$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11a0128f-362f-31cf-bc80-8a01a51f40fe.roa File: 11a0128f-362f-31cf-bc80-8a01a51f40fe.roa (raw, json) Hash identifier: MOt8IKPFN4Td37Pi9xIWmWjnDsMvqOWhoNoiWoERR3Q= Subject key identifier: E7:10:52:0A:DF:4E:ED:5C:90:85:29:D2:64:2E:0C:D6:DE:C4:F8:38 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766EDAECA9772C524B0580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11a0128f-362f-31cf-bc80-8a01a51f40fe.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.70.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:6e:da:ec:a9:77:2c:52:4b:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=9cd20949-4e5d-4b20-b728-8c9f3108832c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:41:e8:57:d6:77:b3:e3:40:f4:28:72:cd: 8d:7e:8f:11:b4:fd:8e:d6:57:05:e8:72:0c:8a:59: 9e:a7:a0:60:07:d1:f7:63:db:64:5d:79:40:6d:61: fc:7a:fd:77:b6:dc:13:58:a3:3d:56:9b:72:75:40: d7:9d:a5:9c:1b:36:a7:26:51:8d:91:62:94:b9:72: ef:3c:34:78:92:da:68:70:43:a1:96:9c:4a:2a:d7: d5:1b:b6:a1:68:ea:fe:4e:86:a2:d9:31:61:b4:35: 63:3d:ec:55:ad:4c:5e:6f:80:54:c8:ca:f7:ba:11: 5d:8c:bc:3a:1d:18:cb:dd:78:83:f7:4b:71:63:30: c9:46:c1:d9:47:07:34:39:3c:9b:46:e8:11:bd:90: 36:22:fe:4e:09:f5:17:d1:86:d3:5a:e5:f8:c0:d5: 18:08:37:15:77:85:94:bc:b7:96:bc:97:e5:06:58: 2c:b8:a4:8d:8c:e5:b6:c8:b5:ff:14:11:68:ea:7d: 96:c6:e9:23:b1:49:c4:f9:44:18:f0:9c:7b:46:d3: 94:44:a3:48:8d:35:3b:95:e0:ac:4f:b0:be:4b:04: ab:0b:9d:e3:12:ad:14:e9:de:67:62:1e:7e:d7:4a: ca:d3:8e:91:e5:65:1c:45:fd:20:ff:16:f5:68:27: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:10:52:0A:DF:4E:ED:5C:90:85:29:D2:64:2E:0C:D6:DE:C4:F8:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11a0128f-362f-31cf-bc80-8a01a51f40fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4f:88:83:a4:71:f5:58:75:df:d6:6e:d0:30:d9:a7:ff:87: 5b:04:77:29:a5:e3:0e:12:19:e3:84:86:7f:9c:8d:37:62:43: fe:e6:e8:49:e0:9b:c6:a9:91:97:60:eb:94:e1:37:44:6b:0e: 03:26:6f:1b:5d:e0:0a:a7:4f:06:40:99:c9:0e:ba:46:40:9d: 78:51:a9:33:20:e8:aa:5e:60:34:58:1a:14:4f:6e:17:2b:95: f3:86:a0:77:97:f3:b9:e1:2d:35:32:58:81:c2:f3:ed:93:fe: bd:49:6d:8a:51:83:2c:db:cf:4c:3a:92:75:5f:18:4c:d4:15: 30:84:45:b5:85:dd:03:d5:e8:58:36:4a:e6:9a:eb:13:be:0c: 9d:8b:4e:57:7b:db:54:ce:df:2a:93:e8:ef:c2:5c:16:34:46: 3d:73:d8:5a:df:cf:68:82:f9:33:50:83:50:c1:ad:04:a6:9f: 0b:f3:d3:c5:80:5b:53:22:8c:cb:81:d5:c4:66:d1:c6:b6:c4: 12:01:24:0e:4c:1b:58:31:cb:ac:c2:32:8c:c7:7c:1b:64:e6: 2f:7a:f9:d2:13:fd:30:24:a7:94:07:78:13:ec:8b:34:d1:5b: 95:69:40:30:d4:44:c7:aa:36:fe:67:07:da:0c:45:87:82:9e: df:a4:38:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdm7a7Kl3LFJLBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk OWNkMjA5NDktNGU1ZC00YjIwLWI3MjgtOGM5ZjMxMDg4MzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ5B6FfWd7PjQPQocs2Nfo8RtP2O1lcF6HIM ilmep6BgB9H3Y9tkXXlAbWH8ev13ttwTWKM9VptydUDXnaWcGzanJlGNkWKUuXLv PDR4ktpocEOhlpxKKtfVG7ahaOr+Toai2TFhtDVjPexVrUxeb4BUyMr3uhFdjLw6 HRjL3XiD90txYzDJRsHZRwc0OTybRugRvZA2Iv5OCfUX0YbTWuX4wNUYCDcVd4WU vLeWvJflBlgsuKSNjOW2yLX/FBFo6n2WxukjsUnE+UQY8Jx7RtOURKNIjTU7leCs T7C+SwSrC53jEq0U6d5nYh5+10rK046R5WUcRf0g/xb1aCeuKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcQUgrfTu1ckIUp0mQuDNbexPg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTFhMDEyOGYtMzYyZi0z MWNmLWJjODAtOGEwMWE1MWY0MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpPiIOkcfVYdd/WbtAw2af/h1sEdyml4w4SGeOEhn+cjTdiQ/7m6Eng m8apkZdg65ThN0RrDgMmbxtd4AqnTwZAmckOukZAnXhRqTMg6KpeYDRYGhRPbhcr lfOGoHeX87nhLTUyWIHC8+2T/r1JbYpRgyzbz0w6knVfGEzUFTCERbWF3QPV6Fg2 Suaa6xO+DJ2LTld721TO3yqT6O/CXBY0Rj1z2Frfz2iC+TNQg1DBrQSmnwvz08WA W1MijMuB1cRm0ca2xBIBJA5MG1gxy6zCMozHfBtk5i96+dIT/TAkp5QHeBPsizTR W5VpQDDURMeqNv5nB9oMRYeCnt+kOF4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:41 2025 by rpki-client