$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3df5482-7153-3764-b471-97eee6c6ed41.roa File: b3df5482-7153-3764-b471-97eee6c6ed41.roa (raw, json) Hash identifier: E9XaOUsOSuQBrmYMZ2XFUkKnSSbCAmUlY7vsQTCEGOU= Subject key identifier: F4:67:33:8A:DF:B9:3F:C4:AF:4E:77:B6:6F:EC:AA:4F:39:F3:98:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB40FFB368B264D47CA58B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3df5482-7153-3764-b471-97eee6c6ed41.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:ff:b3:68:b2:64:d4:7c:a5:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=5d8eaae4-60ff-4798-9ed2-3a1187ee1a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:0f:c8:88:58:1f:52:3a:66:60:f4:a9:87: 7c:6f:d0:f2:40:d7:77:cb:26:20:19:67:8f:ec:1b: e6:6a:7f:67:d2:c6:67:52:00:c0:1e:c4:81:44:24: 97:8d:e2:d8:e6:b7:a7:e0:ac:c5:88:28:a5:97:e2: 01:70:f6:d3:bd:52:3d:36:a0:57:04:50:07:84:8b: b1:a0:93:13:ff:bb:1a:9f:fb:92:6c:20:65:8e:26: c2:ff:7a:52:22:49:e4:8b:54:70:60:ea:85:e0:4d: 11:75:a4:b2:3e:62:8a:60:a4:02:3e:ba:e2:30:2e: 0f:48:e0:96:e1:c1:dd:7d:4e:30:10:86:f5:ad:42: cb:05:48:52:59:dd:e4:79:6f:01:85:01:6c:b1:05: 76:ec:2c:72:c6:42:ec:f8:d6:7a:39:a3:bb:74:4c: 1e:f2:7e:f9:83:f3:3e:ec:80:c9:c2:e4:24:5b:c2: a0:be:16:5e:24:41:28:dc:52:36:16:54:90:40:13: 97:03:81:68:d5:24:61:44:d1:86:c1:3c:dd:54:08: 6a:87:ec:1f:37:28:f0:74:d4:39:76:47:ac:f0:24: 6d:84:89:35:ec:20:b0:f3:98:bc:c1:a2:4f:4b:4b: 34:e2:03:c5:56:dd:ea:61:f1:a1:40:e8:9e:38:41: bc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:67:33:8A:DF:B9:3F:C4:AF:4E:77:B6:6F:EC:AA:4F:39:F3:98:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3df5482-7153-3764-b471-97eee6c6ed41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:f5:21:11:15:f5:cc:20:10:f0:4a:d4:36:39:ad:43:40:d2: 4a:0a:0f:c6:52:5e:2b:85:dc:e5:ee:2a:8d:d7:93:e8:03:34: aa:e6:4e:cc:54:98:1d:23:d0:87:a2:4a:6c:81:f2:0f:fb:a4: 13:2e:c1:27:ee:00:d8:b3:3c:8e:f5:a1:ea:d1:1a:17:da:4c: 5e:6b:4f:65:b8:25:a7:00:28:91:14:23:c3:23:60:25:05:1b: 92:00:4e:70:73:b5:7d:1b:98:0f:85:1b:78:2e:90:8b:73:be: 74:4e:96:8a:77:14:4c:64:17:e1:a6:61:59:a9:51:a0:c9:35: 05:86:9d:91:bd:da:50:63:e6:1b:aa:b8:fa:8c:85:8a:64:b3: 5c:c4:23:a0:4b:0c:41:40:6c:29:24:e2:4a:5a:80:7a:30:03: d0:32:92:86:7a:ba:3d:d9:db:e2:57:a3:64:2f:c7:09:47:61: b3:b2:c1:00:3e:f1:17:8a:67:dc:c4:3a:75:30:02:f4:71:dc: fa:6f:b1:7d:18:36:67:d2:5b:a8:98:be:fd:d2:4a:d9:a4:cc: e0:25:0f:0a:ac:28:5d:d3:02:63:aa:4c:c0:9f:2f:70:16:d5: 4f:4b:19:e8:64:c9:f5:8e:fa:f0:9d:ef:02:d5:c4:ee:f4:ba: 80:1c:bc:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQP+zaLJk1Hyli4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NWQ4ZWFhZTQtNjBmZi00Nzk4LTllZDItM2ExMTg3ZWUxYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiUPyIhYH1I6ZmD0qYd8b9DyQNd3yyYgGWeP 7Bvman9n0sZnUgDAHsSBRCSXjeLY5ren4KzFiCill+IBcPbTvVI9NqBXBFAHhIux oJMT/7san/uSbCBljibC/3pSIknki1RwYOqF4E0RdaSyPmKKYKQCPrriMC4PSOCW 4cHdfU4wEIb1rULLBUhSWd3keW8BhQFssQV27CxyxkLs+NZ6OaO7dEwe8n75g/M+ 7IDJwuQkW8KgvhZeJEEo3FI2FlSQQBOXA4Fo1SRhRNGGwTzdVAhqh+wfNyjwdNQ5 dkes8CRthIk17CCw85i8waJPS0s04gPFVt3qYfGhQOieOEG8gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRnM4rfuT/Er053tm/sqk8585hQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjNkZjU0ODItNzE1My0z NzY0LWI0NzEtOTdlZWU2YzZlZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/1IREV9cwgEPBK1DY5rUNA0koKD8ZSXiuF3OXuKo3Xk+gDNKrmTsxU mB0j0IeiSmyB8g/7pBMuwSfuANizPI71oerRGhfaTF5rT2W4JacAKJEUI8MjYCUF G5IATnBztX0bmA+FG3gukItzvnROlop3FExkF+GmYVmpUaDJNQWGnZG92lBj5huq uPqMhYpks1zEI6BLDEFAbCkk4kpagHowA9AykoZ6uj3Z2+JXo2QvxwlHYbOywQA+ 8ReKZ9zEOnUwAvRx3PpvsX0YNmfSW6iYvv3SStmkzOAlDwqsKF3TAmOqTMCfL3AW 1U9LGehkyfWO+vCd7wLVxO70uoAcvLk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:43 2025 by rpki-client