$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa File: f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa (raw, json) Hash identifier: GSbfr5zwBq8L/ydB6VH3y7WUAShUjheD0lyI/NEEKBM= Subject key identifier: A9:20:C0:34:76:73:02:B0:66:B1:1F:D5:4F:99:6F:7A:4A:DE:02:3F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC876671936CDC1C8F7AC1980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.65.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:67:19:36:cd:c1:c8:f7:ac:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=363c037d-1518-4600-99e9-f6ccf6b410e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:9a:5c:07:6c:da:99:71:3d:e0:ec:4a:cb: 7b:8f:e1:f4:99:46:77:1d:f9:97:e4:90:8e:8c:6d: ca:74:cd:52:b1:b1:89:f7:38:94:34:be:d8:f0:d1: 0f:f1:d4:92:2e:44:63:6c:d5:9a:14:3c:a6:db:ef: 41:b1:50:a9:ca:56:70:70:e3:a7:d3:45:1b:78:47: 66:d7:d5:27:5e:21:ab:01:ab:11:2a:78:0b:92:65: a8:e2:0e:32:e6:98:5e:c7:1f:83:5b:f8:6d:dd:7d: 09:b0:fe:fc:63:3c:2a:6d:98:bf:cb:bb:8a:e2:f5: d7:09:82:a2:17:d5:b4:19:ba:84:4b:d4:81:5e:8e: 64:8d:18:33:cc:45:f7:63:ba:5f:cd:2f:94:4b:6f: 25:f7:9c:de:c3:9b:b2:ff:6b:59:c6:c8:7d:f3:d6: 67:51:fb:0f:24:64:89:09:93:49:aa:b7:73:1b:b3: 0b:a2:e9:da:19:43:9f:73:ba:5a:f7:bf:fb:e2:3a: 27:2d:d5:26:b7:28:73:43:82:db:b1:a7:e0:1e:2f: 97:cc:dd:4f:ed:38:e7:cf:3b:18:98:ff:be:05:02: 3b:4e:ef:12:46:70:d4:d0:90:95:d0:67:47:cb:a5: 7d:47:61:be:79:e1:56:81:35:e4:9e:e0:8c:d6:cb: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:20:C0:34:76:73:02:B0:66:B1:1F:D5:4F:99:6F:7A:4A:DE:02:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8c:f5:84:8e:4b:de:ec:09:4b:92:ec:bc:60:06:b0:33:3c: a7:12:5f:15:b2:78:29:3a:5c:13:ed:a0:1d:8b:b2:af:b1:48: ab:3f:3a:9d:f5:ee:e8:b7:22:e5:aa:27:f9:cf:22:4e:90:51: 2f:9e:80:66:aa:64:70:f1:5d:c1:72:cc:85:32:7d:c8:9e:40: 01:e9:00:85:1d:9f:7d:30:23:c0:5c:ea:6d:9b:7f:73:2c:a8: d9:d1:c2:46:0a:39:e4:3b:27:c8:09:f8:d6:5f:cd:a3:77:fd: e9:18:27:b3:e2:94:76:71:81:fe:f0:a8:f7:80:89:8e:e3:e5: 03:b5:58:1d:01:17:4d:6b:cd:cc:f8:a7:cc:3c:da:69:45:78: 01:69:7e:7b:d1:39:72:9b:44:47:f1:a8:ba:b0:4f:89:20:fd: af:39:46:5f:ba:12:e1:2d:94:cc:8c:6f:86:98:66:cf:d1:7c: 4e:82:15:8e:f1:ae:73:54:e7:0f:cd:fc:74:03:a9:9b:a0:f6: d9:12:64:2a:e1:54:71:e8:e5:a3:3f:bb:4f:30:36:cf:34:16: 6e:4f:8f:e0:b9:7c:5a:6c:92:62:ad:57:49:51:ec:b1:0c:2d: 64:75:af:1e:35:b0:ba:1e:c5:5e:19:b6:ad:1e:e6:6b:77:2b: 8e:8f:01:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdmcZNs3ByPesGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MzYzYzAzN2QtMTUxOC00NjAwLTk5ZTktZjZjY2Y2YjQxMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUyaXAds2plxPeDsSst7j+H0mUZ3HfmX5JCO jG3KdM1SsbGJ9ziUNL7Y8NEP8dSSLkRjbNWaFDym2+9BsVCpylZwcOOn00UbeEdm 19UnXiGrAasRKngLkmWo4g4y5phexx+DW/ht3X0JsP78YzwqbZi/y7uK4vXXCYKi F9W0GbqES9SBXo5kjRgzzEX3Y7pfzS+US28l95zew5uy/2tZxsh989ZnUfsPJGSJ CZNJqrdzG7MLounaGUOfc7pa97/74jonLdUmtyhzQ4LbsafgHi+XzN1P7TjnzzsY mP++BQI7Tu8SRnDU0JCV0GdHy6V9R2G+eeFWgTXknuCM1ssKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkgwDR2cwKwZrEf1U+Zb3pK3gI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjhmYTQ3YTQtOGMxNi0z ZTZhLWEyZGEtZDBmNmFiZjJkYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6M9YSOS97sCUuS7LxgBrAzPKcSXxWyeCk6XBPtoB2Lsq+xSKs/Op31 7ui3IuWqJ/nPIk6QUS+egGaqZHDxXcFyzIUyfcieQAHpAIUdn30wI8Bc6m2bf3Ms qNnRwkYKOeQ7J8gJ+NZfzaN3/ekYJ7PilHZxgf7wqPeAiY7j5QO1WB0BF01rzcz4 p8w82mlFeAFpfnvROXKbREfxqLqwT4kg/a85Rl+6EuEtlMyMb4aYZs/RfE6CFY7x rnNU5w/N/HQDqZug9tkSZCrhVHHo5aM/u08wNs80Fm5Pj+C5fFpskmKtV0lR7LEM LWR1rx41sLoexV4Ztq0e5mt3K46PAco= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:31 2025 by rpki-client