$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa File: 3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa (raw, json) Hash identifier: wfkeqoS88yyjQD++X8/pjqVbvdVyUdwLZ8SfcK9VMo8= Subject key identifier: 5A:F2:0D:B0:A1:B0:41:7B:15:3D:1B:CE:85:6C:81:11:FC:D8:37:63 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876681AB57C776DA8550300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.67.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:68:1a:b5:7c:77:6d:a8:55:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=cfcb1d80-56ae-4a6b-bcc0-34c34784d0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:1b:d0:cf:ba:28:c4:24:56:4c:ed:07:85: 41:f1:c5:21:6a:65:cd:6f:e5:a7:6e:fd:3a:d5:2a: 50:c3:4f:b8:f9:3b:5b:14:8b:42:2d:4b:3e:db:13: 78:a1:5a:f7:db:8a:d8:f6:68:3b:e1:90:26:7d:f1: 4f:81:97:cd:bb:72:4f:93:b8:ab:94:94:73:cd:40: 4e:35:95:21:1c:49:8f:2a:04:f8:d1:d6:af:05:de: 81:96:5b:a4:48:ea:3c:10:df:4a:20:0f:c9:78:ce: 30:6d:4b:3d:37:ea:bc:c7:f7:ac:96:5b:b6:f5:2a: 4a:53:01:c8:f0:34:26:fe:29:5c:ee:f6:74:9f:7a: d1:5d:f5:78:87:12:b7:93:c9:01:20:b8:fb:fb:a3: a4:72:21:e4:cc:b2:df:a2:4c:35:0f:79:a8:22:c2: 9f:4b:57:e6:6e:ce:e4:10:0b:35:d5:96:0b:3b:45: b3:95:5e:a2:bc:03:98:4c:f1:ef:c1:b3:c6:21:55: 9c:df:53:f9:4a:33:92:91:bb:e0:6c:a2:0c:e6:c4: af:56:6a:25:05:74:0c:b0:5a:b6:f3:0a:12:c2:5e: 1e:df:37:1e:6f:70:f5:1a:78:88:17:14:d2:d8:fb: 8e:c3:60:f9:54:6c:80:98:64:e8:40:be:cc:37:9e: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F2:0D:B0:A1:B0:41:7B:15:3D:1B:CE:85:6C:81:11:FC:D8:37:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3118f74d-4ae5-3966-b111-6d6cb9945c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:32:09:a0:79:54:37:ae:fc:8c:82:e7:ab:0b:89:ab:22:0b: 0a:48:94:a4:c6:33:a6:57:7d:61:3c:83:37:a3:d3:51:19:17: b4:64:3a:93:c0:50:fd:55:2d:15:7c:0d:6f:e4:56:8c:ca:36: aa:e2:2f:80:32:97:ad:be:2a:51:23:90:3c:ef:2a:ba:a8:aa: 0e:59:ee:b0:77:92:39:13:af:7f:62:2d:a4:95:14:09:80:9a: 93:75:84:e8:cc:73:9e:f5:bb:56:e3:87:5d:a2:88:95:7b:03: f1:83:4f:20:72:50:2a:94:bf:de:2d:1b:23:90:38:7f:48:25: 27:16:12:ab:33:9b:7c:89:02:e5:44:1d:55:2f:fe:1a:40:e7: 7f:ae:22:d1:aa:6a:75:46:99:30:bc:85:65:b7:0c:7d:e4:07: 7c:64:35:47:55:98:16:24:53:b7:ac:af:22:6d:44:cc:86:2d: 44:1f:1e:15:bb:13:23:8a:3c:4e:f5:73:0a:a3:8c:e7:60:01: ee:b1:89:ca:7b:b2:e0:0b:1e:da:71:56:bc:88:61:98:8f:90: b1:d0:c3:7c:3b:53:20:69:a6:81:45:df:f1:8e:20:55:e8:11: 2d:df:1a:f4:ee:50:3f:bf:ab:d3:bd:8d:1f:c1:bd:38:74:45: a8:97:72:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmgatXx3bahVAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2ZjYjFkODAtNTZhZS00YTZiLWJjYzAtMzRjMzQ3ODRkMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVYb0M+6KMQkVkztB4VB8cUhamXNb+Wnbv06 1SpQw0+4+TtbFItCLUs+2xN4oVr324rY9mg74ZAmffFPgZfNu3JPk7irlJRzzUBO NZUhHEmPKgT40davBd6BllukSOo8EN9KIA/JeM4wbUs9N+q8x/esllu29SpKUwHI 8DQm/ilc7vZ0n3rRXfV4hxK3k8kBILj7+6OkciHkzLLfokw1D3moIsKfS1fmbs7k EAs11ZYLO0WzlV6ivAOYTPHvwbPGIVWc31P5SjOSkbvgbKIM5sSvVmolBXQMsFq2 8woSwl4e3zceb3D1GniIFxTS2PuOw2D5VGyAmGToQL7MN55UoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFryDbChsEF7FT0bzoVsgRH82DdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzExOGY3NGQtNGFlNS0z OTY2LWIxMTEtNmQ2Y2I5OTQ1YzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcyCaB5VDeu/IyC56sLiasiCwpIlKTGM6ZXfWE8gzej01EZF7RkOpPA UP1VLRV8DW/kVozKNqriL4Ayl62+KlEjkDzvKrqoqg5Z7rB3kjkTr39iLaSVFAmA mpN1hOjMc571u1bjh12iiJV7A/GDTyByUCqUv94tGyOQOH9IJScWEqszm3yJAuVE HVUv/hpA53+uItGqanVGmTC8hWW3DH3kB3xkNUdVmBYkU7esryJtRMyGLUQfHhW7 EyOKPE71cwqjjOdgAe6xicp7suALHtpxVryIYZiPkLHQw3w7UyBppoFF3/GOIFXo ES3fGvTuUD+/q9O9jR/BvTh0RaiXclo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:13 2025 by rpki-client