$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/439459c9-55e4-3227-88ac-cc00dce2b1c9.roa File: 439459c9-55e4-3227-88ac-cc00dce2b1c9.roa (raw, json) Hash identifier: RN2/XMsneD/JW0Zw0LzyRD6SqCtrRkEUw7aeWZjAdNM= Subject key identifier: 8E:CD:3C:66:30:F8:CD:F6:9E:08:92:09:82:EE:24:88:DA:3F:30:89 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5AB9A0644CA92A0AFE2B200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/439459c9-55e4-3227-88ac-cc00dce2b1c9.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.64.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:9a:06:44:ca:92:a0:af:e2:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=008fb3f0-6cda-424b-90d9-78c426718678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:32:e6:ad:c6:d9:4f:97:e1:ee:14:a2:82: 78:4d:c9:02:34:18:1f:9e:73:71:eb:ab:a7:9e:fa: 3d:a5:0e:0e:ba:1c:4f:71:01:4e:10:84:cb:75:ac: 8d:b4:58:91:bb:1c:84:e3:0b:77:15:ad:04:51:fb: a2:65:dc:13:d3:36:38:e0:6e:b1:af:98:69:68:9f: 6d:95:e2:03:15:a5:fe:e9:7e:25:1c:d9:13:e1:5e: 77:2b:aa:e9:b7:96:dc:9a:4a:3e:8c:3b:35:e3:88: 2b:a0:e8:89:47:35:05:70:4a:d1:b2:0c:c6:0b:a4: 50:52:10:c3:b2:cd:d9:8f:09:ba:ce:54:3c:2d:52: b3:f9:3e:e0:ad:61:a5:a6:9c:19:50:cf:09:83:a0: ab:3f:a1:9e:9b:07:08:4e:f2:5c:62:16:04:9f:b3: 5e:29:87:19:09:f8:eb:4f:0a:0d:c9:9d:11:03:6d: 11:3f:87:02:73:42:ee:83:8b:ce:b5:46:72:39:52: be:36:5b:01:8c:1b:10:0a:f6:da:06:e4:b4:70:a9: 08:1c:af:60:7f:c1:81:8a:db:89:cb:a3:ec:67:f3: 12:18:87:e2:d0:be:e8:0d:91:3e:73:ac:40:7d:87: da:6c:32:66:30:3b:19:cc:db:d5:f6:20:fa:53:77: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CD:3C:66:30:F8:CD:F6:9E:08:92:09:82:EE:24:88:DA:3F:30:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/439459c9-55e4-3227-88ac-cc00dce2b1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:3e:b7:73:b6:7b:c9:f0:35:fc:c8:38:62:f7:1d:f9:1c:02: 36:2e:fb:a8:f2:b5:78:a9:e5:95:0c:51:f8:b5:4f:26:4f:e3: fb:7f:0c:eb:2c:fa:63:fe:cb:2e:2d:4b:d5:b6:50:be:3f:46: fa:b1:42:d5:72:8d:55:ff:3a:07:61:a3:a0:9f:cb:c6:6b:a8: 7f:89:b4:27:76:8a:b3:0a:b8:2b:5e:73:52:40:aa:3a:3e:f6: 7f:74:f4:b4:d0:56:6a:a4:3d:c8:ec:6e:c2:8d:a6:c0:2e:04: 5b:5f:49:e0:45:04:d3:2a:14:6c:c3:88:0c:dd:b4:0c:fa:c0: 86:b3:ce:62:e5:46:de:8d:b3:44:00:0b:56:5b:be:00:21:d3: 90:eb:ad:84:83:d2:9e:8f:de:01:77:0b:f9:72:db:c4:d0:04: c9:b9:2d:10:71:fd:b6:1b:43:13:11:5e:7f:64:d0:f4:7a:46: a1:f3:08:7f:a3:6c:ca:d0:e8:f2:d6:76:c8:f1:fd:7e:15:38: c1:dc:00:e2:79:2b:ea:ee:a4:92:4a:be:04:fc:e7:e6:b4:5c: 7e:24:bb:02:a2:d2:0d:c2:41:0d:70:bf:72:11:23:52:06:fa: fe:a2:ca:0c:c4:f4:e1:6d:8e:c2:aa:d8:a5:8b:72:fd:89:72: 02:77:64:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5oGRMqSoK/isgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MDA4ZmIzZjAtNmNkYS00MjRiLTkwZDktNzhjNDI2NzE4Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY4y5q3G2U+X4e4UooJ4TckCNBgfnnNx66un nvo9pQ4OuhxPcQFOEITLdayNtFiRuxyE4wt3Fa0EUfuiZdwT0zY44G6xr5hpaJ9t leIDFaX+6X4lHNkT4V53K6rpt5bcmko+jDs144groOiJRzUFcErRsgzGC6RQUhDD ss3Zjwm6zlQ8LVKz+T7grWGlppwZUM8Jg6CrP6GemwcITvJcYhYEn7NeKYcZCfjr TwoNyZ0RA20RP4cCc0Lug4vOtUZyOVK+NlsBjBsQCvbaBuS0cKkIHK9gf8GBituJ y6PsZ/MSGIfi0L7oDZE+c6xAfYfabDJmMDsZzNvV9iD6U3eTBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7NPGYw+M32ngiSCYLuJIjaPzCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDM5NDU5YzktNTVlNC0z MjI3LTg4YWMtY2MwMGRjZTJiMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8+t3O2e8nwNfzIOGL3HfkcAjYu+6jytXip5ZUMUfi1TyZP4/t/DOss +mP+yy4tS9W2UL4/RvqxQtVyjVX/Ogdho6Cfy8ZrqH+JtCd2irMKuCtec1JAqjo+ 9n909LTQVmqkPcjsbsKNpsAuBFtfSeBFBNMqFGzDiAzdtAz6wIazzmLlRt6Ns0QA C1ZbvgAh05DrrYSD0p6P3gF3C/ly28TQBMm5LRBx/bYbQxMRXn9k0PR6RqHzCH+j bMrQ6PLWdsjx/X4VOMHcAOJ5K+rupJJKvgT85+a0XH4kuwKi0g3CQQ1wv3IRI1IG +v6iygzE9OFtjsKq2KWLcv2JcgJ3ZJY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:20 2025 by rpki-client