$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa File: dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa (raw, json) Hash identifier: 1MMPFrYO9PCtX1uLzqNjo9TK5rtLLEsm9TBsfZ+8Npc= Subject key identifier: 64:B3:2C:57:48:BC:51:AE:FB:38:98:21:05:DD:96:53:E7:60:DF:CC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB411AE517A9DCF0A2CF2980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:1a:e5:17:a9:dc:f0:a2:cf:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=4047a3a2-cd8d-4071-8bc0-fc1a35d05a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8d:14:fe:4a:34:31:49:f8:dd:26:d2:4e:a5: 0d:f8:93:95:bb:65:3b:c6:fb:6d:37:74:cb:1e:97: 1b:12:fa:da:02:13:b8:c3:f4:8f:3c:fb:35:6a:16: 0e:f8:6f:d4:4b:c0:4e:48:41:f2:0c:ac:44:34:19: ae:b0:85:18:de:b1:55:3b:3f:fa:0c:95:f1:9c:52: ed:00:99:73:eb:47:9c:93:43:eb:b1:e5:ae:62:22: 02:52:73:76:e9:ca:9e:74:2a:fb:51:93:c9:67:e5: 02:fc:c6:7d:dd:9c:d7:d8:06:bd:d1:95:d2:bc:20: b0:fb:7e:bb:b3:06:fd:7c:88:5f:73:91:44:7b:77: 54:16:81:c3:a8:cf:e4:f4:03:21:d9:77:8f:fd:23: 50:5b:f4:6f:5c:d7:93:60:7b:b9:45:fb:c7:92:74: ce:16:65:f5:59:4d:37:86:5c:4d:4f:bf:87:48:cc: ff:c9:42:f3:60:5e:88:e5:5e:71:5e:3d:2d:88:18: 92:3a:26:b4:96:8c:cd:a9:88:e2:0a:ed:04:ca:75: 70:ec:d1:bd:92:84:46:c8:a5:c1:e9:c3:be:6a:96: d2:e6:46:18:b3:08:eb:bb:d2:65:d5:45:8f:98:e3: dc:68:09:71:32:a7:9b:56:80:ef:27:5d:50:6f:3f: 96:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B3:2C:57:48:BC:51:AE:FB:38:98:21:05:DD:96:53:E7:60:DF:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:e4:fb:19:31:12:8d:86:a3:13:28:50:c5:d9:74:71:c2:ce: ab:04:83:5d:31:95:9d:8b:6f:59:a3:d8:3e:54:4c:bd:70:e7: 28:2f:ba:df:52:bc:4b:72:e8:67:7b:eb:2c:14:2e:fb:28:ca: 2a:7b:11:23:13:65:30:ed:54:98:e8:d5:13:46:85:c1:e7:44: 75:1d:e6:39:17:8e:42:a3:7c:9e:78:fd:4f:9c:ab:15:59:1a: e7:95:36:cd:08:db:ca:da:8a:4f:58:6f:17:fa:e9:45:2a:11: 28:7f:bb:bf:80:d1:6e:10:30:2c:70:23:bb:6d:3c:c6:fa:2a: b1:7f:14:a0:df:58:07:43:e7:8c:06:19:6d:6d:92:8e:d1:6b: c5:8f:3a:27:d0:23:24:c7:5c:ad:eb:93:20:54:1b:28:f7:08: b8:ac:48:4b:e2:57:c0:05:b6:ac:c7:b7:a4:95:14:7e:58:5d: a9:f1:24:9f:c0:81:5d:d6:1f:e2:1e:c6:be:27:a0:6f:ca:1e: 49:1b:3d:b3:31:b5:46:a6:54:62:08:f4:61:e1:b0:92:e5:dd: 4e:11:ef:54:2e:99:8c:e7:b9:15:6d:8f:59:25:a5:68:69:df: d5:e8:70:fb:04:db:7c:ed:75:ed:00:f9:f3:99:3c:8a:b0:53: 46:b9:21:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRrlF6nc8KLPKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDA0N2EzYTItY2Q4ZC00MDcxLThiYzAtZmMxYTM1ZDA1YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I0U/ko0MUn43SbSTqUN+JOVu2U7xvttN3TL HpcbEvraAhO4w/SPPPs1ahYO+G/US8BOSEHyDKxENBmusIUY3rFVOz/6DJXxnFLt AJlz60eck0PrseWuYiICUnN26cqedCr7UZPJZ+UC/MZ93ZzX2Aa90ZXSvCCw+367 swb9fIhfc5FEe3dUFoHDqM/k9AMh2XeP/SNQW/RvXNeTYHu5RfvHknTOFmX1WU03 hlxNT7+HSMz/yULzYF6I5V5xXj0tiBiSOia0lozNqYjiCu0EynVw7NG9koRGyKXB 6cO+apbS5kYYswjru9Jl1UWPmOPcaAlxMqebVoDvJ11Qbz+WFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSzLFdIvFGu+ziYIQXdllPnYN/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGJlNmFmMDgtZGMwOS0z NjA4LWE4NGQtZDgzZmZhOWUyZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHk+xkxEo2GoxMoUMXZdHHCzqsEg10xlZ2Lb1mj2D5UTL1w5ygvut9S vEty6Gd76ywULvsoyip7ESMTZTDtVJjo1RNGhcHnRHUd5jkXjkKjfJ54/U+cqxVZ GueVNs0I28raik9Ybxf66UUqESh/u7+A0W4QMCxwI7ttPMb6KrF/FKDfWAdD54wG GW1tko7Ra8WPOifQIyTHXK3rkyBUGyj3CLisSEviV8AFtqzHt6SVFH5YXanxJJ/A gV3WH+Iexr4noG/KHkkbPbMxtUamVGII9GHhsJLl3U4R71QumYznuRVtj1klpWhp 39XocPsE23ztde0A+fOZPIqwU0a5ISQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:52:28 2025 by rpki-client