$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8932aa62-4cf8-3076-8dd8-1011b1d7608a.roa File: 8932aa62-4cf8-3076-8dd8-1011b1d7608a.roa (raw, json) Hash identifier: ITqrbuVmQGjJ6xKSDp0AaCcyd4CaD+t3AA6cXwT0shg= Subject key identifier: 7B:D5:30:75:F1:EC:43:43:FE:DC:FB:5F:E2:DC:18:DB:20:8B:4B:69 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB4116C50F6FD361692812C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8932aa62-4cf8-3076-8dd8-1011b1d7608a.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:16:c5:0f:6f:d3:61:69:28:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=631097a6-3b92-45d6-88cb-148cc19454be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:8b:74:3d:24:3b:46:67:ef:1a:4d:89:e3: 5c:25:d9:0c:7f:d9:d3:2f:f4:a6:ce:35:39:21:b1: 95:22:de:aa:9e:56:a6:73:4d:29:a4:ad:6c:c4:b0: 4e:15:7e:e1:fb:07:08:da:36:af:d1:6c:e3:15:55: 52:dc:32:f8:25:48:1a:5e:d4:de:58:45:b5:bf:67: e0:4a:6b:33:32:08:e6:fa:24:2b:82:92:d0:43:62: 5b:ab:bb:0e:c7:2f:d2:e7:9d:b0:7d:5a:f0:19:c9: a8:38:23:94:f1:e7:ce:71:0f:8a:56:94:38:a5:38: 17:01:94:5f:6e:78:b8:3d:c5:37:29:20:fd:4f:c5: c3:88:bd:05:92:cc:e5:32:8d:bd:a4:06:22:86:1c: 19:09:20:f7:54:73:73:10:9b:7c:b4:20:1e:82:70: e1:2d:67:bd:f0:d8:d5:4f:9a:22:ff:41:b8:49:e0: ef:4c:e3:46:21:20:29:0c:7b:02:4c:df:0d:7b:4e: 30:df:0b:56:b6:72:71:6a:f5:09:81:f3:3d:a1:b3: b7:ff:4d:42:a8:9a:5d:a5:0c:ed:54:fb:b1:79:a5: 0b:63:31:b9:35:22:4c:2c:d3:7f:b9:43:42:29:00: 4f:f8:cb:49:42:ce:55:b1:33:2c:4b:f9:7c:7d:4d: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D5:30:75:F1:EC:43:43:FE:DC:FB:5F:E2:DC:18:DB:20:8B:4B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8932aa62-4cf8-3076-8dd8-1011b1d7608a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:60:ea:73:6e:43:da:37:d9:b2:79:b2:0d:e9:da:89:56:99: 71:7b:06:60:3f:3d:47:fb:6b:19:70:c0:8b:29:66:8d:15:fb: 2f:69:ab:9c:c0:3d:97:3c:be:c0:3d:75:b0:92:51:c7:27:e6: 93:0c:30:78:d4:23:51:78:20:05:ae:58:ac:75:5a:51:4c:24: 3b:ac:76:b2:89:5a:11:b0:40:3e:34:37:34:0d:e2:6d:5b:9a: 8d:6e:d8:5f:e2:97:10:b5:b2:c3:81:12:e8:39:3c:87:e2:08: 4a:56:fe:a2:d4:01:c1:e8:bb:fe:2f:c1:b2:7a:fb:4e:b5:4d: 55:9d:96:6c:7c:b5:82:fb:0b:fa:11:48:0c:39:10:cc:90:65: 58:eb:85:25:03:28:60:1e:62:d9:60:ce:e2:59:7d:e9:d3:78: 62:8b:c2:f2:04:3a:51:b7:46:ef:f5:a1:ad:3e:bb:75:ce:54: e9:0d:e9:49:1f:3b:f1:fa:b5:06:ef:6e:cc:85:e3:87:cc:dd: 20:61:dc:7e:38:14:aa:77:02:ac:be:82:05:ba:e1:7d:37:d1: fe:ec:a5:ad:21:72:3e:da:0c:9f:17:73:24:3b:94:f5:19:39: 44:a3:d1:ff:9a:32:55:68:6d:f1:da:21:0c:d4:62:d2:a4:6f: ba:d5:21:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRbFD2/TYWkoEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NjMxMDk3YTYtM2I5Mi00NWQ2LTg4Y2ItMTQ4Y2MxOTQ1NGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC6LdD0kO0Zn7xpNieNcJdkMf9nTL/SmzjU5 IbGVIt6qnlamc00ppK1sxLBOFX7h+wcI2jav0WzjFVVS3DL4JUgaXtTeWEW1v2fg SmszMgjm+iQrgpLQQ2Jbq7sOxy/S552wfVrwGcmoOCOU8efOcQ+KVpQ4pTgXAZRf bni4PcU3KSD9T8XDiL0FkszlMo29pAYihhwZCSD3VHNzEJt8tCAegnDhLWe98NjV T5oi/0G4SeDvTONGISApDHsCTN8Ne04w3wtWtnJxavUJgfM9obO3/01CqJpdpQzt VPuxeaULYzG5NSJMLNN/uUNCKQBP+MtJQs5VsTMsS/l8fU2EXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvVMHXx7END/tz7X+LcGNsgi0tpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODkzMmFhNjItNGNmOC0z MDc2LThkZDgtMTAxMWIxZDc2MDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9g6nNuQ9o32bJ5sg3p2olWmXF7BmA/PUf7axlwwIspZo0V+y9pq5zA PZc8vsA9dbCSUccn5pMMMHjUI1F4IAWuWKx1WlFMJDusdrKJWhGwQD40NzQN4m1b mo1u2F/ilxC1ssOBEug5PIfiCEpW/qLUAcHou/4vwbJ6+061TVWdlmx8tYL7C/oR SAw5EMyQZVjrhSUDKGAeYtlgzuJZfenTeGKLwvIEOlG3Ru/1oa0+u3XOVOkN6Ukf O/H6tQbvbsyF44fM3SBh3H44FKp3Aqy+ggW64X030f7spa0hcj7aDJ8XcyQ7lPUZ OUSj0f+aMlVobfHaIQzUYtKkb7rVIQs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:19 2025 by rpki-client