$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/169950e3-6853-344e-96fc-f48c22ea7763.roa File: 169950e3-6853-344e-96fc-f48c22ea7763.roa (raw, json) Hash identifier: Hq7I5LA+gOw30QmTAwzH0jmkl2AcmGAEyVCFLZYkF6w= Subject key identifier: 01:03:12:64:56:E2:0A:C8:3D:DC:26:E6:5B:13:F8:30:D0:7B:16:85 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65EEF8D3130FC53F92380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/169950e3-6853-344e-96fc-f48c22ea7763.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5e:ef:8d:31:30:fc:53:f9:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=f3689c24-1575-43f6-a462-cf2b317fcf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:65:94:d6:36:a0:83:fa:d1:63:65:ca:a5: 3b:59:d5:08:56:bc:78:ae:cc:23:36:d8:d1:ee:f4: 99:49:7d:35:93:cd:eb:19:21:03:29:fc:e6:20:f6: a4:4e:fe:47:6b:64:29:5d:ea:80:0a:bf:65:a8:5e: cc:b9:da:6d:2c:69:86:ce:76:6a:8e:19:d0:16:80: 5f:09:3b:e7:e9:f2:ff:c5:14:0a:cc:1e:b2:2a:03: 56:32:27:38:1b:c6:21:fb:2d:8a:f2:3c:aa:98:b6: be:14:2e:26:08:e6:e7:de:38:9f:cc:b6:b2:da:38: bf:cc:22:1c:98:3d:25:f2:f9:37:28:05:c9:18:9b: 31:bf:71:87:91:eb:ae:9e:ba:aa:97:58:47:9e:60: 11:94:e8:b8:3a:31:be:a9:a9:08:c6:46:2a:60:71: 2b:12:e3:21:b2:c1:89:53:65:04:10:0d:25:c2:a0: cc:69:d7:ab:71:8e:5f:03:c2:f6:80:6b:5a:ad:41: dc:1b:d6:f4:48:a8:3f:90:6a:5c:a1:81:0e:01:03: 4a:b7:a7:6a:08:84:35:6a:69:5a:e2:af:31:95:bb: 13:59:3c:86:cb:a7:5d:f7:5f:79:6c:10:8a:de:fb: 7d:75:ac:29:fc:86:71:c2:31:39:7c:34:80:64:ca: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:03:12:64:56:E2:0A:C8:3D:DC:26:E6:5B:13:F8:30:D0:7B:16:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/169950e3-6853-344e-96fc-f48c22ea7763.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6e:c7:91:c5:0a:36:6e:6b:05:2d:9b:90:bd:25:93:bf:63: e9:4a:f4:79:fe:90:7c:c1:13:ae:7c:9b:e4:75:19:72:80:24: 4f:8f:a9:ba:ac:23:11:32:d3:7c:0f:70:a6:79:f6:44:32:ec: 2e:71:1e:ff:fe:0e:bc:14:b7:70:cb:f8:4e:3b:86:3f:75:67: 5d:c0:a1:9a:ea:7f:ec:3f:9c:e7:f1:c6:1d:a7:ee:60:d6:da: 55:4d:f0:4b:68:bd:f2:3d:64:09:11:df:3f:45:26:79:ad:ed: b4:c6:e7:20:a1:b8:9b:73:9e:de:57:33:51:e4:03:00:a2:e3: 83:89:80:07:a5:f9:24:c9:bb:29:b7:b1:c4:2c:6a:43:8a:64: dd:b9:87:e1:18:01:4f:1c:6d:92:e7:c1:a0:02:0d:2a:71:f4: 6d:0b:14:c1:01:c6:c0:9c:25:ff:c0:01:9b:40:93:7e:64:c4: 9b:91:21:06:a2:88:2a:a3:d0:05:e1:e2:7a:df:b3:fc:cd:51: ca:fd:da:75:ec:e9:48:81:be:c0:b9:93:87:d7:8b:de:c1:4b: 01:4a:73:6b:e2:02:d0:30:1b:ac:e4:73:34:7e:a2:2b:34:18: ae:88:d0:c9:94:19:34:a0:7f:49:db:a7:21:be:db:da:77:48: 64:e4:a1:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1l7vjTEw/FP5I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZjM2ODljMjQtMTU3NS00M2Y2LWE0NjItY2YyYjMxN2ZjZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYFllNY2oIP60WNlyqU7WdUIVrx4rswjNtjR 7vSZSX01k83rGSEDKfzmIPakTv5Ha2QpXeqACr9lqF7MudptLGmGznZqjhnQFoBf CTvn6fL/xRQKzB6yKgNWMic4G8Yh+y2K8jyqmLa+FC4mCObn3jifzLay2ji/zCIc mD0l8vk3KAXJGJsxv3GHkeuunrqql1hHnmARlOi4OjG+qakIxkYqYHErEuMhssGJ U2UEEA0lwqDMadercY5fA8L2gGtarUHcG9b0SKg/kGpcoYEOAQNKt6dqCIQ1amla 4q8xlbsTWTyGy6dd9195bBCK3vt9dawp/IZxwjE5fDSAZMpjMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEDEmRW4grIPdwm5lsT+DDQexaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTY5OTUwZTMtNjg1My0z NDRlLTk2ZmMtZjQ4YzIyZWE3NzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9ux5HFCjZuawUtm5C9JZO/Y+lK9Hn+kHzBE658m+R1GXKAJE+Pqbqs IxEy03wPcKZ59kQy7C5xHv/+DrwUt3DL+E47hj91Z13AoZrqf+w/nOfxxh2n7mDW 2lVN8EtovfI9ZAkR3z9FJnmt7bTG5yChuJtznt5XM1HkAwCi44OJgAel+STJuym3 scQsakOKZN25h+EYAU8cbZLnwaACDSpx9G0LFMEBxsCcJf/AAZtAk35kxJuRIQai iCqj0AXh4nrfs/zNUcr92nXs6UiBvsC5k4fXi97BSwFKc2viAtAwG6zkczR+ois0 GK6I0MmUGTSgf0nbpyG+29p3SGTkoVQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:02 2025 by rpki-client