$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace8792c-7d07-3492-9e33-dc0893f21678.roa File: ace8792c-7d07-3492-9e33-dc0893f21678.roa (raw, json) Hash identifier: ZkBnHODhCY8JAeZ3sTVeF0rXizQGaGgW2Y19siMEUvU= Subject key identifier: 9A:C4:16:F9:F8:65:DC:15:04:04:06:FE:FD:0C:04:77:02:0A:56:CD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB4117D98D0ED4E8958B0240 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace8792c-7d07-3492-9e33-dc0893f21678.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:17:d9:8d:0e:d4:e8:95:8b:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=c1cc3da8-d678-4451-8665-4edbb832c24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:99:64:61:70:6d:c8:30:44:bb:74:25:51:0d: 44:b4:ee:9a:f5:f1:7b:13:ac:1b:58:31:4b:13:65: d1:d5:7f:ad:be:ca:dd:3f:03:0b:16:2b:21:af:a3: 6f:3d:a4:82:df:2a:2a:42:ad:b0:21:e6:a5:eb:7c: 4f:db:61:6b:06:b9:e2:41:9c:03:93:37:c5:12:cc: b5:f5:55:e1:70:b9:82:56:e1:98:ba:0e:48:b3:06: de:11:f1:3e:96:9f:38:cf:0e:1d:67:68:f1:7e:2a: 7e:2e:ab:e7:e6:3b:1d:2d:23:ca:d8:c2:50:94:a6: ee:8b:79:f8:d0:38:bf:b8:9b:e0:c8:6e:10:b7:2a: 37:86:2c:6a:05:f9:fb:bb:0f:0d:fa:d7:03:5e:16: f6:2f:e0:d8:03:56:89:51:45:5f:2a:37:87:3a:85: 4b:83:06:44:5c:fb:98:91:9c:8f:3f:d4:56:d8:7c: b4:5d:49:48:a1:09:5e:59:1c:81:4b:c6:11:ed:ee: f2:1a:12:00:2f:00:81:1c:57:51:36:f2:04:67:da: 7f:a3:3f:d4:8b:34:4a:2b:56:e0:85:62:ad:65:3e: 5b:e2:d9:57:fe:dd:80:f5:e8:d5:34:80:44:66:fb: e6:87:19:ba:b5:d0:dc:39:98:f1:73:77:f5:87:19: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C4:16:F9:F8:65:DC:15:04:04:06:FE:FD:0C:04:77:02:0A:56:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ace8792c-7d07-3492-9e33-dc0893f21678.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:32:06:8a:88:50:b1:81:3b:5b:35:82:1e:cb:7a:41:87:a0: f6:f1:14:0a:48:9e:a2:46:da:52:0d:8d:99:d8:a1:e3:97:84: cb:04:7c:ca:86:21:dd:d7:f0:dd:0e:31:5c:d5:81:2b:36:5d: d0:09:14:a1:3d:8c:a0:75:bb:73:17:16:95:0d:e8:77:61:8f: aa:cd:26:b8:85:6c:4e:b1:88:ba:12:84:ef:f7:71:bc:53:1f: 11:3a:8c:29:91:cd:25:bc:90:20:85:ea:64:58:ff:43:7f:3d: c5:ce:43:fa:3a:6c:45:02:79:41:31:8c:04:ec:4c:a1:f6:36: b6:40:6b:3d:51:98:b6:61:4c:59:5b:ff:09:8b:a9:5b:2d:cd: a8:b9:38:51:d9:57:95:43:f0:dd:7d:e9:f1:1f:d8:c2:e5:69: 17:ee:1d:af:e6:b0:f9:24:c2:bd:4d:ef:b8:ae:fd:e1:09:de: 11:8f:7f:90:eb:74:7c:59:f4:66:e3:bc:a8:14:18:db:b8:94: ac:0c:37:9c:a3:fd:ac:3c:15:55:98:cf:06:49:e0:58:60:2a: fd:72:a3:68:b1:7b:f5:ee:30:12:51:a2:29:bf:a1:5b:cd:ce: 71:d3:46:b5:39:b0:3f:82:05:0e:5c:d9:f8:ad:c6:38:ed:05: 0c:72:d2:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRfZjQ7U6JWLAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzFjYzNkYTgtZDY3OC00NDUxLTg2NjUtNGVkYmI4MzJjMjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJlkYXBtyDBEu3QlUQ1EtO6a9fF7E6wbWDFL E2XR1X+tvsrdPwMLFishr6NvPaSC3yoqQq2wIeal63xP22FrBrniQZwDkzfFEsy1 9VXhcLmCVuGYug5IswbeEfE+lp84zw4dZ2jxfip+Lqvn5jsdLSPK2MJQlKbui3n4 0Di/uJvgyG4Qtyo3hixqBfn7uw8N+tcDXhb2L+DYA1aJUUVfKjeHOoVLgwZEXPuY kZyPP9RW2Hy0XUlIoQleWRyBS8YR7e7yGhIALwCBHFdRNvIEZ9p/oz/UizRKK1bg hWKtZT5b4tlX/t2A9ejVNIBEZvvmhxm6tdDcOZjxc3f1hxlLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrEFvn4ZdwVBAQG/v0MBHcCClbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWNlODc5MmMtN2QwNy0z NDkyLTllMzMtZGMwODkzZjIxNjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwyBoqIULGBO1s1gh7LekGHoPbxFApInqJG2lINjZnYoeOXhMsEfMqG Id3X8N0OMVzVgSs2XdAJFKE9jKB1u3MXFpUN6Hdhj6rNJriFbE6xiLoShO/3cbxT HxE6jCmRzSW8kCCF6mRY/0N/PcXOQ/o6bEUCeUExjATsTKH2NrZAaz1RmLZhTFlb /wmLqVstzai5OFHZV5VD8N196fEf2MLlaRfuHa/msPkkwr1N77iu/eEJ3hGPf5Dr dHxZ9GbjvKgUGNu4lKwMN5yj/aw8FVWYzwZJ4FhgKv1yo2ixe/XuMBJRoim/oVvN znHTRrU5sD+CBQ5c2fitxjjtBQxy0q0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:17:50 2025 by rpki-client