$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85d92fe7-e6e0-3987-ae01-d34c18f81325.roa File: 85d92fe7-e6e0-3987-ae01-d34c18f81325.roa (raw, json) Hash identifier: DphhYoziAURVc0ziNXsPNHw+6O8MZb928ES46o5O6cQ= Subject key identifier: 12:D7:7B:0E:96:9F:9E:0D:D9:41:6D:40:1D:89:20:1A:53:D0:4F:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766681F4B9E038FD955B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85d92fe7-e6e0-3987-ae01-d34c18f81325.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.64.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:66:81:f4:b9:e0:38:fd:95:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=2b52312c-9ae2-4b2d-b06e-d2eb7b48f012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:16:6d:dc:dd:5f:59:bb:f3:ab:e4:39:be: 55:81:3b:a0:e6:c1:81:2e:b3:6e:d6:01:47:43:22: 79:64:f2:2b:86:f5:0c:84:ac:a9:c3:a3:91:44:eb: 9e:e9:22:a6:76:9d:a0:04:ce:36:88:25:0b:a4:01: 2b:ab:56:0a:64:d8:f4:97:41:cc:05:09:a8:d5:66: ab:6a:e2:d4:46:b0:cf:5f:ce:31:52:9b:b0:6e:80: ca:31:94:5f:e3:1e:cc:86:e5:6b:45:04:dd:ba:df: 22:18:ea:6e:34:f0:95:6a:d3:93:a7:b5:cb:aa:16: f1:b4:ea:14:7c:ff:0d:a7:5e:7d:e3:57:18:a2:4b: 0c:7c:b1:1c:69:53:e5:d3:e4:a6:ac:f7:90:0f:6b: 70:7c:7f:e7:2e:a1:d8:da:99:c6:b6:09:a4:d6:d0: b7:88:86:b2:ca:8b:8a:ad:a3:7b:a3:52:e9:bf:be: c1:51:df:0c:3e:9e:9a:4f:78:2f:e7:82:3a:33:83: fe:c5:7c:10:a3:c4:be:e7:b7:09:29:72:20:b6:57: 64:93:58:69:eb:84:83:e4:8e:88:27:f3:5a:09:73: 62:0a:7b:2e:34:cb:14:ad:17:03:fc:54:79:46:65: a7:9a:eb:82:97:ce:6d:38:55:1a:fe:9e:00:ad:fa: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D7:7B:0E:96:9F:9E:0D:D9:41:6D:40:1D:89:20:1A:53:D0:4F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85d92fe7-e6e0-3987-ae01-d34c18f81325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:84:04:36:be:65:76:d2:53:8b:5a:a9:78:99:29:e3:19:bb: 31:aa:5b:d8:26:be:a4:91:cb:98:ec:46:e0:10:57:52:90:19: 3f:98:ef:b4:85:7a:da:98:99:4a:7c:1e:05:31:a2:ae:f8:28: 7e:ef:5a:1d:20:93:4f:a5:12:12:b4:85:39:22:a8:03:0e:aa: bc:e8:7f:70:7e:dd:b8:d4:1e:08:ec:3f:e7:3f:da:6b:1a:06: 8c:3e:f8:04:3c:09:de:ef:00:90:44:c0:6e:3c:52:23:c8:0f: 6a:21:d4:69:1e:34:8d:ab:fc:72:ed:95:a9:0e:c6:39:22:fd: 91:a3:5b:d0:70:9e:58:6b:4a:19:98:81:d4:01:e3:73:19:37: 50:a6:61:8e:2d:06:8e:b8:af:84:f5:5e:82:2e:26:38:a1:ca: 2b:7f:f6:5e:b9:2f:c6:9f:33:e0:bf:a4:79:1c:13:80:0c:6c: 3f:64:28:da:47:74:20:1c:fc:68:9a:69:d1:eb:94:14:d0:ff: ec:b0:5e:b2:d5:cd:fc:71:db:28:80:d1:52:e0:07:f1:12:92: 9f:99:8d:78:36:50:bd:5b:ca:1b:ed:3e:8d:dd:c7:6e:4a:25: fb:9d:6a:a3:5f:90:4d:32:c3:a2:d5:88:4f:8d:d1:94:da:f5: 83:09:6c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmaB9LngOP2VWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MmI1MjMxMmMtOWFlMi00YjJkLWIwNmUtZDJlYjdiNDhmMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw8WbdzdX1m786vkOb5VgTug5sGBLrNu1gFH QyJ5ZPIrhvUMhKypw6ORROue6SKmdp2gBM42iCULpAErq1YKZNj0l0HMBQmo1War auLURrDPX84xUpuwboDKMZRf4x7MhuVrRQTdut8iGOpuNPCVatOTp7XLqhbxtOoU fP8Np15941cYoksMfLEcaVPl0+SmrPeQD2twfH/nLqHY2pnGtgmk1tC3iIayyouK raN7o1Lpv77BUd8MPp6aT3gv54I6M4P+xXwQo8S+57cJKXIgtldkk1hp64SD5I6I J/NaCXNiCnsuNMsUrRcD/FR5RmWnmuuCl85tOFUa/p4Arfro7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLXew6Wn54N2UFtQB2JIBpT0E8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODVkOTJmZTctZTZlMC0z OTg3LWFlMDEtZDM0YzE4ZjgxMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuEBDa+ZXbSU4taqXiZKeMZuzGqW9gmvqSRy5jsRuAQV1KQGT+Y77SF etqYmUp8HgUxoq74KH7vWh0gk0+lEhK0hTkiqAMOqrzof3B+3bjUHgjsP+c/2msa Bow++AQ8Cd7vAJBEwG48UiPID2oh1GkeNI2r/HLtlakOxjki/ZGjW9BwnlhrShmY gdQB43MZN1CmYY4tBo64r4T1XoIuJjihyit/9l65L8afM+C/pHkcE4AMbD9kKNpH dCAc/GiaadHrlBTQ/+ywXrLVzfxx2yiA0VLgB/ESkp+ZjXg2UL1byhvtPo3dx25K JfudaqNfkE0yw6LViE+N0ZTa9YMJbO4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:48 2025 by rpki-client