$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cffec46b-e458-3fd9-ae6d-53c124c3859e.roa File: cffec46b-e458-3fd9-ae6d-53c124c3859e.roa (raw, json) Hash identifier: kcbLQvOgO34sTTNPB7naQVD7wB+nArl6DnG3Mm/jQ5w= Subject key identifier: 7B:18:60:FC:DF:D6:D9:B8:1D:8A:1D:1E:8A:B7:CD:43:CE:B7:A0:80 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC711020FC95861687D447340 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cffec46b-e458-3fd9-ae6d-53c124c3859e.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.64.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:02:0f:c9:58:61:68:7d:44:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=0286da7a-1811-470f-aa6f-afef32b291b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b4:12:f5:e5:79:cd:c5:48:a0:75:c2:f8:28: a6:d6:8c:77:89:62:4c:34:19:2b:26:c3:a6:87:01: b7:69:c5:68:7f:b4:da:84:46:93:6f:35:77:e6:4a: 55:95:e4:a8:91:82:8e:df:44:87:a5:1f:30:48:63: 3e:2d:9c:8f:2d:ea:79:16:cd:98:ba:4f:6f:ef:9b: a2:e2:0f:2d:33:aa:fe:45:90:b2:cf:e1:77:e2:b3: de:7d:d5:93:d8:95:18:59:d7:b9:34:02:91:e6:e5: ac:57:e9:e4:09:31:e4:72:00:78:f1:00:3c:aa:24: 11:2a:c9:ea:84:15:0e:08:a3:c3:80:17:11:e6:ef: 36:60:ef:c7:a5:55:0f:4b:64:65:17:b8:ea:e8:9a: 39:d8:13:d1:30:f5:d5:22:3d:fd:54:ef:4e:b6:0b: b8:b3:45:9d:f4:f0:00:3e:a9:fb:2f:39:48:33:d8: 4e:73:d7:ea:d5:ca:20:05:de:3d:76:8d:ac:9a:2c: 33:df:00:15:b3:22:38:1f:62:a4:97:5f:08:dd:0b: ac:4a:de:08:1b:d9:7a:48:82:45:58:8a:69:08:d8: 60:e4:4c:11:26:f9:dd:35:4e:fb:bd:7b:d5:e0:34: 9f:15:13:da:82:55:80:72:ed:9e:93:c1:78:5d:d9: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:18:60:FC:DF:D6:D9:B8:1D:8A:1D:1E:8A:B7:CD:43:CE:B7:A0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cffec46b-e458-3fd9-ae6d-53c124c3859e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:75:42:14:e5:91:79:1c:05:0a:91:d7:22:ac:0d:01:98:1b: e2:20:b4:f9:a1:8a:d9:d3:62:27:6b:a1:a8:ab:df:34:57:e9: 34:f6:c5:5c:27:ac:0d:a1:a2:ca:09:bf:ee:ab:f8:a3:c2:7a: d3:d5:93:33:f4:f3:69:0b:2a:91:0c:1f:52:d1:76:8e:11:b8: b0:d8:c2:c2:ec:00:bd:dc:b2:1f:94:46:54:45:30:9a:19:aa: 3a:04:0d:8d:cc:1c:13:49:a9:e8:f6:bb:7c:50:fd:37:ac:de: 17:0f:19:ec:76:2d:03:96:40:4e:8c:d9:74:fb:64:9a:9a:1e: 76:c0:cc:df:f4:72:fb:f7:cc:69:dd:11:74:6f:db:f3:c0:73: 54:dc:7f:ee:39:1a:e7:8c:4a:72:30:7d:d8:c3:f6:99:97:d0: c6:6c:89:f7:91:c2:e6:4c:0f:d8:dd:1b:70:3d:37:fd:f6:ac: 9b:b3:03:37:99:48:70:e0:04:f2:be:36:f2:85:37:b7:c9:c5: 00:51:d8:f4:d8:30:5a:a0:b1:d2:d5:de:08:16:85:31:44:cc: 0c:d1:58:25:0c:6b:aa:ef:58:64:44:70:0f:14:5e:fb:bd:b5: 97:1f:88:11:a4:35:71:f7:d9:16:05:b0:a0:04:66:3a:68:f5: 81:fb:7a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQIPyVhhaH1Ec0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MDI4NmRhN2EtMTgxMS00NzBmLWFhNmYtYWZlZjMyYjI5MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbQS9eV5zcVIoHXC+Cim1ox3iWJMNBkrJsOm hwG3acVof7TahEaTbzV35kpVleSokYKO30SHpR8wSGM+LZyPLep5Fs2Yuk9v75ui 4g8tM6r+RZCyz+F34rPefdWT2JUYWde5NAKR5uWsV+nkCTHkcgB48QA8qiQRKsnq hBUOCKPDgBcR5u82YO/HpVUPS2RlF7jq6Jo52BPRMPXVIj39VO9Otgu4s0Wd9PAA Pqn7LzlIM9hOc9fq1cogBd49do2smiwz3wAVsyI4H2Kkl18I3QusSt4IG9l6SIJF WIppCNhg5EwRJvndNU77vXvV4DSfFRPaglWAcu2ek8F4XdlcbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsYYPzf1tm4HYodHoq3zUPOt6CAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2ZmZWM0NmItZTQ1OC0z ZmQ5LWFlNmQtNTNjMTI0YzM4NTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEC3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI51QhTlkXkcBQqR1yKsDQGYG+IgtPmhitnTYidroair3zRX6TT2xVwn rA2hosoJv+6r+KPCetPVkzP082kLKpEMH1LRdo4RuLDYwsLsAL3csh+URlRFMJoZ qjoEDY3MHBNJqej2u3xQ/Tes3hcPGex2LQOWQE6M2XT7ZJqaHnbAzN/0cvv3zGnd EXRv2/PAc1Tcf+45GueMSnIwfdjD9pmX0MZsifeRwuZMD9jdG3A9N/32rJuzAzeZ SHDgBPK+NvKFN7fJxQBR2PTYMFqgsdLV3ggWhTFEzAzRWCUMa6rvWGREcA8UXvu9 tZcfiBGkNXH32RYFsKAEZjpo9YH7ekA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:56:45 2025 by rpki-client