$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4b67133-ec8f-3fd1-9abc-89cff6cda970.roa File: c4b67133-ec8f-3fd1-9abc-89cff6cda970.roa (raw, json) Hash identifier: gJvyHEyEMKmM9cZ3cZFFxqXBC+USWf7uZfqgdKzyfbs= Subject key identifier: 37:93:07:F4:24:21:6D:C6:7C:07:D9:34:AA:3A:C6:9D:98:EF:1A:92 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC87667F5D25B094E4A796800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4b67133-ec8f-3fd1-9abc-89cff6cda970.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.66.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:67:f5:d2:5b:09:4e:4a:79:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=5cb29e08-a668-479d-b86b-dc1eef77fb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9c:28:d2:b2:35:33:36:ec:16:da:f1:64:d5: 8f:24:c9:b3:de:71:f2:b2:cd:50:52:e4:6a:4f:5e: 53:32:1f:46:ff:7a:3f:80:b6:97:b7:d2:33:b0:c9: 3b:70:ed:4c:73:6b:d7:e7:74:10:47:a8:04:83:c8: 3f:b5:42:a7:71:88:5a:d2:ed:87:20:6b:22:3e:35: 4b:de:f7:04:08:0a:1c:a0:ba:69:db:6e:85:32:8e: 55:b5:11:cb:92:f6:b9:b5:09:e6:4f:af:65:5f:97: ee:1c:c0:17:ca:53:05:e8:2d:46:68:5d:3b:f2:20: 9c:80:24:f6:55:75:6c:7c:52:cb:95:6c:00:df:c3: 22:72:cb:c4:c7:44:a5:26:cf:ea:77:36:c0:61:32: a7:ac:56:9d:63:68:dc:18:55:1a:97:34:23:53:bf: a6:c2:df:db:95:61:ac:43:d5:da:df:1e:96:6f:36: 48:ec:dc:47:e1:cf:bc:77:b7:e7:d6:e6:72:f5:5a: e5:95:1e:32:d7:03:cc:37:1e:b4:02:e7:9b:4d:d6: 7e:9a:d0:e7:7c:cf:ef:31:c9:63:44:c5:36:eb:10: 42:75:12:81:d4:0e:db:9e:35:0a:0a:89:ca:31:62: 0f:54:17:fa:d6:b0:ac:0b:c0:b9:1a:8a:97:8c:49: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:93:07:F4:24:21:6D:C6:7C:07:D9:34:AA:3A:C6:9D:98:EF:1A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c4b67133-ec8f-3fd1-9abc-89cff6cda970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6d:35:ae:20:7e:87:9e:76:2a:0f:77:00:69:f3:4d:56:e6: b7:05:16:22:ca:f1:d6:96:47:9a:b0:a7:5f:e0:d4:09:eb:19: 06:e1:77:17:5c:1d:49:d6:6e:27:b6:f4:98:d4:e7:bd:af:52: fe:1c:fd:d1:8b:34:16:4a:2c:bb:5e:be:37:19:ae:1c:c9:88: d0:b8:e5:5d:64:0f:13:0f:46:0c:a8:1b:25:b8:17:15:05:b5: 9e:5d:b8:bf:87:ce:44:da:d5:a9:1c:c1:c3:3c:74:8e:eb:97: ac:9b:10:df:e0:8b:1b:03:37:b7:36:ad:e1:21:a2:13:f1:4a: 7d:05:70:90:bc:69:1e:8f:53:0d:8e:12:4f:35:47:e6:5f:61: 8c:9c:07:cc:40:35:a5:fb:e7:38:90:85:0a:82:6c:05:60:ab: 41:d7:20:c5:1b:ae:5d:74:8a:91:79:2a:5b:38:e6:46:0c:d7: 2f:83:f7:62:8a:6c:7f:5f:99:1f:92:05:53:c4:89:5e:d5:14: a6:52:dc:a0:8a:e9:c5:66:d3:fa:1e:14:f1:49:70:83:2c:6f: 99:78:b0:0c:9d:4f:a3:9f:8e:41:c6:b0:4b:43:2a:97:00:81: f9:99:d8:10:0f:90:59:e6:3a:22:17:f8:5b:93:c7:f7:11:4a: cc:d3:c9:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmf10lsJTkp5aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWNiMjllMDgtYTY2OC00NzlkLWI4NmItZGMxZWVmNzdmYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJwo0rI1MzbsFtrxZNWPJMmz3nHyss1QUuRq T15TMh9G/3o/gLaXt9IzsMk7cO1Mc2vX53QQR6gEg8g/tUKncYha0u2HIGsiPjVL 3vcECAocoLpp226FMo5VtRHLkva5tQnmT69lX5fuHMAXylMF6C1GaF078iCcgCT2 VXVsfFLLlWwA38MicsvEx0SlJs/qdzbAYTKnrFadY2jcGFUalzQjU7+mwt/blWGs Q9Xa3x6WbzZI7NxH4c+8d7fn1uZy9VrllR4y1wPMNx60AuebTdZ+mtDnfM/vMclj RMU26xBCdRKB1A7bnjUKConKMWIPVBf61rCsC8C5GoqXjElElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeTB/QkIW3GfAfZNKo6xp2Y7xqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzRiNjcxMzMtZWM4Zi0z ZmQxLTlhYmMtODljZmY2Y2RhOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhtNa4gfoeedioPdwBp801W5rcFFiLK8daWR5qwp1/g1AnrGQbhdxdc HUnWbie29JjU572vUv4c/dGLNBZKLLtevjcZrhzJiNC45V1kDxMPRgyoGyW4FxUF tZ5duL+HzkTa1akcwcM8dI7rl6ybEN/gixsDN7c2reEhohPxSn0FcJC8aR6PUw2O Ek81R+ZfYYycB8xANaX75ziQhQqCbAVgq0HXIMUbrl10ipF5Kls45kYM1y+D92KK bH9fmR+SBVPEiV7VFKZS3KCK6cVm0/oeFPFJcIMsb5l4sAydT6OfjkHGsEtDKpcA gfmZ2BAPkFnmOiIX+FuTx/cRSszTyYQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:10 2025 by rpki-client