$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa File: 09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa (raw, json) Hash identifier: qMQLQlEqIxpdeadf1P/OhuVbDgiEsIFRJdwyYhwqmIg= Subject key identifier: C5:37:C1:71:8F:DE:1C:22:A5:34:E7:5E:2E:44:EA:78:ED:1C:C9:16 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64DA43AFE7E46F866FB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4d:a4:3a:fe:7e:46:f8:66:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=66b58d66-b0d3-49a5-b33e-655d2ca0342f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:c5:46:45:2a:64:58:aa:e1:e4:a5:e1:bd: 7c:5e:f2:75:56:3e:82:2f:7f:1b:54:40:07:89:27: 03:57:09:81:66:c1:fc:9a:00:04:84:0f:5c:a3:c6: 8b:ec:bb:a5:d8:bd:ec:49:84:5c:55:c6:ec:33:4a: 24:01:30:31:2d:fc:dd:fe:35:6f:76:94:35:10:38: f7:da:cf:8a:39:5d:30:d9:bf:68:3f:72:e9:8b:f8: 6a:26:f2:0d:c7:c5:c1:f5:92:59:ae:ef:ae:44:2d: 99:54:11:c4:01:2d:df:6b:42:bd:f6:9b:0a:ec:54: ed:ff:46:37:70:9c:c4:0f:d1:24:1d:9d:d3:55:c0: df:86:13:f1:00:dc:c7:aa:c0:58:58:97:f3:9a:04: 15:7c:0e:48:ed:42:57:8c:a4:a6:56:ab:eb:ae:77: 94:61:3d:01:b4:50:b9:47:1c:03:67:b0:d6:17:04: bf:cf:6b:62:fb:ba:c4:b5:54:d8:ed:bc:12:65:5b: 0b:06:37:f6:a8:59:dc:f5:e1:18:35:29:29:41:39: ea:a3:5c:63:3c:4b:a4:fb:4d:bc:84:57:24:30:c0: 96:86:0f:b0:be:c0:57:81:53:65:97:23:d8:59:6e: a3:bb:b2:f0:75:f8:de:a4:70:93:6d:99:12:a9:ed: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:37:C1:71:8F:DE:1C:22:A5:34:E7:5E:2E:44:EA:78:ED:1C:C9:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ba:b0:6c:55:06:dd:04:f0:b9:ff:fb:e5:9c:4f:8a:c1:36: bf:7a:79:1f:7c:fe:45:cb:51:93:53:e6:dc:f0:dc:56:15:46: cc:8f:84:27:a3:aa:12:ff:f3:ac:58:ca:c7:dd:6f:35:73:57: c8:ca:8c:81:1f:7a:bf:01:f6:e6:bc:ab:3e:69:3e:79:be:af: ea:9a:aa:a7:b7:8f:8b:e1:ef:4a:0d:9d:73:74:e5:4a:b2:8d: 3f:cb:35:89:67:98:26:fc:55:ec:83:f5:08:8c:56:59:0a:d0: 1d:66:87:3c:cf:fc:25:ae:91:55:87:fa:21:01:fb:f1:28:30: c5:83:27:6a:e3:1f:0d:46:b9:cf:75:3a:3c:36:13:66:34:79: 91:9a:a5:60:29:8c:1f:83:b6:1d:86:15:d5:d8:f8:31:82:f7: f9:54:18:b0:e4:a5:42:68:4c:88:3c:93:97:d0:c9:06:4f:48: 13:ef:a7:ba:f3:8f:7f:9d:f1:21:b6:e6:69:e5:4e:ad:e0:a9: eb:ee:86:d5:04:88:4e:4d:e7:44:c7:a3:4c:21:51:61:d7:59: a5:16:a7:e4:a9:09:47:16:63:d5:16:b4:e1:24:c1:5d:37:ba: 0f:7a:8d:da:cb:c6:e0:c4:68:9f:de:73:7f:f3:b3:9d:8e:2a: f4:60:d1:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1k2kOv5+Rvhm+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NjZiNThkNjYtYjBkMy00OWE1LWIzM2UtNjU1ZDJjYTAzNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtTFRkUqZFiq4eSl4b18XvJ1Vj6CL38bVEAH iScDVwmBZsH8mgAEhA9co8aL7Lul2L3sSYRcVcbsM0okATAxLfzd/jVvdpQ1EDj3 2s+KOV0w2b9oP3Lpi/hqJvINx8XB9ZJZru+uRC2ZVBHEAS3fa0K99psK7FTt/0Y3 cJzED9EkHZ3TVcDfhhPxANzHqsBYWJfzmgQVfA5I7UJXjKSmVqvrrneUYT0BtFC5 RxwDZ7DWFwS/z2ti+7rEtVTY7bwSZVsLBjf2qFnc9eEYNSkpQTnqo1xjPEuk+028 hFckMMCWhg+wvsBXgVNllyPYWW6ju7LwdfjepHCTbZkSqe3enwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU3wXGP3hwipTTnXi5E6njtHMkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDliNDBlZTMtZWYzZi0z M2EwLTg3YTEtMDEwYTZiOWQxMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi6sGxVBt0E8Ln/++WcT4rBNr96eR98/kXLUZNT5tzw3FYVRsyPhCej qhL/86xYysfdbzVzV8jKjIEfer8B9ua8qz5pPnm+r+qaqqe3j4vh70oNnXN05Uqy jT/LNYlnmCb8VeyD9QiMVlkK0B1mhzzP/CWukVWH+iEB+/EoMMWDJ2rjHw1Guc91 Ojw2E2Y0eZGapWApjB+Dth2GFdXY+DGC9/lUGLDkpUJoTIg8k5fQyQZPSBPvp7rz j3+d8SG25mnlTq3gqevuhtUEiE5N50THo0whUWHXWaUWp+SpCUcWY9UWtOEkwV03 ug96jdrLxuDEaJ/ec3/zs52OKvRg0d8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:09:14 2025 by rpki-client