$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70d2fdbb-4dc4-3ec4-9ec5-88e4a20220e1.roa File: 70d2fdbb-4dc4-3ec4-9ec5-88e4a20220e1.roa (raw, json) Hash identifier: Gxc9RKoaSuFBtL2alpTROrINci42v4q5HY8UNiuBeNY= Subject key identifier: F8:1D:A4:41:FB:AE:CB:62:AE:D1:B7:CE:C9:45:86:93:02:F4:69:FD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC87675046CA14ABCDEBE7780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70d2fdbb-4dc4-3ec4-9ec5-88e4a20220e1.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.65.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:75:04:6c:a1:4a:bc:de:be:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=b8ae0f8f-3c8d-4741-ac05-dd0c559e06e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:9f:17:e1:86:33:b2:8e:d8:fc:f6:3e:c1: 29:79:28:bf:2c:94:79:c6:76:5c:a8:de:bb:36:12: eb:3c:72:40:f7:31:d2:bd:c6:c8:a9:ce:d0:fd:63: 53:57:a1:e0:5f:24:53:ef:92:5c:74:52:0b:52:9a: 07:33:cc:34:1b:e9:5d:28:f1:96:af:c2:a8:73:10: 22:c8:f5:46:6c:32:86:e1:a6:2b:80:fd:2d:84:c9: 24:6e:6b:80:06:18:3f:71:de:c2:6c:1a:31:0b:0d: 37:b2:e7:f1:d9:72:e6:2a:09:c9:1f:22:58:58:aa: df:8b:00:56:b0:8f:9f:b5:b6:5e:63:9b:e8:12:d1: 66:99:73:72:df:4e:78:cf:53:aa:fd:bc:91:32:bd: ff:9a:55:a0:1b:5c:a5:db:5f:0c:f1:04:0b:5a:7b: 7b:e2:60:fe:f6:7d:13:56:d8:ba:36:61:aa:76:76: 3c:98:d1:d3:6c:b3:bb:84:61:fb:16:fd:22:65:2b: 35:4d:f8:f0:36:71:02:92:1d:de:df:13:4d:dd:a3: 0f:d5:52:03:d5:01:b9:8a:a1:f5:91:71:df:d3:fd: 73:a1:e4:12:ab:d9:f6:87:78:ca:a9:39:c1:6a:e6: ec:70:ba:e3:14:e9:37:f7:97:91:05:17:ae:e9:cf: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1D:A4:41:FB:AE:CB:62:AE:D1:B7:CE:C9:45:86:93:02:F4:69:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70d2fdbb-4dc4-3ec4-9ec5-88e4a20220e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:24:15:ad:c9:69:55:64:20:29:f9:3b:8f:b6:c4:ae:bc:78: e0:ad:e9:69:99:07:3e:38:f3:a5:35:b4:2b:cf:03:22:b2:92: fb:b7:f0:02:d1:e9:91:62:70:6d:83:11:c4:bd:84:96:32:51: ca:87:8f:59:9c:dc:94:c1:b0:c9:ed:d6:a9:fe:ba:ce:ca:3b: 99:af:23:76:f6:1b:8d:ad:2f:1d:19:ec:66:5b:3c:22:60:15: 72:05:e6:a0:66:32:1a:4c:b9:8a:2a:4a:fe:d5:62:52:fe:89: 96:15:5d:eb:c5:b7:c8:e3:d2:ca:bc:36:4a:f6:ba:37:e7:98: 4d:11:f2:6d:20:b6:0d:04:39:bc:f4:30:3e:a4:8c:26:2b:b6: 1d:b8:35:d6:e8:39:0a:39:41:c0:a9:21:6f:1f:f8:91:b8:d5: 7b:24:40:f6:09:54:bd:2a:fe:ff:cd:89:b8:3e:0e:a4:79:74: 54:0d:99:02:b7:7b:65:08:2e:b8:6d:5e:52:e0:6a:7e:24:90: d3:d6:db:73:9c:41:4a:da:2d:e8:b4:f6:40:e1:60:d6:74:a7: c0:b6:67:e7:08:b0:98:57:8f:84:aa:97:2d:4e:c4:c9:d2:31: d8:53:74:88:a0:f5:83:bc:76:ca:48:26:cd:89:28:35:64:9a: 67:70:5b:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnUEbKFKvN6+d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjhhZTBmOGYtM2M4ZC00NzQxLWFjMDUtZGQwYzU1OWUwNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SqfF+GGM7KO2Pz2PsEpeSi/LJR5xnZcqN67 NhLrPHJA9zHSvcbIqc7Q/WNTV6HgXyRT75JcdFILUpoHM8w0G+ldKPGWr8KocxAi yPVGbDKG4aYrgP0thMkkbmuABhg/cd7CbBoxCw03sufx2XLmKgnJHyJYWKrfiwBW sI+ftbZeY5voEtFmmXNy3054z1Oq/byRMr3/mlWgG1yl218M8QQLWnt74mD+9n0T Vti6NmGqdnY8mNHTbLO7hGH7Fv0iZSs1TfjwNnECkh3e3xNN3aMP1VID1QG5iqH1 kXHf0/1zoeQSq9n2h3jKqTnBaubscLrjFOk395eRBReu6c/PgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgdpEH7rstirtG3zslFhpMC9Gn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzBkMmZkYmItNGRjNC0z ZWM0LTllYzUtODhlNGEyMDIyMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEkFa3JaVVkICn5O4+2xK68eOCt6WmZBz4486U1tCvPAyKykvu38ALR 6ZFicG2DEcS9hJYyUcqHj1mc3JTBsMnt1qn+us7KO5mvI3b2G42tLx0Z7GZbPCJg FXIF5qBmMhpMuYoqSv7VYlL+iZYVXevFt8jj0sq8Nkr2ujfnmE0R8m0gtg0EObz0 MD6kjCYrth24NdboOQo5QcCpIW8f+JG41XskQPYJVL0q/v/Nibg+DqR5dFQNmQK3 e2UILrhtXlLgan4kkNPW23OcQUraLei09kDhYNZ0p8C2Z+cIsJhXj4Sqly1OxMnS MdhTdIig9YO8dspIJs2JKDVkmmdwWy8= -----END CERTIFICATE-----Generated at Sat Aug 23 22:00:11 2025 by rpki-client