$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa File: d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa (raw, json) Hash identifier: jdAww8AFTERdbIHnDd0BDbzjKEX1/YOBSkDJSh7mrsA= Subject key identifier: EA:32:56:11:59:13:03:8B:63:4B:6B:6B:AF:CA:E8:37:99:F0:C1:DE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB410178A4AC836F45F61480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:01:78:a4:ac:83:6f:45:f6:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=a3efeb73-b85f-4599-a2cd-4f44a3d472f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:aa:19:af:e2:00:bf:e2:ea:56:40:a8:4c: 07:ad:0f:ab:4d:bc:26:58:5b:d0:b5:5c:2f:3d:1f: 11:50:ba:e9:a5:c7:5e:02:36:98:77:f1:c4:91:1a: 60:e3:c0:4a:66:35:92:f0:5c:5a:5b:90:a1:dd:b9: 40:25:e7:f9:30:cb:d4:dd:e3:44:c4:e5:8d:b5:17: e0:36:ce:0b:61:3a:58:ee:a6:df:5d:9a:fd:d4:95: e7:b7:34:64:b2:14:3e:fc:ac:e0:75:2e:55:94:07: f1:d6:cf:35:d6:ec:66:92:17:36:98:34:a7:d9:bd: ac:c2:d7:9f:d0:d6:96:6a:7f:40:d1:28:81:2b:66: 2a:f4:10:4a:01:24:cf:7c:81:ed:00:8f:09:bc:25: 8c:3f:7c:5a:a3:36:a4:1b:d8:6d:ba:85:6f:0c:0c: 65:d6:78:8d:61:ec:08:b2:59:89:40:41:b7:36:5a: 01:6a:a6:31:92:a7:b2:c4:53:9d:9f:9d:3c:f4:61: be:49:b6:bb:fc:cc:bd:1a:1e:34:32:5f:73:1d:4b: d7:b6:fc:a2:08:a0:f1:a8:71:a6:2c:6a:28:c8:dc: 89:b1:45:46:95:c9:95:5a:a2:0b:2e:ab:46:08:6f: e6:ab:a1:bb:8f:aa:7a:99:74:6b:c9:00:6b:05:63: 35:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:32:56:11:59:13:03:8B:63:4B:6B:6B:AF:CA:E8:37:99:F0:C1:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d95b3da1-95d0-3a1b-9281-392ee1e73d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1b:70:13:6c:74:13:0c:73:37:45:b0:e3:9b:80:01:e2:39: 9a:2c:f6:fb:54:26:d7:db:5f:21:7f:7a:19:fd:87:80:2f:07: 4c:f6:1c:b0:0f:77:07:79:e6:9e:4b:b4:d2:7c:eb:2a:e8:6d: 77:8a:c6:2b:59:47:89:ba:a8:ec:c9:66:24:d4:c6:79:2d:17: bc:7d:27:55:99:f6:46:c3:5f:6a:15:2c:cb:10:a7:6b:fd:44: 6c:30:45:d7:ff:93:3f:db:65:1e:bb:94:6c:cf:de:ec:6b:3d: 3c:8e:fe:f2:3e:36:91:f8:8c:cd:3c:96:55:c6:1f:c6:e9:5a: 4a:33:4f:c3:4e:22:19:3f:40:7d:a9:7b:b4:5b:09:0c:55:2f: 3b:78:4f:1d:b7:e5:14:09:d1:0c:3a:83:a6:bd:24:19:d6:4c: e4:3e:bf:65:2c:37:15:be:1d:6b:b0:3f:df:6d:ea:57:6a:c2: 16:2d:03:eb:ec:97:1d:fa:2c:4e:a0:82:f2:8d:03:5d:84:af: e3:04:28:7a:8f:2c:6e:25:9b:74:6b:f8:ee:4d:11:78:2e:0c: 7b:ee:8c:80:50:1c:31:5a:2d:e4:f9:62:5f:fe:46:42:6d:ba: 36:b9:0f:f9:29:3b:01:d6:b1:dd:01:ab:52:bf:56:28:86:90: 98:02:fe:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQF4pKyDb0X2FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTNlZmViNzMtYjg1Zi00NTk5LWEyY2QtNGY0NGEzZDQ3MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglWqGa/iAL/i6lZAqEwHrQ+rTbwmWFvQtVwv PR8RULrppcdeAjaYd/HEkRpg48BKZjWS8FxaW5Ch3blAJef5MMvU3eNExOWNtRfg Ns4LYTpY7qbfXZr91JXntzRkshQ+/KzgdS5VlAfx1s811uxmkhc2mDSn2b2swtef 0NaWan9A0SiBK2Yq9BBKASTPfIHtAI8JvCWMP3xaozakG9htuoVvDAxl1niNYewI slmJQEG3NloBaqYxkqeyxFOdn5089GG+Sba7/My9Gh40Ml9zHUvXtvyiCKDxqHGm LGooyNyJsUVGlcmVWqILLqtGCG/mq6G7j6p6mXRryQBrBWM1bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoyVhFZEwOLY0tra6/K6DeZ8MHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDk1YjNkYTEtOTVkMC0z YTFiLTkyODEtMzkyZWUxZTczZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsbcBNsdBMMczdFsOObgAHiOZos9vtUJtfbXyF/ehn9h4AvB0z2HLAP dwd55p5LtNJ86yrobXeKxitZR4m6qOzJZiTUxnktF7x9J1WZ9kbDX2oVLMsQp2v9 RGwwRdf/kz/bZR67lGzP3uxrPTyO/vI+NpH4jM08llXGH8bpWkozT8NOIhk/QH2p e7RbCQxVLzt4Tx235RQJ0Qw6g6a9JBnWTOQ+v2UsNxW+HWuwP99t6ldqwhYtA+vs lx36LE6ggvKNA12Er+MEKHqPLG4lm3Rr+O5NEXguDHvujIBQHDFaLeT5Yl/+RkJt uja5D/kpOwHWsd0Bq1K/ViiGkJgC/tY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:42 2025 by rpki-client