$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2ab03fe0-4d2e-3cbc-ab5a-8d117707495a.roa File: 2ab03fe0-4d2e-3cbc-ab5a-8d117707495a.roa (raw, json) Hash identifier: /kcX8bKXYS/Y222f5EtJHX+5TfZhe4A7JzqSMSVSge0= Subject key identifier: 7B:D3:FE:E1:59:84:E8:1F:60:A2:61:F9:A0:EB:DE:F5:62:AA:BF:64 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AFCF2D9B64D5D665405D31200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2ab03fe0-4d2e-3cbc-ab5a-8d117707495a.roa Signing time: Tue 26 Aug 2025 20:13:47 +0000 ROA not before: Tue 26 Aug 2025 20:13:47 +0000 ROA not after: Mon 24 Nov 2025 21:13:47 +0000 asID: 13335 IP address blocks: 172.64.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:f2:d9:b6:4d:5d:66:54:05:d3:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 26 20:13:47 2025 GMT Not After : Nov 24 21:13:47 2025 GMT Subject: CN=733d95fe-9341-407d-ba5b-1bae1b9aa9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c3:05:1b:ce:51:39:63:96:e1:b6:83:03:71: 9d:71:d2:4a:bd:68:34:3f:50:8d:97:94:8d:d2:8e: a8:38:77:7b:90:25:cc:6b:b7:09:5f:b6:2f:b5:59: 32:f3:44:0c:a6:45:f5:13:d3:d1:e4:24:fb:46:95: 74:2f:94:a0:73:a1:93:81:af:b1:8b:8e:58:6e:f3: ba:e6:f1:ef:17:33:e6:cd:dc:1d:5d:d7:dc:7b:12: 1a:ae:a9:38:db:33:96:fa:26:b4:33:52:15:20:93: 9b:cd:e9:06:d8:98:fb:07:79:65:83:63:ea:48:a4: 3a:b1:f0:e1:2d:98:d9:bd:b8:e6:d5:64:53:98:df: 28:0a:71:f8:fd:d9:10:48:d8:ac:09:70:98:c2:ba: bb:e5:fa:e8:d8:2e:df:be:a6:21:a1:4d:8b:b0:54: 22:a5:8e:41:12:3a:dc:69:5c:3e:ea:ce:0d:0d:7c: 7b:f6:59:0e:36:09:5d:25:99:9e:bc:e9:6f:21:7d: b3:69:5a:40:9d:43:6e:00:05:de:49:24:c5:45:cc: 5a:22:c5:72:05:07:bd:ba:6f:d0:ac:b0:5d:07:27: 78:c4:13:d1:ea:a1:76:f3:ce:6c:fe:bd:a8:88:d7: cd:5c:54:72:51:dd:1e:a3:9d:09:ec:f7:3a:28:8e: cc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D3:FE:E1:59:84:E8:1F:60:A2:61:F9:A0:EB:DE:F5:62:AA:BF:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2ab03fe0-4d2e-3cbc-ab5a-8d117707495a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:67:59:c9:bd:0a:10:f6:c4:35:df:e6:04:39:b2:6b:83:30: e5:3b:8c:d9:5c:4f:e6:1f:bb:83:f9:3d:95:52:bc:fa:b5:7b: c6:1b:e1:6f:c0:5f:30:f1:9c:b7:69:32:27:58:39:0a:b6:5c: ab:a0:d1:ee:e1:66:a6:da:f0:db:2f:9a:35:ad:81:34:b2:62: 3d:05:64:30:b2:20:06:c0:74:48:cb:02:a3:c3:47:87:03:a3: 35:ef:22:04:2d:59:62:27:1d:8d:b4:47:c2:b6:60:d5:72:f5: 8e:8b:6f:e9:6a:39:4a:25:9f:25:02:fd:29:3c:80:4d:99:23: 9c:63:a2:3a:9a:9e:19:a8:12:93:28:04:e6:78:3e:ac:86:e2: f7:be:2b:85:f3:a9:37:c5:e3:27:d7:a0:7c:f4:e7:e1:a9:43: 56:5b:b0:2b:b1:fa:bc:f8:fc:29:1a:61:ef:dc:cc:b9:b3:5c: 23:4c:f7:e8:70:ee:b7:51:48:ef:b5:0e:92:0e:56:99:c4:52: c7:4a:19:5e:42:e5:a2:d7:95:0c:b1:81:52:e5:fb:72:71:0b: c6:d5:f6:59:c7:64:5f:a1:93:41:f7:b5:a7:2e:ef:2e:d7:a4: 33:51:e4:ed:e4:4f:c3:a9:22:bf:12:5d:d1:e6:76:f2:18:ff: f8:e4:92:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr88tm2TV1mVAXTEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgyNjIwMTM0N1oXDTI1MTEyNDIxMTM0N1owLzEtMCsGA1UEAxMk NzMzZDk1ZmUtOTM0MS00MDdkLWJhNWItMWJhZTFiOWFhOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcMFG85ROWOW4baDA3GdcdJKvWg0P1CNl5SN 0o6oOHd7kCXMa7cJX7YvtVky80QMpkX1E9PR5CT7RpV0L5Sgc6GTga+xi45YbvO6 5vHvFzPmzdwdXdfcexIarqk42zOW+ia0M1IVIJObzekG2Jj7B3llg2PqSKQ6sfDh LZjZvbjm1WRTmN8oCnH4/dkQSNisCXCYwrq75fro2C7fvqYhoU2LsFQipY5BEjrc aVw+6s4NDXx79lkONgldJZmevOlvIX2zaVpAnUNuAAXeSSTFRcxaIsVyBQe9um/Q rLBdByd4xBPR6qF2885s/r2oiNfNXFRyUd0eo50J7Pc6KI7MRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvT/uFZhOgfYKJh+aDr3vViqr9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmFiMDNmZTAtNGQyZS0z Y2JjLWFiNWEtOGQxMTc3MDc0OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdnWcm9ChD2xDXf5gQ5smuDMOU7jNlcT+Yfu4P5PZVSvPq1e8Yb4W/A XzDxnLdpMidYOQq2XKug0e7hZqba8NsvmjWtgTSyYj0FZDCyIAbAdEjLAqPDR4cD ozXvIgQtWWInHY20R8K2YNVy9Y6Lb+lqOUolnyUC/Sk8gE2ZI5xjojqanhmoEpMo BOZ4PqyG4ve+K4XzqTfF4yfXoHz05+GpQ1ZbsCux+rz4/CkaYe/czLmzXCNM9+hw 7rdRSO+1DpIOVpnEUsdKGV5C5aLXlQyxgVLl+3JxC8bV9lnHZF+hk0H3tacu7y7X pDNR5O3kT8OpIr8SXdHmdvIY//jkkgA= -----END CERTIFICATE-----Generated at Wed Sep 3 13:55:18 2025 by rpki-client