$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa File: a12efd23-1da3-3127-950e-d6f4cfde3c50.roa (raw, json) Hash identifier: veGcvqh7M85wHpgs0gjnQYKwVghbeq7LzVx0+LSCrMw= Subject key identifier: BC:C1:72:FE:A4:AE:48:12:55:AC:E7:35:98:BE:EE:90:3F:FB:90:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC87665EDF557AB8A8CE9E8C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.64.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:65:ed:f5:57:ab:8a:8c:e9:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=67a8182a-6922-401d-a87a-d1f6b227ffce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:9d:f3:2f:09:d5:43:ed:50:0e:f2:bb:38: 82:b0:dd:45:c2:0b:41:ca:3e:e5:13:58:06:ed:e8: 5c:fa:94:c4:7f:a6:33:1c:ea:f7:b6:f5:23:89:39: 49:c6:e3:7a:8c:fe:2f:4e:11:ea:43:bb:95:03:43: e7:93:bc:5f:57:80:cf:29:d8:9b:2a:7b:25:d6:e8: c7:c4:16:69:5e:f7:73:47:0b:89:06:03:36:81:23: cb:84:57:77:60:5c:2c:2c:fd:e5:a9:d7:cc:f6:2a: b4:4b:29:50:64:2b:59:54:10:8a:91:6c:55:f6:96: 8b:64:c3:a4:4d:64:7e:68:a7:db:ec:2e:43:84:41: 08:ff:dc:43:e5:d6:73:fc:82:21:7c:3e:a6:6f:9e: 13:99:98:c1:75:75:5a:fa:05:f8:c6:37:d4:b9:89: c3:0e:ca:58:a7:4d:f1:0d:e0:82:6a:f1:60:e5:5b: 85:0e:92:ca:20:22:20:10:f4:e2:c2:38:81:8d:d4: 55:66:ea:9e:4e:d1:6e:50:14:72:be:50:99:89:9f: 05:c2:b6:88:d7:94:0c:8d:39:0f:c6:18:44:e6:0b: f1:18:56:5b:91:24:ad:aa:ab:93:b2:63:62:d0:a3: be:6a:19:69:c6:fa:4e:30:05:0d:6d:29:bf:0c:db: 29:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C1:72:FE:A4:AE:48:12:55:AC:E7:35:98:BE:EE:90:3F:FB:90:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a1:d2:b7:c3:79:3a:b0:4e:d0:1a:d6:4b:aa:a8:a0:33:ab: 8a:bd:e4:66:f4:33:3c:80:1f:e6:30:e2:14:5a:82:45:00:a8: 5f:51:9e:de:cb:4e:83:55:1b:21:ba:09:5a:88:6c:d3:b9:f7: 83:de:d5:c1:69:e3:ee:b0:35:a1:8b:20:9f:e6:d8:2a:41:4e: 3b:7c:9c:1b:f4:5e:9f:61:44:ea:cc:b0:3f:da:50:df:d1:e7: 94:7e:aa:20:c0:01:30:0c:9b:5d:d2:1c:c7:79:89:27:ce:ab: 46:af:6e:88:ec:a9:f9:85:35:1b:0d:a8:6e:a5:26:df:ab:6b: 68:02:c1:d1:61:75:0e:3d:08:0b:b1:83:fe:4b:16:3a:b1:0e: 58:f5:c0:50:27:0e:a1:42:b2:09:fa:d4:7c:a8:19:00:d4:bc: d3:0f:31:58:63:21:b5:14:6c:24:bf:96:a6:5b:92:43:1d:ec: 9e:dd:ef:d4:29:f8:b6:89:80:85:1c:16:16:0b:38:8b:16:00: 52:12:e8:97:bc:4c:c8:be:ad:cb:33:06:5b:b9:bc:72:04:87: 6a:31:a4:e5:e8:6f:19:16:74:ac:15:0f:e3:8d:f7:4f:d0:c9: 3d:f2:5d:07:62:26:fe:0d:45:96:20:92:2a:db:97:5f:42:b0: a8:8b:bc:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmXt9Veriozp6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NjdhODE4MmEtNjkyMi00MDFkLWE4N2EtZDFmNmIyMjdmZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7+d8y8J1UPtUA7yuziCsN1FwgtByj7lE1gG 7ehc+pTEf6YzHOr3tvUjiTlJxuN6jP4vThHqQ7uVA0Pnk7xfV4DPKdibKnsl1ujH xBZpXvdzRwuJBgM2gSPLhFd3YFwsLP3lqdfM9iq0SylQZCtZVBCKkWxV9paLZMOk TWR+aKfb7C5DhEEI/9xD5dZz/IIhfD6mb54TmZjBdXVa+gX4xjfUuYnDDspYp03x DeCCavFg5VuFDpLKICIgEPTiwjiBjdRVZuqeTtFuUBRyvlCZiZ8FwraI15QMjTkP xhhE5gvxGFZbkSStqquTsmNi0KO+ahlpxvpOMAUNbSm/DNsp2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzBcv6krkgSVaznNZi+7pA/+5DuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTEyZWZkMjMtMWRhMy0z MTI3LTk1MGUtZDZmNGNmZGUzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+h0rfDeTqwTtAa1kuqqKAzq4q95Gb0MzyAH+Yw4hRagkUAqF9Rnt7L ToNVGyG6CVqIbNO594Pe1cFp4+6wNaGLIJ/m2CpBTjt8nBv0Xp9hROrMsD/aUN/R 55R+qiDAATAMm13SHMd5iSfOq0avbojsqfmFNRsNqG6lJt+ra2gCwdFhdQ49CAux g/5LFjqxDlj1wFAnDqFCsgn61HyoGQDUvNMPMVhjIbUUbCS/lqZbkkMd7J7d79Qp +LaJgIUcFhYLOIsWAFIS6Je8TMi+rcszBlu5vHIEh2oxpOXobxkWdKwVD+ON90/Q yT3yXQdiJv4NRZYgkirbl19CsKiLvNM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:33 2025 by rpki-client