$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa File: 955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa (raw, json) Hash identifier: 6id+S42BS2AGGMXVyg+kIgYcKpl3BG7OkmJyAUr1e+8= Subject key identifier: B4:E6:42:70:72:67:51:66:60:AE:E2:63:1F:AC:41:6F:6E:B7:7A:F1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC87674F4B025C436371E2660 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.65.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:74:f4:b0:25:c4:36:37:1e:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=12a2654f-e49c-4f50-b63a-a4ef6ed7abe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:8c:3d:9c:bb:5b:d1:56:c7:9d:5b:60:d8: d4:0b:a2:7d:d7:96:0c:0d:5f:f0:3f:4a:17:66:ad: 41:7a:c6:b8:66:ed:07:3e:90:a2:78:8c:9a:40:c6: 89:51:d4:32:97:3f:1c:af:69:eb:7b:14:dc:92:fb: 62:be:83:87:0e:8c:0b:8c:4a:e9:f5:bd:38:61:99: 89:01:ad:7d:ed:58:7f:f1:cf:ca:ec:41:1e:7e:b4: 58:b6:07:e9:14:4a:42:2b:ea:00:c0:74:c8:2b:98: 80:2f:1b:92:be:ba:ed:f8:9b:fb:98:24:2e:70:92: 93:8b:89:2a:d5:ae:f4:d3:75:41:19:cd:b6:1b:87: 3e:ef:c1:3f:13:40:1e:9a:7a:33:40:9f:63:5a:7e: 25:f1:9c:11:13:71:8e:5e:6a:91:96:57:b2:f8:6c: e5:1b:88:1a:6d:c7:32:6b:78:fb:ad:45:eb:fb:b4: 62:1d:3d:68:40:79:c4:2d:4a:3e:d8:c5:30:a3:dd: 96:a5:fb:d2:13:06:97:62:0e:eb:2b:3a:47:d9:92: 15:7b:5a:d0:05:88:fc:18:a2:1a:e8:3c:8e:62:fb: 63:65:f2:0a:44:12:5f:e1:ff:70:4c:ad:c3:64:d7: 00:1b:ad:40:37:f2:63:56:b5:9b:8b:a8:5c:59:df: 36:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E6:42:70:72:67:51:66:60:AE:E2:63:1F:AC:41:6F:6E:B7:7A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/955b5c5b-556c-3812-bac1-0a6fae51e8ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:74:71:66:85:e2:af:83:60:b0:7c:c2:ff:40:69:73:9b:2b: 5a:26:b8:4a:fa:c7:00:02:ed:5d:5d:79:fb:cd:e2:e1:92:1c: 50:88:4e:ed:51:80:24:07:6c:cc:75:1e:3c:71:af:5b:4e:10: c8:10:7a:72:e9:39:ab:0e:6d:fc:a7:90:18:a1:2e:3e:85:e4: 92:42:64:75:6d:91:36:34:a2:ac:03:e7:9e:0c:5b:f3:06:df: 26:8a:ae:96:65:99:e4:81:9d:df:4a:77:3c:54:ba:6d:3c:14: 8c:c0:e6:ae:cd:1e:1a:16:74:73:6f:7d:24:05:24:ab:75:d4: 7a:59:2f:a9:9b:38:25:25:00:78:28:3f:07:61:a7:ad:ef:cb: 70:e4:c3:cd:96:2a:9f:57:73:8e:f3:92:69:d8:ca:78:db:5a: 77:3b:4a:94:a4:8e:6d:a1:84:26:43:58:13:c0:a0:32:64:1d: d5:e2:a4:23:3b:14:8a:b0:f5:58:f9:23:81:36:8c:48:88:5d: e8:b2:17:93:13:d8:18:a9:73:83:8f:a8:d9:62:d1:1c:ae:d6: 52:b9:0b:87:74:85:60:77:d7:c5:c1:b0:d7:7d:25:79:4c:b5: 16:8b:43:c7:db:37:a7:16:ed:a3:bb:d1:4e:a3:35:eb:db:90: 59:6e:2a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnT0sCXENjceJmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MTJhMjY1NGYtZTQ5Yy00ZjUwLWI2M2EtYTRlZjZlZDdhYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVWMPZy7W9FWx51bYNjUC6J915YMDV/wP0oX Zq1Besa4Zu0HPpCieIyaQMaJUdQylz8cr2nrexTckvtivoOHDowLjErp9b04YZmJ Aa197Vh/8c/K7EEefrRYtgfpFEpCK+oAwHTIK5iALxuSvrrt+Jv7mCQucJKTi4kq 1a7003VBGc22G4c+78E/E0AemnozQJ9jWn4l8ZwRE3GOXmqRlley+GzlG4gabccy a3j7rUXr+7RiHT1oQHnELUo+2MUwo92WpfvSEwaXYg7rKzpH2ZIVe1rQBYj8GKIa 6DyOYvtjZfIKRBJf4f9wTK3DZNcAG61AN/JjVrWbi6hcWd825wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTmQnByZ1FmYK7iYx+sQW9ut3rxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTU1YjVjNWItNTU2Yy0z ODEyLWJhYzEtMGE2ZmFlNTFlOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR0cWaF4q+DYLB8wv9AaXObK1omuEr6xwAC7V1defvN4uGSHFCITu1R gCQHbMx1Hjxxr1tOEMgQenLpOasObfynkBihLj6F5JJCZHVtkTY0oqwD554MW/MG 3yaKrpZlmeSBnd9KdzxUum08FIzA5q7NHhoWdHNvfSQFJKt11HpZL6mbOCUlAHgo Pwdhp63vy3Dkw82WKp9Xc47zkmnYynjbWnc7SpSkjm2hhCZDWBPAoDJkHdXipCM7 FIqw9Vj5I4E2jEiIXeiyF5MT2Bipc4OPqNli0Ryu1lK5C4d0hWB318XBsNd9JXlM tRaLQ8fbN6cW7aO70U6jNevbkFluKiI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:26 2025 by rpki-client