$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd20d14a-8c4a-30d2-af98-f75fedbe61a8.roa File: dd20d14a-8c4a-30d2-af98-f75fedbe61a8.roa (raw, json) Hash identifier: R1iumYXWy1GuK8W0oY5o8mdiJeRwhegB51M4nPjulmM= Subject key identifier: A6:57:BD:1E:30:0E:37:CF:8D:76:E0:3F:65:AC:B6:00:AA:94:9E:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876753878FD49FB48BB6EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd20d14a-8c4a-30d2-af98-f75fedbe61a8.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.65.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:75:38:78:fd:49:fb:48:bb:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=b1566129-8c62-4ede-bbe8-0d537e541ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8e:13:6b:cf:ad:dc:e5:60:34:5d:a0:a8:64: 99:77:99:cf:c5:fd:7c:88:20:9a:d4:28:0f:01:37: 7f:59:b4:43:3a:d1:5f:68:37:0a:44:1c:b5:30:0d: 84:fd:54:d0:d3:a6:2d:8a:53:d9:bf:a2:39:fc:b6: 9d:27:e5:45:91:48:5f:8b:7f:36:b7:35:af:44:8f: 4a:06:2e:ef:5d:2a:5b:15:15:d1:be:b3:44:6b:11: e0:41:7e:ba:a2:f3:0c:16:50:c1:57:39:1b:70:6c: c7:10:f4:74:f2:80:e1:dd:b7:42:3d:f6:8f:ea:52: fb:27:f6:41:40:ba:af:10:52:20:47:63:8b:e0:e6: 28:9b:24:fe:3a:4f:2a:2d:99:02:17:77:40:5a:ae: 3f:37:6e:2c:36:7a:20:4b:78:74:e6:21:16:ca:76: 77:e3:73:9c:48:60:8e:bd:dc:61:b7:dd:8d:af:4f: ff:c5:74:e6:84:29:e3:65:2b:0a:8c:4d:c1:03:69: 7e:4c:9f:03:9c:a1:c7:88:53:42:22:f0:32:3b:86: 7e:bc:e4:c5:f6:6a:f1:af:8a:e3:84:35:de:39:58: 0a:98:b5:45:1d:e8:f6:88:e5:82:9e:d8:0b:3e:cb: f0:d4:a2:ba:b2:32:5d:96:0d:52:34:cc:5a:36:aa: 81:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:57:BD:1E:30:0E:37:CF:8D:76:E0:3F:65:AC:B6:00:AA:94:9E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd20d14a-8c4a-30d2-af98-f75fedbe61a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b6:20:7a:4e:3a:6c:46:9b:81:55:e8:cf:68:a9:b7:fe:30: 30:05:01:04:03:38:07:62:eb:b9:51:db:0b:b7:46:2a:91:a3: 51:cc:1a:d4:95:7e:8c:16:f1:c2:08:0e:ac:4d:28:01:d8:3c: 24:4f:16:74:a9:bd:ac:90:a8:1f:97:c1:fe:53:80:85:9d:3f: 9a:ce:9a:3a:c1:8f:20:33:8e:b5:40:84:c6:7b:93:96:bd:33: f9:02:fa:91:12:af:38:fe:04:10:1f:f3:11:1f:39:22:78:8f: dc:03:c6:f1:26:6c:3e:83:d2:59:6f:2b:a6:79:d3:a8:da:23: 7a:9a:1e:b8:7f:e0:ef:e7:42:31:48:7f:c9:f4:66:43:c7:23: 9f:cf:ec:a0:10:67:e1:a1:f4:e8:af:d5:9b:c7:76:5c:04:ee: a3:22:a3:1d:39:be:56:07:50:3d:19:93:0f:63:c8:36:c9:7e: 9d:a6:9d:02:db:4a:27:06:c0:66:ee:aa:e0:7a:94:0c:c5:f8: 26:52:5c:b9:c5:e5:e3:5f:26:41:63:ef:a0:75:05:44:9e:84: 07:5f:6f:60:e0:e4:b1:e6:d3:74:f2:7a:ea:b8:54:2c:c8:41: f2:ed:ee:ac:4a:f6:04:76:ec:d3:d1:36:8d:d9:66:14:90:10: e9:31:65:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnU4eP1J+0i7bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjE1NjYxMjktOGM2Mi00ZWRlLWJiZTgtMGQ1MzdlNTQxZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI4Ta8+t3OVgNF2gqGSZd5nPxf18iCCa1CgP ATd/WbRDOtFfaDcKRBy1MA2E/VTQ06YtilPZv6I5/LadJ+VFkUhfi382tzWvRI9K Bi7vXSpbFRXRvrNEaxHgQX66ovMMFlDBVzkbcGzHEPR08oDh3bdCPfaP6lL7J/ZB QLqvEFIgR2OL4OYomyT+Ok8qLZkCF3dAWq4/N24sNnogS3h05iEWynZ343OcSGCO vdxht92Nr0//xXTmhCnjZSsKjE3BA2l+TJ8DnKHHiFNCIvAyO4Z+vOTF9mrxr4rj hDXeOVgKmLVFHej2iOWCntgLPsvw1KK6sjJdlg1SNMxaNqqBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZXvR4wDjfPjXbgP2WstgCqlJ7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGQyMGQxNGEtOGM0YS0z MGQyLWFmOTgtZjc1ZmVkYmU2MWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEHPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC2IHpOOmxGm4FV6M9oqbf+MDAFAQQDOAdi67lR2wu3RiqRo1HMGtSV fowW8cIIDqxNKAHYPCRPFnSpvayQqB+Xwf5TgIWdP5rOmjrBjyAzjrVAhMZ7k5a9 M/kC+pESrzj+BBAf8xEfOSJ4j9wDxvEmbD6D0llvK6Z506jaI3qaHrh/4O/nQjFI f8n0ZkPHI5/P7KAQZ+Gh9Oiv1ZvHdlwE7qMiox05vlYHUD0Zkw9jyDbJfp2mnQLb SicGwGbuquB6lAzF+CZSXLnF5eNfJkFj76B1BUSehAdfb2Dg5LHm03Tyeuq4VCzI QfLt7qxK9gR27NPRNo3ZZhSQEOkxZW0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:25 2025 by rpki-client