:6c:6a:85:67:ab:d1:16: 7f:f5:b9:f0:87:ab:5f:1d:fb:8d:d0:5a:fa:06:43:eb:1b:ad: 57:2e:e8:98:a5:34:d0:95:b4:ba:9f:fe:90:c6:9c:8a:13:9c: c0:1a:02:63:c7:14:4e:13:11:27:11:9f:a2:a4:55:f0:89:b7: 8b:4c:fe:57:08:8d:cc:ca:7a:fc:58:96:34:7f:27:6b:f4:d5: 47:41:89:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQZLm2zIk0V36MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NDAxMjJiOTEtNTNhMS00OTRlLThlZDItMjIwZjlmYmRmZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuouqIp1HiUb5Fog8YKAArddeCELANVawE06A yR7W5bBLnLNU6YWKHpi+raapKRd31KYVv5p0XPpCsR/kW9TBW93XTolwvOc1PUOk qAdQSx2lV0tWcHHRJ+kQ0hdsWUKqencHa8HQvK7GRAcYj4XUvCZ7JZ4u7bBNX/pj ir7VNGRoS4upIviyhm+5rCrlzW786nMPsA+CPLwOXVB/ywdHv9ESB2SI1ivDam8i ZqO/1XMxvtfEKAqx7F8A1pFO3GBh13sbo9kccLBmkBDE/+kQc9SZtuHscqjoxOpF qm9smnFxJ7r+NSdTJUOjSdUbBSE/hO8Sx1d4cet8ri7XOf6rgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1fUFwff+dwoLcK27F7QibvCAOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWMzYjQ4NWQtNWMyMC0z YThmLWI0YjItOTczYzY5ZGQ3ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXX/nFrCmBZ9dhxvArITUpilHidyI0UPsaNxap0qSYbO2uOsC9DrL2q TW3u4cQmK6Rv1lLfxCfRxZfY0voFnXg5StZykHkIbnq/zS5VpherjRNS+QMaLRzi yxt0peVYMSIfaVVUS9U8GmrbmP9+/I+8X7oE2xmCwM2BuPJDPoJaI4bjFgWb6ehf kKy8koiRGUA6sW9H4KBTbYBy7kDpxC65k7cRmbjkYkby2UJtbGqFZ6vRFn/1ufCH q18d+43QWvoGQ+sbrVcu6JilNNCVtLqf/pDGnIoTnMAaAmPHFE4TEScRn6KkVfCJ t4tM/lcIjczKevxYljR/J2v01UdBies= -----END CERTIFICATE-----Generated at Sat Aug 23 14:44:51 2025 by rpki-client