$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a93c27c-77e9-3060-9119-4d32c8f1d1e7.roa File: 0a93c27c-77e9-3060-9119-4d32c8f1d1e7.roa (raw, json) Hash identifier: v5iasoUD81uMs+StCMFpwV/uS/GQ1V9866G/C7oiH88= Subject key identifier: 1F:55:D6:1B:72:57:63:A1:76:DC:FD:49:55:E5:DF:B0:31:4B:F6:AE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64E32C4C8CA25FE202400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a93c27c-77e9-3060-9119-4d32c8f1d1e7.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4e:32:c4:c8:ca:25:fe:20:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=a3b56ab5-a815-4f4a-9597-cffb2ad9c0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:b5:7f:ad:3f:c8:bd:5b:cf:a6:6e:10:cc: 6b:76:f0:b2:80:6f:18:a2:1f:28:c6:36:6d:18:ed: e4:73:ca:16:43:d2:6e:f8:79:53:47:80:30:cb:65: 24:6c:a8:07:25:0d:7a:14:a8:46:06:c6:ec:bf:a5: bd:ae:23:87:78:45:f6:69:3f:c8:68:99:36:3d:9e: 1c:29:59:89:11:9d:46:4e:15:2c:0b:48:df:65:06: 5c:8b:5b:9f:30:6d:0f:f5:1a:fe:2f:d5:9a:af:41: 68:6c:7e:06:70:e8:56:69:bd:f7:dd:99:c3:d4:ef: 98:45:d4:2a:04:7f:83:42:95:e2:db:8b:d0:a4:5f: a8:ce:0b:9d:25:6c:87:37:3d:3c:a3:33:47:5d:30: 35:ca:8d:5d:37:78:37:7f:67:49:8c:d8:6a:f2:32: e4:a7:38:33:7e:03:7e:6f:2d:93:90:72:9d:9d:80: 21:12:2c:50:73:5d:75:84:e7:17:9d:b7:56:30:05: 59:13:a5:d3:79:34:4e:c7:da:0a:b9:2d:ce:7b:19: 62:e4:37:3c:a0:09:f5:a2:98:a0:c8:fd:29:f7:82: fe:e9:c7:29:3b:e0:4e:4e:64:09:39:33:15:5f:b1: aa:a1:ba:fe:34:59:21:5b:13:24:f2:8f:18:fe:06: d1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:D6:1B:72:57:63:A1:76:DC:FD:49:55:E5:DF:B0:31:4B:F6:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a93c27c-77e9-3060-9119-4d32c8f1d1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:23:fa:2a:43:ac:54:3e:0b:00:99:0f:86:f3:a2:68:66:fe: 10:80:77:36:59:36:12:80:83:1e:03:6c:d3:57:f5:de:6f:63: 26:97:c7:b5:61:16:f3:64:47:ed:11:48:d3:52:0b:9a:3b:46: 17:0b:1b:a3:3a:7a:7f:28:f6:fc:75:d6:81:43:8d:05:ba:0d: 2b:c3:d4:b6:a8:a4:89:85:a8:30:f3:78:6d:13:2d:e8:4f:08: db:5c:ad:64:b9:25:87:22:a8:2e:ef:a8:48:50:a0:89:15:86: c9:74:fd:33:fa:6b:89:e6:2d:ef:97:79:2c:5e:c5:ae:5e:12: a7:55:e0:17:d4:6b:2c:63:6f:5e:cc:69:5a:98:52:17:71:21: 81:d7:af:90:a4:a8:ae:99:cb:cd:9e:6b:2f:74:19:f9:0f:b2: 5b:9a:01:2f:82:88:56:9c:2e:0b:d7:48:66:58:54:2f:9b:68: 69:80:03:c5:c9:cd:00:76:97:62:4c:3f:ee:b3:c6:01:8b:d0: d8:2b:f1:7f:12:77:fd:3b:d5:de:bd:de:31:7a:c7:96:83:75: 39:6b:60:68:20:bf:ec:32:cf:0e:2f:82:83:86:32:b7:4d:1d: 6c:0a:28:d6:db:13:36:c7:8b:3a:d1:d0:cd:62:af:51:34:80: 65:5f:05:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1k4yxMjKJf4gJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YTNiNTZhYjUtYTgxNS00ZjRhLTk1OTctY2ZmYjJhZDljMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivm1f60/yL1bz6ZuEMxrdvCygG8Yoh8oxjZt GO3kc8oWQ9Ju+HlTR4Awy2UkbKgHJQ16FKhGBsbsv6W9riOHeEX2aT/IaJk2PZ4c KVmJEZ1GThUsC0jfZQZci1ufMG0P9Rr+L9War0FobH4GcOhWab333ZnD1O+YRdQq BH+DQpXi24vQpF+ozgudJWyHNz08ozNHXTA1yo1dN3g3f2dJjNhq8jLkpzgzfgN+ by2TkHKdnYAhEixQc111hOcXnbdWMAVZE6XTeTROx9oKuS3Oexli5Dc8oAn1opig yP0p94L+6ccpO+BOTmQJOTMVX7Gqobr+NFkhWxMk8o8Y/gbRewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9V1htyV2Ohdtz9SVXl37AxS/auMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGE5M2MyN2MtNzdlOS0z MDYwLTkxMTktNGQzMmM4ZjFkMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8j+ipDrFQ+CwCZD4bzomhm/hCAdzZZNhKAgx4DbNNX9d5vYyaXx7Vh FvNkR+0RSNNSC5o7RhcLG6M6en8o9vx11oFDjQW6DSvD1LaopImFqDDzeG0TLehP CNtcrWS5JYciqC7vqEhQoIkVhsl0/TP6a4nmLe+XeSxexa5eEqdV4BfUayxjb17M aVqYUhdxIYHXr5CkqK6Zy82eay90GfkPsluaAS+CiFacLgvXSGZYVC+baGmAA8XJ zQB2l2JMP+6zxgGL0Ngr8X8Sd/071d693jF6x5aDdTlrYGggv+wyzw4vgoOGMrdN HWwKKNbbEzbHizrR0M1ir1E0gGVfBdg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:03 2025 by rpki-client