$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17e14022-9140-30b5-81c2-8605314c7b35.roa File: 17e14022-9140-30b5-81c2-8605314c7b35.roa (raw, json) Hash identifier: qAgJO0peBJcOrdNbZtKqR9iL/QdHIdB6vBsV9Lpseao= Subject key identifier: 85:BF:4C:93:DE:C5:67:CB:46:D3:27:03:36:CD:B7:DC:52:6A:9C:00 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65F016D9488F7DB24DBC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17e14022-9140-30b5-81c2-8605314c7b35.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5f:01:6d:94:88:f7:db:24:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=9b418965-be43-46f9-918c-1f7f1f83a991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:62:f5:e5:e7:55:01:c4:75:e0:78:b7:cd: 4b:75:79:66:05:45:40:ca:8a:3a:0e:6e:63:23:57: 6c:70:9e:72:19:93:35:90:59:3a:ee:85:36:6d:29: d8:37:6a:bf:09:06:7d:2e:f7:0e:a8:77:6d:d6:f3: 9a:57:75:52:88:34:03:38:26:67:e4:d9:c1:7b:27: 31:87:9b:43:8f:58:35:a8:57:7a:99:b7:37:c9:bf: d1:7e:cf:cd:29:02:69:a2:63:cc:d0:26:b8:2c:3a: 0f:02:e1:11:02:a5:00:75:85:4f:b1:d8:4a:06:85: 05:eb:bf:0c:10:43:7e:89:72:71:f0:37:fd:88:e4: a8:c0:e5:8d:47:97:13:51:ff:de:9c:b7:35:75:a9: 91:10:8d:e0:49:f8:cd:21:35:0d:e9:1f:86:ca:86: 7f:74:a0:94:39:58:be:8c:ae:0f:eb:ad:4f:81:5b: 3d:d5:de:4b:a9:bc:99:6c:e1:4d:2d:1e:04:79:eb: 66:8e:01:cc:4b:f3:0e:25:09:7b:ed:26:5a:d9:a1: ee:84:f3:02:48:b7:b4:d9:c2:fe:2e:c8:0d:63:1b: 6d:fa:84:d1:3f:b9:18:94:e6:29:bf:ee:56:ad:cb: 5d:6a:3e:e2:4b:7d:10:f3:11:64:46:c1:ad:17:01: 35:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BF:4C:93:DE:C5:67:CB:46:D3:27:03:36:CD:B7:DC:52:6A:9C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17e14022-9140-30b5-81c2-8605314c7b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:41:11:41:64:f0:c4:db:bc:71:72:97:62:01:90:da:06:16: 51:eb:98:94:6b:34:4e:a6:3d:8a:cf:27:74:c4:40:6e:fb:71: af:28:a7:1e:14:aa:77:31:47:e5:9c:66:57:6b:40:d3:61:d3: 57:be:1e:25:44:a7:cb:33:aa:95:06:3d:b1:f5:44:cc:e3:82: cc:c7:67:78:7e:02:a6:71:08:09:17:8a:fb:1c:d3:2a:d7:05: a3:18:c9:58:9b:3c:d1:1b:67:ba:32:ed:1f:1e:2a:a3:b8:94: d4:9b:8f:fc:a6:4c:c0:4d:f6:f6:d7:fd:9a:bc:e4:af:e0:b4: 2c:b6:3b:f6:04:43:67:04:2e:05:cd:6b:07:93:e1:b2:c4:6c: 4c:56:dd:0e:d3:4f:c6:79:a4:4b:6a:9b:06:80:52:a1:5c:64: f3:81:2e:9b:93:00:39:36:c1:73:a0:80:d0:1c:b5:ab:96:92: 9c:8a:aa:d9:20:e2:2b:78:90:00:dd:cc:76:be:68:c0:61:c9: bc:ee:24:d9:69:b2:f8:21:70:44:f8:7d:47:6d:5a:0f:45:94: 86:a3:74:bb:a4:51:4a:98:a3:99:63:4c:09:ce:a2:7a:ae:31: 61:74:6a:77:3a:bb:dd:df:44:2e:69:31:7e:3f:64:f5:b7:d6: 5f:8e:c0:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1l8BbZSI99sk28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk OWI0MTg5NjUtYmU0My00NmY5LTkxOGMtMWY3ZjFmODNhOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMpi9eXnVQHEdeB4t81LdXlmBUVAyoo6Dm5j I1dscJ5yGZM1kFk67oU2bSnYN2q/CQZ9LvcOqHdt1vOaV3VSiDQDOCZn5NnBeycx h5tDj1g1qFd6mbc3yb/Rfs/NKQJpomPM0Ca4LDoPAuERAqUAdYVPsdhKBoUF678M EEN+iXJx8Df9iOSowOWNR5cTUf/enLc1damREI3gSfjNITUN6R+GyoZ/dKCUOVi+ jK4P661PgVs91d5LqbyZbOFNLR4EeetmjgHMS/MOJQl77SZa2aHuhPMCSLe02cL+ LsgNYxtt+oTRP7kYlOYpv+5Wrctdaj7iS30Q8xFkRsGtFwE1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW/TJPexWfLRtMnAzbNt9xSapwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdlMTQwMjItOTE0MC0z MGI1LTgxYzItODYwNTMxNGM3YjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZBEUFk8MTbvHFyl2IBkNoGFlHrmJRrNE6mPYrPJ3TEQG77ca8opx4U qncxR+WcZldrQNNh01e+HiVEp8szqpUGPbH1RMzjgszHZ3h+AqZxCAkXivsc0yrX BaMYyVibPNEbZ7oy7R8eKqO4lNSbj/ymTMBN9vbX/Zq85K/gtCy2O/YEQ2cELgXN aweT4bLEbExW3Q7TT8Z5pEtqmwaAUqFcZPOBLpuTADk2wXOggNActauWkpyKqtkg 4it4kADdzHa+aMBhybzuJNlpsvghcET4fUdtWg9FlIajdLukUUqYo5ljTAnOonqu MWF0anc6u93fRC5pMX4/ZPW31l+OwLs= -----END CERTIFICATE-----Generated at Sat Aug 23 22:35:26 2025 by rpki-client