$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4e9d0d8-35f8-3cc9-86aa-6da950062e91.roa File: d4e9d0d8-35f8-3cc9-86aa-6da950062e91.roa (raw, json) Hash identifier: u79SM8NSOC39udHzQzRhC6wEAICHpAgq+/geSw0EmHY= Subject key identifier: 3E:82:AF:3F:3E:F9:24:5E:B5:84:4E:5C:90:70:99:B0:18:36:C2:9B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8765FB656A9A4C5BC016F40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4e9d0d8-35f8-3cc9-86aa-6da950062e91.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:5f:b6:56:a9:a4:c5:bc:01:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=cfeffef2-45d9-465c-a7bb-17c7c576d6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7c:1f:60:64:a0:9c:70:72:d6:0a:b1:e7:95: bf:be:da:5a:e2:38:ef:93:8f:02:69:75:8b:46:71: b5:a6:e1:f1:22:1b:12:b1:6d:38:22:87:d9:33:fd: b7:17:eb:29:61:fa:2e:4e:4e:3d:91:f5:d9:66:b3: e4:4b:09:c1:3f:29:6a:d9:12:25:09:ab:a2:3f:18: 8c:4f:fc:9c:b5:f3:97:cd:5d:fe:76:ee:a6:09:0d: 0c:88:92:a4:27:27:9c:e9:2b:de:d1:36:b1:30:85: 61:67:fc:21:22:fa:46:78:57:48:a3:5a:79:ee:76: e7:8b:90:be:68:db:4f:35:8e:11:e1:43:1d:f9:83: 11:73:15:0c:ce:a0:6a:09:50:39:ab:75:03:f2:e7: 6a:c8:89:6a:36:51:91:37:cf:25:b2:c9:fd:22:9c: f5:e3:0b:72:9d:1b:7c:5f:96:8f:35:29:f3:3f:46: ac:d0:cc:6b:84:98:b0:60:f3:06:08:0e:22:4d:8d: 3b:93:65:f6:e1:87:b2:44:57:9f:17:c7:e7:64:92: 8a:a4:16:d9:27:80:13:12:a3:9e:07:dd:01:00:69: dc:68:c2:6c:3c:09:25:f3:91:56:fb:0f:cb:ac:09: d8:0d:24:ec:a9:b1:20:47:09:b9:a1:0e:6a:eb:32: e4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:82:AF:3F:3E:F9:24:5E:B5:84:4E:5C:90:70:99:B0:18:36:C2:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4e9d0d8-35f8-3cc9-86aa-6da950062e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3c:09:70:91:1d:12:a4:51:47:c5:c2:db:01:08:97:9a:dc: 4d:61:39:0a:0c:c6:a5:5d:86:58:31:60:4a:36:d7:35:53:ec: 04:65:f7:d7:a3:20:06:30:a8:74:ea:d9:5e:6f:41:b1:f2:bf: 29:f4:1c:61:d5:ef:e9:29:42:b7:b7:88:eb:81:35:b9:bb:d7: 2f:f9:69:b9:69:0a:ac:50:d3:d6:c8:4f:0e:d6:96:43:88:b3: 58:9f:e6:03:16:c9:3a:66:b1:ed:b8:af:d3:ac:86:ff:10:38: 7d:1c:34:95:22:24:35:26:9d:29:4d:7a:28:c2:91:12:0b:a0: 30:1e:6e:05:08:fc:54:ae:b0:a3:c1:59:76:15:02:60:e0:56: 5f:1e:da:c8:53:28:54:64:f4:22:d9:49:b8:68:b4:2a:01:27: 3b:f1:ef:71:4e:47:79:b9:b6:ae:ec:c4:d9:49:94:53:b2:e8: 0d:ed:88:a1:92:56:13:e6:1a:29:90:ab:39:16:ce:4a:1f:a5: d2:e0:c4:38:41:a9:5c:2c:ba:c1:45:9b:92:79:db:f5:f0:70: 4a:00:7b:23:dd:5a:8b:a8:a5:ea:17:01:66:06:68:f6:d2:e2: 26:7f:45:8c:3d:f3:59:33:0c:49:f1:4f:e8:55:76:19:d2:24: 8f:94:77:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdl+2VqmkxbwBb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2ZlZmZlZjItNDVkOS00NjVjLWE3YmItMTdjN2M1NzZkNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknwfYGSgnHBy1gqx55W/vtpa4jjvk48CaXWL RnG1puHxIhsSsW04IofZM/23F+spYfouTk49kfXZZrPkSwnBPylq2RIlCauiPxiM T/yctfOXzV3+du6mCQ0MiJKkJyec6Sve0TaxMIVhZ/whIvpGeFdIo1p57nbni5C+ aNtPNY4R4UMd+YMRcxUMzqBqCVA5q3UD8udqyIlqNlGRN88lssn9Ipz14wtynRt8 X5aPNSnzP0as0MxrhJiwYPMGCA4iTY07k2X24YeyRFefF8fnZJKKpBbZJ4ATEqOe B90BAGncaMJsPAkl85FW+w/LrAnYDSTsqbEgRwm5oQ5q6zLk0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6Crz8++SRetYROXJBwmbAYNsKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDRlOWQwZDgtMzVmOC0z Y2M5LTg2YWEtNmRhOTUwMDYyZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw8CXCRHRKkUUfFwtsBCJea3E1hOQoMxqVdhlgxYEo21zVT7ARl99ej IAYwqHTq2V5vQbHyvyn0HGHV7+kpQre3iOuBNbm71y/5ablpCqxQ09bITw7WlkOI s1if5gMWyTpmse24r9Oshv8QOH0cNJUiJDUmnSlNeijCkRILoDAebgUI/FSusKPB WXYVAmDgVl8e2shTKFRk9CLZSbhotCoBJzvx73FOR3m5tq7sxNlJlFOy6A3tiKGS VhPmGimQqzkWzkofpdLgxDhBqVwsusFFm5J52/XwcEoAeyPdWouopeoXAWYGaPbS 4iZ/RYw981kzDEnxT+hVdhnSJI+Ud5k= -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:07 2025 by rpki-client