$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b5d0a32-bf06-3862-b13f-422e3b704274.roa File: 8b5d0a32-bf06-3862-b13f-422e3b704274.roa (raw, json) Hash identifier: NNCG60oVU0riQ2NfFQYZKMmx5+d4hdm5AjBvckYdcFk= Subject key identifier: 42:35:01:B2:56:DC:2B:81:69:1D:F2:A6:8A:DB:B5:33:08:88:FA:29 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB4102328C36367B93C628B0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b5d0a32-bf06-3862-b13f-422e3b704274.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:02:32:8c:36:36:7b:93:c6:28:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=eb2d444d-22c0-4b3f-be72-15ff0949d682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:ce:7a:6c:e5:9c:f1:96:7b:5f:21:70:00: a5:f6:23:1c:b3:c7:2b:4c:36:50:0b:f5:49:97:48: b4:ca:03:3d:49:dd:7c:58:cb:ea:35:18:e5:88:d9: d9:87:82:05:1d:85:aa:5e:bf:c0:62:f6:a3:e3:b3: fa:10:02:b0:bd:9e:f0:a0:51:e0:30:d6:11:bf:bf: 4e:47:c6:03:04:38:e8:54:1a:5e:c1:c4:8c:e2:01: e0:57:e9:c7:92:fa:9d:7f:77:cc:fd:9e:c6:91:4d: 0e:3e:a6:87:b0:4e:37:71:7d:61:1c:e3:38:84:79: aa:42:f4:8f:4d:79:5d:bc:06:cf:7e:05:77:90:13: 77:7f:17:4e:0b:bc:a7:5d:13:ad:8b:c3:c0:e8:ec: de:14:eb:69:8d:5a:1a:b0:45:77:4f:ec:a6:b6:d9: 0d:b2:a7:f2:a7:b8:c7:22:d5:1e:ae:b5:13:6a:d9: 20:50:da:77:a2:90:48:f0:4b:4a:95:36:c3:43:3c: 1d:47:87:43:9a:b3:e8:5b:a5:f9:3d:40:fd:15:f6: 03:ee:a1:56:5f:d9:37:d8:dc:af:c5:e7:98:61:7f: 8e:e1:c5:fd:86:8f:5a:b6:13:e8:b9:5b:f3:9e:ec: e8:c8:f4:eb:17:c3:8c:e9:91:c8:62:30:2c:4b:a5: c7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:35:01:B2:56:DC:2B:81:69:1D:F2:A6:8A:DB:B5:33:08:88:FA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b5d0a32-bf06-3862-b13f-422e3b704274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:39:6f:fb:9e:e3:3a:c5:b2:ce:c5:4e:d3:2a:8e:80:00:25: 93:9a:83:aa:00:38:5c:c8:a8:d3:76:6f:8e:95:94:fd:a8:f5: 4f:0d:a8:45:46:54:c4:09:5c:ee:55:d7:33:f2:be:e6:78:fb: 61:ab:8b:59:59:42:a9:cd:6e:b7:dc:7c:e7:9e:6b:1a:13:0f: 2e:81:84:79:4d:ca:f6:04:50:f0:2c:cf:f3:66:25:8b:d0:41: 34:3b:9b:26:a0:ad:b1:41:52:cf:dc:ec:cf:44:40:81:0d:be: 31:de:5a:76:1b:40:9a:76:07:f9:45:5b:15:a9:cb:d4:b9:99: 3f:8a:c7:6e:3d:0d:2c:c6:03:f7:ba:9c:c9:94:a0:8d:48:f1: 23:ef:18:dd:e3:41:3b:9a:c3:7d:fd:36:a7:69:93:c4:37:aa: 25:fa:6a:dc:f5:18:9d:30:56:dd:13:1b:88:3d:85:67:54:95: 5b:dd:11:ef:2e:7b:a9:f3:81:26:6d:33:c2:dd:ac:a0:15:59: d5:b0:7b:a0:1c:93:95:d1:ee:84:b3:0c:f3:fb:fc:9a:99:94: 62:c0:99:0c:ee:2d:34:10:1b:79:d4:58:0a:69:a7:1e:63:fe: 4c:6f:3c:f4:f2:48:35:48:8d:45:2f:73:60:32:03:0e:72:90: 81:9f:74:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQIyjDY2e5PGKLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWIyZDQ0NGQtMjJjMC00YjNmLWJlNzItMTVmZjA5NDlkNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyInOemzlnPGWe18hcACl9iMcs8crTDZQC/VJ l0i0ygM9Sd18WMvqNRjliNnZh4IFHYWqXr/AYvaj47P6EAKwvZ7woFHgMNYRv79O R8YDBDjoVBpewcSM4gHgV+nHkvqdf3fM/Z7GkU0OPqaHsE43cX1hHOM4hHmqQvSP TXldvAbPfgV3kBN3fxdOC7ynXROti8PA6OzeFOtpjVoasEV3T+ymttkNsqfyp7jH ItUerrUTatkgUNp3opBI8EtKlTbDQzwdR4dDmrPoW6X5PUD9FfYD7qFWX9k32Nyv xeeYYX+O4cX9ho9athPouVvznuzoyPTrF8OM6ZHIYjAsS6XHbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI1AbJW3CuBaR3yporbtTMIiPopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGI1ZDBhMzItYmYwNi0z ODYyLWIxM2YtNDIyZTNiNzA0Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY5b/ue4zrFss7FTtMqjoAAJZOag6oAOFzIqNN2b46VlP2o9U8NqEVG VMQJXO5V1zPyvuZ4+2Gri1lZQqnNbrfcfOeeaxoTDy6BhHlNyvYEUPAsz/NmJYvQ QTQ7myagrbFBUs/c7M9EQIENvjHeWnYbQJp2B/lFWxWpy9S5mT+Kx249DSzGA/e6 nMmUoI1I8SPvGN3jQTuaw339Nqdpk8Q3qiX6atz1GJ0wVt0TG4g9hWdUlVvdEe8u e6nzgSZtM8LdrKAVWdWwe6Ack5XR7oSzDPP7/JqZlGLAmQzuLTQQG3nUWApppx5j /kxvPPTySDVIjUUvc2AyAw5ykIGfdCg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:34 2025 by rpki-client