$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/15b0116c-dca6-3e8c-9af9-5d63f9d7d437.roa File: 15b0116c-dca6-3e8c-9af9-5d63f9d7d437.roa (raw, json) Hash identifier: x7G/4s4DeF1+dHGtJOUqfhyCVENKjCGYbVcvnSYjCBA= Subject key identifier: 13:4B:AC:3D:3C:C4:15:6B:46:AC:D4:C9:1E:EF:6F:2A:2B:C5:88:9B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65A561FFB11CC60207300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/15b0116c-dca6-3e8c-9af9-5d63f9d7d437.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5a:56:1f:fb:11:cc:60:20:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=85abd6c3-99cf-449f-b47b-12b4354e0eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:23:67:5b:1a:d9:b5:0b:89:bc:8d:52:2a: 26:2a:a2:91:b6:1e:b0:93:26:0e:d4:e1:5f:6f:ac: 20:64:12:3c:8c:3f:ec:d7:ba:78:8d:29:40:e0:15: 5c:9b:2f:6f:3b:c6:27:42:75:8c:8d:08:7e:b1:37: d6:6f:fb:00:8b:f6:2b:74:41:c0:07:da:40:42:b3: 8a:29:85:98:2f:7d:a9:08:3a:78:ab:e6:e8:9a:97: 90:23:c7:af:9e:44:08:fc:13:3d:17:ce:e9:84:7f: c0:43:01:fb:bf:8b:a2:a8:f7:2e:6d:97:e0:84:42: f4:5c:91:2f:59:f2:33:72:9f:da:94:34:2c:49:8b: f4:50:35:75:b1:d7:91:36:1c:61:05:e9:e9:31:98: ce:7e:74:2d:c4:c8:35:35:01:7c:26:18:56:83:61: f5:68:7a:5d:c9:1a:c7:8d:7d:94:83:eb:be:e4:46: 2b:b6:7c:57:23:87:76:8c:5b:e0:5f:72:00:4b:c3: 9b:c5:dd:d0:24:98:bd:87:83:92:84:92:92:0e:91: f4:d9:6a:42:a8:11:a3:86:16:8d:72:9b:d7:5f:23: fa:b5:32:36:52:ed:06:2a:e0:25:29:9b:61:0f:47: b5:1f:aa:1b:21:3f:1c:40:9c:3a:9e:e8:be:15:e0: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4B:AC:3D:3C:C4:15:6B:46:AC:D4:C9:1E:EF:6F:2A:2B:C5:88:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/15b0116c-dca6-3e8c-9af9-5d63f9d7d437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:35:e9:bb:31:ab:8c:be:47:b6:e3:37:b6:e9:82:3b:ad:1e: 38:1a:b6:d5:e7:a6:17:06:d9:0c:2e:4f:23:ee:c2:f1:22:fe: 00:82:69:fe:72:be:64:f4:a2:24:4c:96:d0:44:8d:cc:50:3f: 64:11:fd:40:45:5c:74:63:d7:f3:d4:4f:f3:8f:e5:20:c2:9e: bb:d9:2f:59:b5:f8:92:ba:96:ba:b7:ee:d8:01:7f:8c:8a:44: d4:25:9f:f8:09:f3:6f:f1:d6:a0:b2:9e:0f:be:30:b0:58:c0: b9:8a:65:99:b3:1f:0e:e7:68:88:2d:00:6f:4a:aa:64:f6:b6: 0a:61:31:17:41:f6:d8:a1:6c:57:2a:a6:85:a8:44:27:b7:c4: 86:47:7b:4e:c4:66:ec:49:c7:91:2a:3d:6c:31:7e:a9:5b:47: f3:e0:2f:38:04:c5:9e:dd:09:e6:2d:3e:a7:1d:43:d9:2a:7e: 6b:7b:20:4b:66:e6:83:21:83:ab:0b:95:b9:8f:f8:54:21:42: 06:de:f4:9a:3b:f2:5d:70:a6:09:51:e0:d1:8a:fa:fe:6b:52: 04:c2:1d:dc:cd:b2:93:5e:74:a3:25:2d:ba:07:8f:3a:fc:1d: 93:e5:98:80:6b:bc:6c:a4:fd:6e:a0:4c:e2:d6:c5:ec:6f:3a: 53:b1:bf:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lpWH/sRzGAgcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ODVhYmQ2YzMtOTljZi00NDlmLWI0N2ItMTJiNDM1NGUwZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqYjZ1sa2bULibyNUiomKqKRth6wkyYO1OFf b6wgZBI8jD/s17p4jSlA4BVcmy9vO8YnQnWMjQh+sTfWb/sAi/YrdEHAB9pAQrOK KYWYL32pCDp4q+bompeQI8evnkQI/BM9F87phH/AQwH7v4uiqPcubZfghEL0XJEv WfIzcp/alDQsSYv0UDV1sdeRNhxhBenpMZjOfnQtxMg1NQF8JhhWg2H1aHpdyRrH jX2Ug+u+5EYrtnxXI4d2jFvgX3IAS8Obxd3QJJi9h4OShJKSDpH02WpCqBGjhhaN cpvXXyP6tTI2Uu0GKuAlKZthD0e1H6obIT8cQJw6nui+FeDAQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNLrD08xBVrRqzUyR7vbyorxYibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTViMDExNmMtZGNhNi0z ZThjLTlhZjktNWQ2M2Y5ZDdkNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk16bsxq4y+R7bjN7bpgjutHjgattXnphcG2QwuTyPuwvEi/gCCaf5y vmT0oiRMltBEjcxQP2QR/UBFXHRj1/PUT/OP5SDCnrvZL1m1+JK6lrq37tgBf4yK RNQln/gJ82/x1qCyng++MLBYwLmKZZmzHw7naIgtAG9KqmT2tgphMRdB9tihbFcq poWoRCe3xIZHe07EZuxJx5EqPWwxfqlbR/PgLzgExZ7dCeYtPqcdQ9kqfmt7IEtm 5oMhg6sLlbmP+FQhQgbe9Jo78l1wpglR4NGK+v5rUgTCHdzNspNedKMlLboHjzr8 HZPlmIBrvGyk/W6gTOLWxexvOlOxv6A= -----END CERTIFICATE-----Generated at Sat Aug 23 20:54:10 2025 by rpki-client