$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa File: d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa (raw, json) Hash identifier: 99X5w1PMG2/nFlnJdiptrzcv6VOztML0ki6Rtown4UY= Subject key identifier: 4A:12:49:54:D4:49:1F:13:31:3F:F1:8D:09:20:4F:FD:C3:A7:BB:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876742E4760DD07DF3B0D20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.64.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:74:2e:47:60:dd:07:df:3b:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=5b0ceaeb-51b7-4021-8580-963c35b64b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ce:a3:b0:5d:e1:7a:e7:09:b0:f7:0c:10:ef: ea:7e:d5:5a:92:d5:4f:c0:5a:3d:19:40:b9:dc:33: 71:57:e9:bc:e5:6b:c5:23:36:1b:a8:d3:58:98:65: 4a:43:9a:75:02:0c:c1:0b:1a:ba:81:5f:70:27:bf: 77:b1:37:56:7e:ab:45:ab:fb:f4:bd:6e:1f:e8:01: 67:1f:69:0b:3a:0c:5e:ed:d2:ae:46:3e:07:d4:16: e9:d6:63:18:5b:de:3c:17:e5:28:98:c4:f8:a0:4d: 6d:69:07:df:c6:bb:74:25:78:95:01:44:3d:c0:65: 87:4d:4c:b4:c3:6f:ff:06:73:02:1c:84:79:43:ef: 87:40:18:cd:bb:62:90:2c:54:5d:bc:43:e7:33:60: 93:91:f6:41:06:36:9e:a6:c0:e4:53:9f:75:1e:3c: 7c:b6:7b:2c:dc:c6:e8:3d:94:7f:7d:97:18:88:d7: e4:bb:d0:96:c7:7b:6a:dd:17:95:dc:7d:bd:8e:fb: a0:04:16:28:d6:bb:a4:d8:da:eb:12:6f:6c:1a:40: 1c:77:52:b7:20:ac:d1:d7:e7:89:c9:24:00:ef:11: 8c:e5:56:42:d7:84:8a:0e:38:dc:9e:88:cb:96:51: 38:f6:c6:f7:ae:17:db:24:59:d2:87:36:f1:d9:20: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:12:49:54:D4:49:1F:13:31:3F:F1:8D:09:20:4F:FD:C3:A7:BB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:56:d4:65:eb:ee:43:21:1c:7b:a3:98:cb:cf:b4:c2:ae:6f: ed:19:13:44:3c:b0:e3:ff:88:2d:20:ed:57:2e:de:e8:48:79: 9b:d0:70:d8:fb:78:82:3c:81:fe:77:13:5e:5a:f9:27:fb:53: 57:da:e7:23:80:ae:e7:21:54:c5:6f:6c:46:03:bc:cc:5e:8e: f6:20:65:e2:79:9b:7a:64:64:cc:fb:35:dd:d5:b2:da:86:bb: ab:33:82:5f:db:cb:64:cb:92:ad:13:a0:7f:ce:48:e6:9f:36: 2d:17:4f:cd:6c:c3:04:45:e9:fa:3b:c6:51:42:c1:2c:c7:6c: dd:d6:e3:33:ad:98:98:a8:32:ce:5d:c6:33:30:04:6e:b0:ff: 55:d0:8e:98:a7:49:dd:92:82:fc:a6:28:9c:83:89:e7:b8:99: ca:b5:d7:49:0b:b1:97:52:d3:1d:e7:87:42:11:68:3d:ae:52: 2f:9f:e5:02:be:8a:1a:13:e7:f0:97:4e:35:56:30:4c:d1:b8: cc:68:e3:79:fc:63:98:6e:ae:0b:34:df:b8:1a:bc:41:12:7c: 88:47:d2:ac:b8:e5:66:44:4c:63:90:4e:de:b2:44:9f:36:77: d2:6c:9e:86:c0:83:53:50:bf:ee:d0:1d:be:f6:dc:ff:57:a8: b9:e4:c4:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnQuR2DdB987DSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWIwY2VhZWItNTFiNy00MDIxLTg1ODAtOTYzYzM1YjY0YjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA886jsF3heucJsPcMEO/qftVaktVPwFo9GUC5 3DNxV+m85WvFIzYbqNNYmGVKQ5p1AgzBCxq6gV9wJ793sTdWfqtFq/v0vW4f6AFn H2kLOgxe7dKuRj4H1Bbp1mMYW948F+UomMT4oE1taQffxrt0JXiVAUQ9wGWHTUy0 w2//BnMCHIR5Q++HQBjNu2KQLFRdvEPnM2CTkfZBBjaepsDkU591Hjx8tnss3Mbo PZR/fZcYiNfku9CWx3tq3ReV3H29jvugBBYo1ruk2NrrEm9sGkAcd1K3IKzR1+eJ ySQA7xGM5VZC14SKDjjcnojLllE49sb3rhfbJFnShzbx2SC4MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoSSVTUSR8TMT/xjQkgT/3Dp7sKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDJjMGY0MWUtZjcyZi0z MGQ1LTkwNTgtODQwMjliNmQ2NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdW1GXr7kMhHHujmMvPtMKub+0ZE0Q8sOP/iC0g7Vcu3uhIeZvQcNj7 eII8gf53E15a+Sf7U1fa5yOAruchVMVvbEYDvMxejvYgZeJ5m3pkZMz7Nd3VstqG u6szgl/by2TLkq0ToH/OSOafNi0XT81swwRF6fo7xlFCwSzHbN3W4zOtmJioMs5d xjMwBG6w/1XQjpinSd2SgvymKJyDiee4mcq110kLsZdS0x3nh0IRaD2uUi+f5QK+ ihoT5/CXTjVWMEzRuMxo43n8Y5hurgs037gavEESfIhH0qy45WZETGOQTt6yRJ82 d9JsnobAg1NQv+7QHb723P9XqLnkxCM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:31 2025 by rpki-client