$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5ac54be-2040-3cab-af2e-8862f31ee9ee.roa File: f5ac54be-2040-3cab-af2e-8862f31ee9ee.roa (raw, json) Hash identifier: nw5jJ/VoTvsGIQNLg0yNWY4klEO18p7P3nd4NZeH0FU= Subject key identifier: 25:AD:9D:8D:E8:33:31:9B:49:7E:3E:63:13:02:88:6D:7C:FA:78:0F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876739231D7331A56E40C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5ac54be-2040-3cab-af2e-8862f31ee9ee.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.64.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:73:92:31:d7:33:1a:56:e4:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=2447e932-b038-4add-b36e-1fc4c6b8b7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:0f:68:1b:6d:d2:0d:1c:1e:e9:d7:7d:bb: c1:90:81:aa:02:01:d8:6a:e0:9a:84:7e:93:7f:83: e0:a4:0a:50:35:56:f0:0e:6f:ae:3f:e6:c6:ea:e4: 6b:c7:3a:64:67:e3:9f:dd:fe:9d:38:33:1b:6f:e4: bc:ae:83:2b:f3:f6:b5:f9:31:c0:50:34:14:f0:4b: d2:06:8d:4b:fc:38:2e:ec:ba:6a:e7:eb:a7:1b:3f: fa:cc:98:13:97:e0:b5:04:87:d9:ea:f7:c6:19:71: 91:c9:ab:9a:ce:4f:2e:c9:3d:11:06:3e:71:82:ec: 97:bf:cd:a4:20:28:9b:37:12:60:c7:67:9a:34:84: 6e:19:c4:3e:8b:86:89:40:bf:67:ee:99:54:ec:85: f6:19:ad:b6:c2:58:73:5b:5b:b8:c7:f1:2c:10:95: f1:08:42:ea:95:ae:cd:94:53:06:0e:89:c9:28:d9: 7e:cf:11:e7:43:7e:7e:5a:0a:45:ae:39:87:94:6f: fe:6f:49:c5:e6:5b:e1:c3:f4:69:d3:36:01:a8:99: c0:dd:03:24:1f:e6:a9:dd:6b:9c:f5:b5:1a:49:83: 3b:18:ae:99:d2:f4:17:1d:52:b7:c0:38:fa:95:93: fb:37:7e:06:31:8e:42:f9:7f:7a:0f:f1:d1:08:46: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:9D:8D:E8:33:31:9B:49:7E:3E:63:13:02:88:6D:7C:FA:78:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5ac54be-2040-3cab-af2e-8862f31ee9ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a4:86:78:b1:d6:10:6a:d7:e8:80:b9:da:f8:5f:0d:f5:ff: 50:d3:25:24:1f:24:cb:9a:82:6f:1a:43:e7:1f:ab:c6:45:02: 5a:d2:93:04:81:39:73:b9:be:de:5b:e5:b9:8a:1b:9d:c3:33: 99:1e:c2:ff:10:09:29:f9:84:75:11:76:97:71:7c:2f:4f:18: 59:04:4b:1d:2e:56:7f:05:e1:30:4c:88:15:6a:62:46:f7:72: 78:72:98:4a:45:a6:8e:6b:1a:06:0a:3a:f9:31:f9:94:81:34: ad:66:45:7f:ff:26:c1:42:72:f7:c1:8c:b5:ef:5e:98:3e:07: 84:79:b9:eb:fc:43:e0:db:5a:4c:4c:67:ef:1f:e8:4a:a4:61: 4f:07:69:b1:31:5a:dd:fd:a4:9b:4c:ea:7a:af:fc:68:bd:1a: 84:c5:74:67:5e:d6:17:94:85:af:2c:b1:ac:63:21:c9:a1:ef: d3:d7:6a:49:a7:51:c8:b3:9e:18:a3:22:b0:77:9f:93:29:01: cd:29:d4:84:8a:9c:2e:8c:b5:e9:62:a8:56:e8:4e:b4:f8:21: ae:c6:52:32:42:c1:26:a0:09:c3:f6:f9:6c:d1:81:f9:56:19: 05:68:a7:d2:fd:95:2e:d9:26:0e:72:34:06:ca:53:fb:a3:62: ec:76:48:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnOSMdczGlbkDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjQ0N2U5MzItYjAzOC00YWRkLWIzNmUtMWZjNGM2YjhiN2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCgPaBtt0g0cHunXfbvBkIGqAgHYauCahH6T f4PgpApQNVbwDm+uP+bG6uRrxzpkZ+Of3f6dODMbb+S8roMr8/a1+THAUDQU8EvS Bo1L/Dgu7Lpq5+unGz/6zJgTl+C1BIfZ6vfGGXGRyauazk8uyT0RBj5xguyXv82k ICibNxJgx2eaNIRuGcQ+i4aJQL9n7plU7IX2Ga22wlhzW1u4x/EsEJXxCELqla7N lFMGDonJKNl+zxHnQ35+WgpFrjmHlG/+b0nF5lvhw/Rp0zYBqJnA3QMkH+ap3Wuc 9bUaSYM7GK6Z0vQXHVK3wDj6lZP7N34GMY5C+X96D/HRCEZdSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWtnY3oMzGbSX4+YxMCiG18+ngPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjVhYzU0YmUtMjA0MC0z Y2FiLWFmMmUtODg2MmYzMWVlOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWkhnix1hBq1+iAudr4Xw31/1DTJSQfJMuagm8aQ+cfq8ZFAlrSkwSB OXO5vt5b5bmKG53DM5kewv8QCSn5hHURdpdxfC9PGFkESx0uVn8F4TBMiBVqYkb3 cnhymEpFpo5rGgYKOvkx+ZSBNK1mRX//JsFCcvfBjLXvXpg+B4R5uev8Q+DbWkxM Z+8f6EqkYU8HabExWt39pJtM6nqv/Gi9GoTFdGde1heUha8ssaxjIcmh79PXakmn UciznhijIrB3n5MpAc0p1ISKnC6MteliqFboTrT4Ia7GUjJCwSagCcP2+WzRgflW GQVop9L9lS7ZJg5yNAbKU/ujYux2SOc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:09 2025 by rpki-client