$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa File: de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa (raw, json) Hash identifier: udnF76SiRZMUxgXqqM8gNZcz0A6Iih+6piOeBmLb53E= Subject key identifier: 2E:36:37:49:AC:71:64:4A:20:FF:DA:2F:A9:D2:C2:F3:A3:86:3C:B0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACF710AA9723F647AC1E22600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.69.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:0a:a9:72:3f:64:7a:c1:e2:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=dde59939-0358-4048-8b1b-6d064e5a474d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:a9:24:c5:6b:20:65:6f:6c:d5:86:73:15: e0:81:0b:3b:c7:52:0f:ce:64:ab:a5:77:7d:9e:94: 9c:d6:ed:c1:4b:76:c8:34:0b:98:80:d8:2a:2d:c3: 42:a7:9b:50:a0:9d:73:81:9b:7b:31:f5:a7:d5:95: 4e:f7:7e:11:ca:2f:8c:4a:5a:9c:9a:0e:0e:ca:0d: 12:af:55:2a:c6:0a:08:d0:b2:af:e3:c9:93:0b:20: bb:90:63:25:c2:de:57:99:de:8c:f2:92:62:3a:1f: ea:13:15:9e:bd:87:43:40:5d:81:53:07:75:f3:b5: 0f:6a:2e:f6:3c:ad:16:33:2c:32:47:11:12:f2:4d: 95:34:dc:93:8b:9c:84:11:59:89:6a:fa:92:f9:3d: 31:59:92:85:32:47:49:93:12:7f:d2:a6:8f:2b:2e: 7c:ed:b2:06:7b:94:84:84:cc:9e:58:18:35:ed:f7: 76:40:7f:8f:d6:8a:e6:3a:28:b1:24:72:68:7e:57: 30:65:4c:f2:53:dd:a1:57:30:06:e5:0b:e7:31:fe: 39:3f:dd:1c:27:1e:30:7d:48:65:99:60:c4:08:46: ae:07:28:0f:49:91:9b:cd:a8:8c:1d:e9:8d:23:19: 59:31:51:fb:2e:8e:0a:c6:12:3c:2f:f6:20:e5:4d: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:36:37:49:AC:71:64:4A:20:FF:DA:2F:A9:D2:C2:F3:A3:86:3C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de4f5e49-5e33-33a2-81ea-b797f2f7bcff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:10:34:c0:05:2c:e2:86:bc:0b:00:3c:fd:ed:90:ca:1d:b0: 1d:48:fc:3b:66:3d:89:80:79:8f:e8:32:32:1b:b3:66:99:7d: a1:4a:20:65:b5:e3:33:40:04:56:d5:a1:10:96:e7:21:8b:79: ba:bb:a7:8b:62:b5:3b:d3:c8:e5:ce:f1:40:a0:0e:2a:de:0c: 28:9c:3e:8d:1a:23:ad:3b:a9:17:64:98:42:c1:35:ad:8f:43: 16:6d:18:1c:d9:14:97:ad:7e:d8:4b:df:30:b4:74:a2:b4:8f: 45:7e:00:70:06:a9:d8:80:0b:4c:6b:45:6b:93:aa:31:37:9a: d8:d5:ab:c9:46:b4:82:db:b6:a8:00:a3:21:60:38:8a:21:88: ed:8d:59:10:ec:53:05:5a:d1:10:cc:a0:7f:69:84:99:e8:0d: a4:84:ca:cd:ba:b2:e6:29:49:c5:34:1b:69:02:e8:1e:55:e8: 20:24:b3:c6:af:10:ca:af:8f:52:4d:4f:88:a9:cb:d3:23:60: 8b:bf:c2:fd:ea:9f:81:9b:69:bd:e6:14:88:1d:1f:d1:29:7c: 88:2c:f8:2b:d6:f9:c3:04:26:f2:82:f0:ca:67:5d:23:c4:9c: 50:0b:9d:cb:de:a0:78:26:cb:e5:97:96:ae:7e:7c:f8:ae:5f: 4f:d1:9a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQqpcj9kesHiJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZGRlNTk5MzktMDM1OC00MDQ4LThiMWItNmQwNjRlNWE0NzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SmpJMVrIGVvbNWGcxXggQs7x1IPzmSrpXd9 npSc1u3BS3bINAuYgNgqLcNCp5tQoJ1zgZt7MfWn1ZVO934Ryi+MSlqcmg4Oyg0S r1UqxgoI0LKv48mTCyC7kGMlwt5Xmd6M8pJiOh/qExWevYdDQF2BUwd187UPai72 PK0WMywyRxES8k2VNNyTi5yEEVmJavqS+T0xWZKFMkdJkxJ/0qaPKy587bIGe5SE hMyeWBg17fd2QH+P1ormOiixJHJoflcwZUzyU92hVzAG5QvnMf45P90cJx4wfUhl mWDECEauBygPSZGbzaiMHemNIxlZMVH7Lo4KxhI8L/Yg5U3RgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC42N0mscWRKIP/aL6nSwvOjhjywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU0ZjVlNDktNWUzMy0z M2EyLTgxZWEtYjc5N2YyZjdiY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIQNMAFLOKGvAsAPP3tkModsB1I/DtmPYmAeY/oMjIbs2aZfaFKIGW1 4zNABFbVoRCW5yGLebq7p4titTvTyOXO8UCgDireDCicPo0aI607qRdkmELBNa2P QxZtGBzZFJetfthL3zC0dKK0j0V+AHAGqdiAC0xrRWuTqjE3mtjVq8lGtILbtqgA oyFgOIohiO2NWRDsUwVa0RDMoH9phJnoDaSEys26suYpScU0G2kC6B5V6CAks8av EMqvj1JNT4ipy9MjYIu/wv3qn4Gbab3mFIgdH9EpfIgs+CvW+cMEJvKC8MpnXSPE nFALncveoHgmy+WXlq5+fPiuX0/RmlY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:41 2025 by rpki-client