$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa File: cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa (raw, json) Hash identifier: ifKM7bgeVbITVfM1NPKclLaM4Yn0sEBH5XWU5UbK8Fg= Subject key identifier: 45:56:10:C3:AC:68:7B:51:8B:93:8E:FA:5D:6A:2E:71:89:F5:BF:37 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB4117B41F7CCC3AFE26DB70 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:17:b4:1f:7c:cc:3a:fe:26:db:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=07fb6a65-c20e-4fef-83d0-2331968e290d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b3:fa:0e:02:93:90:7c:c9:24:fb:10:18:20: dc:fe:1b:ef:f5:6f:f9:0d:a2:31:ea:55:cb:16:c3: 05:5b:3c:9c:fb:9d:97:f8:0e:12:cb:b1:44:5a:d3: 27:94:7d:14:bd:69:8a:f8:00:1c:b7:03:67:35:63: f6:81:5e:b4:3c:e0:ef:66:ae:0c:e9:3f:60:98:e9: 8c:88:fd:7c:d1:9c:b8:63:88:15:28:65:c3:fa:64: 3c:e5:e4:9e:6a:aa:9d:b6:90:21:e5:f3:b7:90:2d: 11:9c:3a:93:3b:6d:75:03:8d:e0:41:03:1a:3f:32: a3:ee:33:de:bc:6c:aa:6f:24:e6:47:10:2a:67:43: e2:90:cf:c9:d4:33:fd:55:70:48:0e:ab:b3:9c:08: f3:64:0a:10:74:e8:f3:79:97:58:ca:db:7d:57:e3: 6f:b2:27:53:8b:cb:fc:84:6b:fb:ed:93:b8:53:cd: e7:b7:4b:94:a2:d9:9c:79:5d:79:32:40:b7:56:a8: 80:7d:2f:ae:a8:7a:4c:b4:73:3a:3a:fc:1e:7d:85: 50:ad:55:16:46:b2:e9:b1:07:e4:ba:70:9d:67:c7: e0:4d:95:d8:30:17:e6:a6:e3:e7:aa:bd:42:2b:e8: c8:f7:f5:e2:eb:e7:55:03:b7:3a:53:48:ba:8d:5b: a4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:56:10:C3:AC:68:7B:51:8B:93:8E:FA:5D:6A:2E:71:89:F5:BF:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:91:84:9f:17:a2:e2:2e:80:db:c5:51:36:76:76:11:ec:88: 3d:1d:b3:c5:e0:84:c6:d0:cf:0a:9c:38:d0:c4:c1:4a:49:ad: 03:9b:3d:82:d7:98:0f:11:65:44:af:a5:01:b5:76:5f:6b:0d: f1:a4:ce:f0:a2:92:19:a0:07:1d:13:51:d4:79:d0:8b:1e:e2: 23:9c:8d:bb:c1:73:32:2a:7a:68:c4:23:b7:9e:fd:75:d4:e3: 6f:51:e3:57:47:d1:ad:47:40:6a:2b:84:9a:6e:c2:9f:57:af: 93:13:87:12:bc:a5:29:84:3f:c6:5f:ad:5b:4f:3a:ed:33:ee: 6f:d9:cd:cc:22:13:ac:85:63:71:c1:60:4b:c4:41:a9:67:f7: e7:16:d3:83:16:6b:17:b8:e3:b5:4b:0f:e7:8b:d7:f1:3b:50: fc:6e:9c:8e:f2:a7:d5:78:2c:ba:17:1e:93:04:a1:c3:63:7d: 00:9b:bb:dd:61:93:b8:54:2e:e3:d3:28:54:aa:26:98:49:4b: 5e:c4:9a:e1:92:f5:7d:26:5d:7a:a4:ea:6b:79:fa:79:9b:e0: af:1e:37:19:d8:44:e2:32:bf:e9:d2:8e:71:86:e2:b6:c5:b2: b4:36:ba:bd:fb:b0:3d:b0:12:a9:60:72:08:74:d6:6b:e0:ac: a7:49:b6:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRe0H3zMOv4m23AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDdmYjZhNjUtYzIwZS00ZmVmLTgzZDAtMjMzMTk2OGUyOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbP6DgKTkHzJJPsQGCDc/hvv9W/5DaIx6lXL FsMFWzyc+52X+A4Sy7FEWtMnlH0UvWmK+AActwNnNWP2gV60PODvZq4M6T9gmOmM iP180Zy4Y4gVKGXD+mQ85eSeaqqdtpAh5fO3kC0RnDqTO211A43gQQMaPzKj7jPe vGyqbyTmRxAqZ0PikM/J1DP9VXBIDquznAjzZAoQdOjzeZdYytt9V+NvsidTi8v8 hGv77ZO4U83nt0uUotmceV15MkC3VqiAfS+uqHpMtHM6OvwefYVQrVUWRrLpsQfk unCdZ8fgTZXYMBfmpuPnqr1CK+jI9/Xi6+dVA7c6U0i6jVukzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVWEMOsaHtRi5OO+l1qLnGJ9b83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2QyMGM0MDQtY2M2OS0z YmI5LWI0M2ItNDBlNWVjMTI1ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuRhJ8XouIugNvFUTZ2dhHsiD0ds8XghMbQzwqcONDEwUpJrQObPYLX mA8RZUSvpQG1dl9rDfGkzvCikhmgBx0TUdR50Ise4iOcjbvBczIqemjEI7ee/XXU 429R41dH0a1HQGorhJpuwp9Xr5MThxK8pSmEP8ZfrVtPOu0z7m/ZzcwiE6yFY3HB YEvEQaln9+cW04MWaxe447VLD+eL1/E7UPxunI7yp9V4LLoXHpMEocNjfQCbu91h k7hULuPTKFSqJphJS17EmuGS9X0mXXqk6mt5+nmb4K8eNxnYROIyv+nSjnGG4rbF srQ2ur37sD2wEqlgcgh01mvgrKdJtpg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:47:59 2025 by rpki-client