$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0145ae0f-2946-3e18-bf73-bae284a7b7dc.roa File: 0145ae0f-2946-3e18-bf73-bae284a7b7dc.roa (raw, json) Hash identifier: v9d5zPWKlcAu2cgrws7C4jQ42FlxACBrWbDEvIXBvLI= Subject key identifier: 8C:C3:D7:4C:69:B0:60:80:2D:20:0C:1E:F7:29:40:A4:25:B5:F4:17 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71110C7EB7E3D2A521EA150 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0145ae0f-2946-3e18-bf73-bae284a7b7dc.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.70.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:10:c7:eb:7e:3d:2a:52:1e:a1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=4d7b9618-ad3a-4a88-891b-515fd64c36e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6e:de:3d:f4:40:a1:fb:d8:ef:21:04:f1:d2: 2e:73:2a:2c:e2:69:05:85:e5:f1:de:88:97:6a:83: b7:d5:92:37:99:14:19:70:03:2a:8e:f5:63:c0:ea: 5b:33:9a:60:50:86:aa:63:60:ba:3f:79:bb:10:5f: 62:12:62:c0:7a:55:12:8e:24:bb:d4:a6:b1:88:f0: 05:f3:54:09:ff:0c:75:b3:e2:de:99:b6:20:fd:45: 27:c2:80:b6:84:b8:40:06:e3:63:6a:17:4c:fd:81: 9c:79:1c:9c:ce:29:83:b8:af:55:a3:80:fa:33:17: 06:94:cc:28:e8:00:8b:fb:50:46:1e:b1:c7:d8:ab: 9d:dc:d0:ac:b8:0c:0d:7a:01:99:21:60:ef:aa:88: ae:ec:ee:16:17:e7:15:cf:01:3a:a0:d3:2b:ac:2c: fa:36:8f:56:1c:c9:30:5d:f6:c4:96:ad:93:c4:a8: 15:2d:5b:35:72:eb:5d:86:87:9f:39:d2:96:dd:42: ca:2c:54:82:b4:ee:9b:02:b1:37:13:46:1a:ff:91: a0:03:83:0b:3f:2a:69:2c:13:f2:39:3b:fa:74:3b: d5:02:37:3f:b7:f1:2c:92:f2:79:f4:b4:3e:2b:94: e5:b1:94:7e:ee:68:4e:aa:85:85:38:d7:87:b1:1a: 2d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C3:D7:4C:69:B0:60:80:2D:20:0C:1E:F7:29:40:A4:25:B5:F4:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0145ae0f-2946-3e18-bf73-bae284a7b7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:57:17:47:68:ee:0a:57:02:a4:86:f3:6b:ea:b6:4d:ca:11: 49:d6:7c:a4:6e:d3:b7:d2:ad:f3:6b:0f:98:7c:1d:f0:ba:03: 3b:f1:53:a6:90:d3:d8:d7:06:91:a0:90:9f:0e:24:cd:0f:26: d8:a9:6b:3f:74:38:01:15:23:c2:ee:91:39:c4:e6:77:68:0e: c6:5c:6e:c5:13:14:e6:b7:17:55:27:c8:29:d2:b7:34:9d:a9: 99:b5:68:99:52:30:eb:6c:0d:82:0b:7f:7f:a0:31:36:21:ec: 9b:20:65:e2:58:50:e2:fa:a1:67:69:8e:ce:3f:9c:c3:0a:53: f0:01:0d:3f:94:17:1f:b7:f5:55:61:39:de:9f:9f:f8:b1:0d: 11:67:97:f6:9d:97:9b:f3:71:59:1c:c8:31:b3:93:bc:b4:b3: 02:aa:75:f8:2e:4d:5d:6c:11:a7:f2:70:17:40:13:03:d3:a8: 96:0a:d1:ee:c7:75:f2:5f:4d:df:35:f7:5e:76:0c:4c:01:10: 7c:aa:45:bf:77:e4:69:67:a2:78:fe:34:21:7d:3c:79:1b:ca: 3f:8a:02:07:6c:be:fe:97:30:b6:08:67:6e:84:bf:e3:42:a3: d3:aa:7c:e0:6d:81:71:9f:25:ff:e1:9b:1b:db:42:13:11:e7: d7:d9:e5:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERDH6349KlIeoVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NGQ3Yjk2MTgtYWQzYS00YTg4LTg5MWItNTE1ZmQ2NGMzNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm7ePfRAofvY7yEE8dIucyos4mkFheXx3oiX aoO31ZI3mRQZcAMqjvVjwOpbM5pgUIaqY2C6P3m7EF9iEmLAelUSjiS71KaxiPAF 81QJ/wx1s+LembYg/UUnwoC2hLhABuNjahdM/YGceRyczimDuK9Vo4D6MxcGlMwo 6ACL+1BGHrHH2Kud3NCsuAwNegGZIWDvqoiu7O4WF+cVzwE6oNMrrCz6No9WHMkw XfbElq2TxKgVLVs1cutdhoefOdKW3ULKLFSCtO6bArE3E0Ya/5GgA4MLPyppLBPy OTv6dDvVAjc/t/EskvJ59LQ+K5TlsZR+7mhOqoWFONeHsRot8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzD10xpsGCALSAMHvcpQKQltfQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDE0NWFlMGYtMjk0Ni0z ZTE4LWJmNzMtYmFlMjg0YTdiN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxXF0do7gpXAqSG82vqtk3KEUnWfKRu07fSrfNrD5h8HfC6AzvxU6aQ 09jXBpGgkJ8OJM0PJtipaz90OAEVI8LukTnE5ndoDsZcbsUTFOa3F1UnyCnStzSd qZm1aJlSMOtsDYILf3+gMTYh7JsgZeJYUOL6oWdpjs4/nMMKU/ABDT+UFx+39VVh Od6fn/ixDRFnl/adl5vzcVkcyDGzk7y0swKqdfguTV1sEafycBdAEwPTqJYK0e7H dfJfTd819152DEwBEHyqRb935Glnonj+NCF9PHkbyj+KAgdsvv6XMLYIZ26Ev+NC o9OqfOBtgXGfJf/hmxvbQhMR59fZ5Qc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:55 2025 by rpki-client