$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec5b6e3-eacf-3d0f-865b-403e11aff438.roa File: aec5b6e3-eacf-3d0f-865b-403e11aff438.roa (raw, json) Hash identifier: 6gpXuBait01b2FK4oncpXbkIhwuyiuuGZncEZKqHnMI= Subject key identifier: 42:BA:AC:09:43:EA:7D:5C:60:86:93:3F:85:36:E9:60:19:3F:37:1B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB411B06B8338ED4B785DE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec5b6e3-eacf-3d0f-865b-403e11aff438.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:1b:06:b8:33:8e:d4:b7:85:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=86f2d5a7-fa29-464d-a33a-a7c4caf3fadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:b4:d6:33:46:e0:87:9c:2d:8e:4c:c5:12: 68:52:04:3b:c6:b8:b8:23:af:0b:4c:14:37:87:1c: 88:7a:41:f1:84:77:07:8d:15:fb:ba:a3:e4:ba:ea: c2:29:5c:e2:ee:f2:a0:a5:3b:d4:61:59:4f:17:f2: e8:9c:c4:6b:f3:7f:7a:b4:10:e0:b9:24:4c:5e:75: 29:62:8e:89:3f:41:52:58:62:0f:6f:0c:31:7d:6f: aa:d2:2a:4e:96:b0:dc:89:03:03:5e:de:41:e0:23: 21:07:5a:c9:53:94:9c:07:4f:2f:d6:35:f5:bc:bb: 2b:b2:89:6d:61:a0:e8:e4:05:97:d9:85:a9:41:86: ac:3e:17:b5:78:48:9b:d8:40:28:c9:85:6a:74:e5: 13:71:2f:49:f2:f9:21:dd:9e:6e:de:c3:3a:74:67: 47:ca:15:0f:c9:81:5e:03:2c:83:3a:f0:5a:8f:4e: 71:95:a3:3e:3a:f2:d9:62:94:72:18:34:c6:ad:f2: 3d:66:66:00:ba:6c:4a:0c:c9:ca:3b:62:f7:54:8e: 8f:e2:cb:f1:45:6e:cc:db:a4:71:8d:08:2f:24:27: 07:64:5a:3e:58:e9:22:3a:55:33:77:65:92:90:93: d3:8a:83:71:7e:2d:91:2a:2d:bf:ab:43:77:c5:e5: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BA:AC:09:43:EA:7D:5C:60:86:93:3F:85:36:E9:60:19:3F:37:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aec5b6e3-eacf-3d0f-865b-403e11aff438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:31:78:2e:d0:9e:f3:2b:71:22:59:6c:e5:18:13:78:c9:c9: d6:b2:e3:89:3a:28:7b:ff:9c:45:38:92:da:9e:7b:2b:a3:97: 36:54:74:e4:f3:4b:70:16:8c:0b:28:d2:61:36:f4:0c:14:a7: d7:70:d6:74:a5:6c:a0:e8:bc:55:59:99:f1:53:b6:da:c0:8a: eb:d8:e7:0b:cc:e6:e6:f1:45:28:94:b6:b9:8b:c7:9d:11:15: a0:a8:77:1d:72:a7:d5:52:2b:7b:18:79:5a:aa:39:9b:23:a4: 8d:c1:dd:43:40:1b:b5:72:af:09:ad:46:19:9b:bb:75:87:e2: 44:e4:e6:e3:22:95:bc:ac:74:da:5b:21:bc:b8:d9:ba:f4:72: 11:93:ca:f6:1a:b5:13:74:6f:12:0f:04:21:10:c3:df:69:8f: 65:d4:7e:8d:3b:96:ad:ea:62:6d:56:9f:14:f1:d7:06:cb:8d: be:0d:9f:30:76:0c:e0:14:77:4b:96:49:c0:79:4c:06:ca:85: b3:f8:31:9b:7e:28:49:59:7b:a2:33:66:d1:4e:94:d4:16:6b: 0a:7a:ef:ce:27:a7:ab:3a:6e:9e:55:55:74:38:af:42:96:30: 0d:4e:78:4a:17:04:c3:ad:9e:4c:29:29:f4:59:7e:63:c1:af: 0c:9b:5a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRsGuDOO1LeF3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ODZmMmQ1YTctZmEyOS00NjRkLWEzM2EtYTdjNGNhZjNmYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQe01jNG4IecLY5MxRJoUgQ7xri4I68LTBQ3 hxyIekHxhHcHjRX7uqPkuurCKVzi7vKgpTvUYVlPF/LonMRr8396tBDguSRMXnUp Yo6JP0FSWGIPbwwxfW+q0ipOlrDciQMDXt5B4CMhB1rJU5ScB08v1jX1vLsrsolt YaDo5AWX2YWpQYasPhe1eEib2EAoyYVqdOUTcS9J8vkh3Z5u3sM6dGdHyhUPyYFe AyyDOvBaj05xlaM+OvLZYpRyGDTGrfI9ZmYAumxKDMnKO2L3VI6P4svxRW7M26Rx jQgvJCcHZFo+WOkiOlUzd2WSkJPTioNxfi2RKi2/q0N3xeUjkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK6rAlD6n1cYIaTP4U26WAZPzcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWVjNWI2ZTMtZWFjZi0z ZDBmLTg2NWItNDAzZTExYWZmNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsxeC7QnvMrcSJZbOUYE3jJyday44k6KHv/nEU4ktqeeyujlzZUdOTz S3AWjAso0mE29AwUp9dw1nSlbKDovFVZmfFTttrAiuvY5wvM5ubxRSiUtrmLx50R FaCodx1yp9VSK3sYeVqqOZsjpI3B3UNAG7VyrwmtRhmbu3WH4kTk5uMilbysdNpb Iby42br0chGTyvYatRN0bxIPBCEQw99pj2XUfo07lq3qYm1WnxTx1wbLjb4NnzB2 DOAUd0uWScB5TAbKhbP4MZt+KElZe6IzZtFOlNQWawp6784np6s6bp5VVXQ4r0KW MA1OeEoXBMOtnkwpKfRZfmPBrwybWpo= -----END CERTIFICATE-----Generated at Sat Aug 23 19:49:29 2025 by rpki-client