$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f591edab-34ef-3518-a353-bd64d1c1d2f9.roa File: f591edab-34ef-3518-a353-bd64d1c1d2f9.roa (raw, json) Hash identifier: w/tkZEEV48honbbS5SD8RP+6f8W4BwQQfjvJf4bpmwY= Subject key identifier: 2D:1D:B9:0C:4E:C1:BA:0E:69:10:5E:8F:D6:0A:47:C0:98:9D:5A:BC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71100E6291406FD2BFF0F40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f591edab-34ef-3518-a353-bd64d1c1d2f9.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.69.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:00:e6:29:14:06:fd:2b:ff:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=68f50d18-3298-4b7d-8934-00040abcad02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:d1:5a:89:ea:cc:58:36:6c:0f:f5:ac:d8: 1a:09:e9:39:11:00:33:1b:d4:59:0a:72:07:8a:6e: c5:90:68:21:13:73:a7:74:15:f4:a6:46:5d:35:d8: 28:ff:09:62:6b:2d:ef:50:1f:ba:8b:26:1d:63:48: 49:4c:a8:e8:8b:09:ce:be:19:1d:61:41:95:ea:c8: 70:53:31:c9:56:56:53:d0:29:2b:6d:71:c7:c8:ea: f5:a3:14:f2:a1:19:ea:09:b8:3d:f3:b4:a3:45:c3: 2d:f5:19:e0:cb:0e:2a:e3:ab:2a:a4:49:62:02:c3: f7:34:0d:95:de:87:27:89:b9:d6:78:c5:a5:d3:95: b2:0a:32:08:f9:92:37:d3:ae:8f:8c:ca:30:e1:aa: a6:1b:ac:a2:e1:db:12:e9:a3:39:2b:61:da:89:65: 20:e4:84:9a:dc:7f:a1:db:c5:76:e7:fd:2a:38:7c: 6f:e7:99:66:f3:e4:66:ba:29:bc:4c:fd:83:b1:b4: ec:4c:8b:b1:0d:5b:62:b4:57:b5:ff:80:16:46:75: 20:54:d1:f4:7d:7d:ad:14:8f:0d:3f:54:53:a0:0f: 89:73:68:e9:64:98:97:1c:01:9f:af:fb:1a:f6:a4: cb:e8:94:f5:81:a1:ad:20:27:8e:9c:b4:a4:52:44: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1D:B9:0C:4E:C1:BA:0E:69:10:5E:8F:D6:0A:47:C0:98:9D:5A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f591edab-34ef-3518-a353-bd64d1c1d2f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:59:83:d1:7d:5c:d0:98:6b:e8:7d:79:f2:17:9e:86:0f:e2: 63:21:38:3a:8e:80:6e:38:bb:f8:ab:ff:1a:bf:2c:10:50:20: 52:1a:07:c9:2d:66:8c:21:c6:54:f2:6e:c4:57:e0:7a:94:c3: 25:b2:71:00:d1:30:f2:97:2d:0f:48:63:d2:28:74:3e:d1:96: 3f:80:16:e7:e5:50:20:87:df:4b:13:2f:b5:a6:93:d4:16:bb: 8c:c3:09:07:ed:b0:c2:f4:35:5a:56:b7:5f:76:c5:cd:1e:53: e7:3d:99:6b:d5:dd:8c:3c:c7:1d:e8:0a:20:1b:82:ea:bb:27: 15:8d:3c:1e:c0:40:1b:9e:a6:91:6d:5e:cd:3c:26:5f:26:99: 0e:e9:0d:16:80:88:ba:f6:1d:31:b8:b9:e7:83:34:14:3a:70: 96:7c:9d:af:bb:b7:2f:25:cc:22:a3:83:3d:d3:be:2e:99:40: b8:60:75:19:9d:6c:c2:96:c4:89:47:ab:af:d4:c5:01:3f:81: d7:c5:a3:84:b5:50:50:9c:09:42:35:48:b7:fd:58:7a:63:84: 9b:09:9f:f4:b8:51:70:38:8e:b9:97:78:e0:d6:34:90:c1:5b: 2b:81:b3:99:65:6b:42:da:46:0e:fc:46:92:2d:68:32:fb:93: 53:00:e1:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQDmKRQG/Sv/D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NjhmNTBkMTgtMzI5OC00YjdkLTg5MzQtMDAwNDBhYmNhZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApybRWonqzFg2bA/1rNgaCek5EQAzG9RZCnIH im7FkGghE3OndBX0pkZdNdgo/wliay3vUB+6iyYdY0hJTKjoiwnOvhkdYUGV6shw UzHJVlZT0CkrbXHHyOr1oxTyoRnqCbg987SjRcMt9Rngyw4q46sqpEliAsP3NA2V 3ocnibnWeMWl05WyCjII+ZI3066PjMow4aqmG6yi4dsS6aM5K2HaiWUg5ISa3H+h 28V25/0qOHxv55lm8+Rmuim8TP2DsbTsTIuxDVtitFe1/4AWRnUgVNH0fX2tFI8N P1RToA+Jc2jpZJiXHAGfr/sa9qTL6JT1gaGtICeOnLSkUkSjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0duQxOwboOaRBej9YKR8CYnVq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjU5MWVkYWItMzRlZi0z NTE4LWEzNTMtYmQ2NGQxYzFkMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlZg9F9XNCYa+h9efIXnoYP4mMhODqOgG44u/ir/xq/LBBQIFIaB8kt ZowhxlTybsRX4HqUwyWycQDRMPKXLQ9IY9IodD7Rlj+AFuflUCCH30sTL7Wmk9QW u4zDCQftsML0NVpWt192xc0eU+c9mWvV3Yw8xx3oCiAbguq7JxWNPB7AQBueppFt Xs08Jl8mmQ7pDRaAiLr2HTG4ueeDNBQ6cJZ8na+7ty8lzCKjgz3Tvi6ZQLhgdRmd bMKWxIlHq6/UxQE/gdfFo4S1UFCcCUI1SLf9WHpjhJsJn/S4UXA4jrmXeODWNJDB WyuBs5lla0LaRg78RpItaDL7k1MA4bo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:57 2025 by rpki-client