$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe134c78-f5b5-3040-a1b0-5f53e7f54501.roa File: fe134c78-f5b5-3040-a1b0-5f53e7f54501.roa (raw, json) Hash identifier: Vd+9jxd7B4CRjnyCBXWIHSTNYNSmunS5iPW+ede8G0U= Subject key identifier: 6B:E4:4B:58:5D:27:C4:41:03:E0:6A:ED:3D:49:C8:F3:2E:11:A7:AA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACB4103C6759F85966C783080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe134c78-f5b5-3040-a1b0-5f53e7f54501.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.69.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:03:c6:75:9f:85:96:6c:78:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=a2233717-0eac-461b-b689-c34d7a033e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e3:3e:4e:37:8e:b8:23:21:a2:13:3d:d1:5f: 6e:92:ce:39:6d:15:a8:6c:d8:8b:f0:de:52:0e:09: 85:13:94:ed:e2:ff:75:46:9a:8c:2f:ad:ed:a3:68: 72:5a:9a:50:24:88:e3:03:01:c2:da:49:b5:dd:6a: 72:46:95:aa:58:65:fa:d4:81:18:15:2e:06:76:6a: 52:d7:34:a5:02:22:89:f5:4f:f2:d9:2d:b8:8e:fa: a8:6a:c7:d3:49:77:f5:35:3f:58:38:8f:67:47:5f: 7b:b4:bb:e3:6a:32:ac:3f:0a:ae:b9:66:ec:e4:57: bc:ea:80:56:42:87:84:23:70:84:8b:1a:18:c3:ae: 7d:71:a6:ea:59:38:c6:52:d8:ad:5b:a0:11:d1:03: d5:16:93:1b:48:a4:3f:cf:3f:95:73:24:00:0a:ab: 88:15:21:8f:1c:ab:59:cc:c8:d3:5d:e9:8b:c6:f6: e2:3b:cc:6e:9e:40:79:4a:48:28:94:17:a6:77:f3: a8:e6:2e:0e:b5:72:6d:de:3c:f8:ab:91:03:d2:fe: 5a:1c:ea:2c:3c:88:16:c0:a0:e3:10:28:3a:eb:9a: 4b:1b:08:28:41:31:b9:1b:17:48:b2:15:54:aa:8e: d5:a6:92:db:60:1a:e3:37:c0:19:1f:1c:24:7f:1e: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E4:4B:58:5D:27:C4:41:03:E0:6A:ED:3D:49:C8:F3:2E:11:A7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe134c78-f5b5-3040-a1b0-5f53e7f54501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fc:c0:16:7e:a8:ee:1e:d2:ef:49:1e:ba:a7:92:6a:ea:ce: 4a:73:a7:d4:5c:2f:75:95:60:3b:8a:45:74:89:4c:45:b8:63: 0e:be:0e:62:df:78:16:d7:54:0b:21:6c:f4:67:85:b7:72:ab: f5:4f:37:57:94:c4:11:3b:89:b5:7f:2d:59:8b:c4:ef:85:98: fe:51:b1:90:35:e5:b8:62:63:a1:63:46:8e:56:19:d6:7e:bd: c2:4d:2a:9d:f0:18:54:9b:02:f3:72:e3:1a:bc:b1:f9:1a:47: 01:c0:45:11:be:05:b1:34:bf:58:6c:1b:d2:4f:79:11:f8:2b: e3:59:78:f5:34:0e:8c:f5:09:04:c0:2d:38:9f:1a:75:c2:cb: b5:28:28:15:55:ba:fc:5b:de:3f:c6:6b:b4:46:ad:2d:fc:ed: 95:f7:88:90:74:66:6f:e4:06:e9:85:c7:13:ff:42:ee:14:ba: b0:7e:51:94:a3:f2:c0:60:1c:f5:5f:eb:d0:4e:8c:b8:19:3c: e9:09:66:c3:6e:fc:4d:77:49:1d:4c:36:88:d5:2c:03:c7:6f: 77:a4:ec:ca:0d:41:31:5a:24:b9:f6:9e:e3:af:dc:0f:35:e9: 85:93:97:92:81:b2:55:73:18:ff:e1:2c:40:02:06:c6:92:55: 11:b3:6c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQPGdZ+Flmx4MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTIyMzM3MTctMGVhYy00NjFiLWI2ODktYzM0ZDdhMDMzZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuM+TjeOuCMhohM90V9uks45bRWobNiL8N5S DgmFE5Tt4v91RpqML63to2hyWppQJIjjAwHC2km13WpyRpWqWGX61IEYFS4GdmpS 1zSlAiKJ9U/y2S24jvqoasfTSXf1NT9YOI9nR197tLvjajKsPwquuWbs5Fe86oBW QoeEI3CEixoYw659cabqWTjGUtitW6AR0QPVFpMbSKQ/zz+VcyQACquIFSGPHKtZ zMjTXemLxvbiO8xunkB5SkgolBemd/Oo5i4OtXJt3jz4q5ED0v5aHOosPIgWwKDj ECg665pLGwgoQTG5GxdIshVUqo7VppLbYBrjN8AZHxwkfx6imQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvkS1hdJ8RBA+Bq7T1JyPMuEaeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmUxMzRjNzgtZjViNS0z MDQwLWExYjAtNWY1M2U3ZjU0NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEV3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT8wBZ+qO4e0u9JHrqnkmrqzkpzp9RcL3WVYDuKRXSJTEW4Yw6+DmLf eBbXVAshbPRnhbdyq/VPN1eUxBE7ibV/LVmLxO+FmP5RsZA15bhiY6FjRo5WGdZ+ vcJNKp3wGFSbAvNy4xq8sfkaRwHARRG+BbE0v1hsG9JPeRH4K+NZePU0Doz1CQTA LTifGnXCy7UoKBVVuvxb3j/Ga7RGrS387ZX3iJB0Zm/kBumFxxP/Qu4UurB+UZSj 8sBgHPVf69BOjLgZPOkJZsNu/E13SR1MNojVLAPHb3ek7MoNQTFaJLn2nuOv3A81 6YWTl5KBslVzGP/hLEACBsaSVRGzbI0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:57:44 2025 by rpki-client