$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa File: 0da6d8fd-8256-3417-8ced-8017e077244e.roa (raw, json) Hash identifier: TmhGLJnsjXuZXssoKwL3Y27BSi9Au/pj/KXQ3pangnw= Subject key identifier: 52:8F:55:96:1B:E6:29:4F:31:52:C1:9F:9D:69:61:9C:CA:F4:DF:E7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAFAB9B4B1686F47C9380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.71.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:af:ab:9b:4b:16:86:f4:7c:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=7d3da51d-11b6-4487-9510-903e5bd7f92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:77:3f:57:f1:04:e6:7b:42:b5:78:b6:42:18: f2:01:ad:48:98:f3:b9:2e:ed:91:cb:85:c8:b7:54: 1e:81:e1:ca:b6:27:e8:45:eb:1f:1a:5d:12:90:20: fa:18:a0:ee:61:fb:5f:94:c9:fe:d4:b9:85:2a:ef: 94:c2:96:9e:4d:a5:60:4d:d2:1d:da:1a:6d:2a:85: f5:bb:e8:63:f3:6e:dd:fe:69:a8:84:c1:c9:43:d5: b9:2a:27:fe:cb:fe:49:c3:14:27:4e:c1:04:20:c2: 2d:99:33:8f:3b:b4:e0:0b:29:61:aa:c0:19:3a:f6: 99:7b:a3:30:b2:b8:c7:46:30:49:78:b4:89:00:2f: 66:33:be:c2:01:28:03:35:60:c6:d7:f1:f5:3c:7e: 10:ff:27:7a:ac:81:fc:12:22:11:d6:3f:ca:86:45: 8a:63:c1:67:c5:0c:7b:43:4e:5f:71:fb:ff:9b:37: 58:df:65:ff:12:48:b3:c4:24:74:36:40:0b:5c:ea: 63:0f:eb:c2:44:b3:88:9b:d2:ce:65:06:97:65:f5: aa:bd:f4:bd:a0:e7:88:1f:48:33:cf:27:c0:57:7b: 55:ab:c2:5f:35:05:02:e9:cc:41:a8:64:1e:77:b6: ff:78:74:15:9f:34:ff:a4:0c:d6:f1:fb:6e:25:79: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:55:96:1B:E6:29:4F:31:52:C1:9F:9D:69:61:9C:CA:F4:DF:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:18:38:83:e6:67:02:85:2c:62:70:27:36:fe:15:a2:d3:9d: 3a:1a:55:08:a2:6f:0a:a7:52:87:71:d5:05:30:67:21:ab:1e: 78:9b:e4:1c:ff:4a:b8:e9:e8:17:3f:20:d8:e8:8e:9b:14:a0: 43:6d:cd:09:8f:14:93:a9:b5:b7:78:16:26:c5:bd:54:33:6e: f7:89:d1:8b:f1:e9:09:2a:8c:00:4b:c2:dc:4f:bd:be:87:30: 8d:d8:84:b1:8b:e8:04:d6:c0:59:e6:91:49:b9:ee:08:63:02: 87:8c:bd:da:90:f6:1e:28:61:2d:ae:e8:17:77:6c:ef:52:ff: 0e:27:7c:c7:12:26:72:1a:16:fa:14:a7:d5:50:50:c8:10:8f: 97:19:20:71:33:a2:6a:8b:0e:47:de:7b:4e:65:1e:d5:4d:af: d3:b5:9c:b1:21:74:63:2e:e2:47:25:6d:96:ed:e7:b9:05:d4: 43:c3:20:73:f5:d1:f4:ae:d5:0c:7a:53:9b:4d:a0:01:76:53: a0:d5:a6:0c:ae:6b:a7:54:1e:bd:18:61:1b:78:39:21:5e:7d: d5:70:ae:7a:7c:ed:e7:4e:8c:47:af:d4:74:0f:3d:fb:6c:f7: f9:e1:f8:43:18:af:77:0d:9a:72:27:22:42:01:e0:b6:f1:74: c8:14:15:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6+rm0sWhvR8k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk N2QzZGE1MWQtMTFiNi00NDg3LTk1MTAtOTAzZTViZDdmOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXc/V/EE5ntCtXi2QhjyAa1ImPO5Lu2Ry4XI t1QegeHKtifoResfGl0SkCD6GKDuYftflMn+1LmFKu+UwpaeTaVgTdId2hptKoX1 u+hj827d/mmohMHJQ9W5Kif+y/5JwxQnTsEEIMItmTOPO7TgCylhqsAZOvaZe6Mw srjHRjBJeLSJAC9mM77CASgDNWDG1/H1PH4Q/yd6rIH8EiIR1j/KhkWKY8FnxQx7 Q05fcfv/mzdY32X/EkizxCR0NkALXOpjD+vCRLOIm9LOZQaXZfWqvfS9oOeIH0gz zyfAV3tVq8JfNQUC6cxBqGQed7b/eHQVnzT/pAzW8ftuJXlBeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKPVZYb5ilPMVLBn51pYZzK9N/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGRhNmQ4ZmQtODI1Ni0z NDE3LThjZWQtODAxN2UwNzcyNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEenMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYYOIPmZwKFLGJwJzb+FaLTnToaVQiibwqnUodx1QUwZyGrHnib5Bz/ Srjp6Bc/INjojpsUoENtzQmPFJOptbd4FibFvVQzbveJ0Yvx6QkqjABLwtxPvb6H MI3YhLGL6ATWwFnmkUm57ghjAoeMvdqQ9h4oYS2u6Bd3bO9S/w4nfMcSJnIaFvoU p9VQUMgQj5cZIHEzomqLDkfee05lHtVNr9O1nLEhdGMu4kclbZbt57kF1EPDIHP1 0fSu1Qx6U5tNoAF2U6DVpgyua6dUHr0YYRt4OSFefdVwrnp87edOjEev1HQPPfts 9/nh+EMYr3cNmnInIkIB4LbxdMgUFdA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:10:32 2025 by rpki-client