$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28a6e830-ed98-31b0-9811-91ef9482d24e.roa File: 28a6e830-ed98-31b0-9811-91ef9482d24e.roa (raw, json) Hash identifier: AsSoQUymBcGx8lAs+PWZT1PtZMUvYALAUuzG+7qzY7M= Subject key identifier: 67:57:4E:F5:B2:12:4D:91:EB:18:A4:7E:34:02:D8:75:0F:79:1C:05 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8766ECCD0F2EC6A63CC6BC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28a6e830-ed98-31b0-9811-91ef9482d24e.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.70.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:6e:cc:d0:f2:ec:6a:63:cc:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=b0dd49de-3ecb-42b1-bb8f-ea668409685d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4e:6d:48:c3:42:4e:38:4f:28:7f:64:22:e9: 84:cc:12:9d:94:fb:e1:d3:d7:73:eb:1a:63:c9:c8: ad:0f:0e:d9:62:a4:c7:c0:bd:e6:1a:a6:28:6d:16: 32:4d:bc:42:eb:ac:24:95:49:c6:41:b4:58:63:f0: f5:21:2d:6d:14:8e:8c:52:e7:ab:e4:b2:ef:6e:d7: 0d:b4:df:27:f0:9c:69:74:f6:22:5b:a6:d0:77:e5: d4:21:b7:50:fc:e5:ba:64:9f:ba:af:92:f8:44:95: fe:c4:2c:a6:e3:4b:33:fa:b4:35:dc:1f:f6:32:bf: e3:2f:44:55:5f:6b:83:a2:6a:63:41:93:90:bc:b6: bd:9a:7c:8c:1f:58:9a:51:4c:ca:bd:1b:df:69:fe: 7e:b1:c9:64:70:2a:de:8f:8b:06:25:81:8e:4c:08: 53:60:aa:04:19:fd:d8:c8:fe:54:0f:e5:46:63:37: e0:4f:07:da:33:b6:74:00:e0:bf:0c:ef:17:25:56: 1d:c2:a4:81:5d:a8:92:fd:13:09:49:b1:04:f8:ad: 05:42:0f:89:fd:9e:cc:eb:04:2f:a4:0a:47:85:61: 58:78:d9:01:e0:e6:ad:e4:6f:21:b8:ce:8a:4a:0b: a0:f2:93:c1:d3:cf:5a:93:b4:84:bb:68:65:dc:00: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:57:4E:F5:B2:12:4D:91:EB:18:A4:7E:34:02:D8:75:0F:79:1C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28a6e830-ed98-31b0-9811-91ef9482d24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:4d:87:bd:20:97:c4:ab:6a:46:f0:7e:73:3e:62:f8:2c:9d: 09:b4:40:94:95:04:a8:ba:38:73:f9:31:86:11:e1:10:48:5e: f0:d7:02:a9:23:88:1c:66:e6:ea:3e:2b:49:cc:ef:86:d9:f5: 23:75:fd:ee:9a:8d:7f:bf:df:4a:4a:1c:df:5f:f6:dc:dd:12: b2:28:df:2e:8e:01:0c:26:1f:98:e7:08:f8:8d:de:6f:6c:23: 0b:36:67:36:e3:6e:cc:7c:ed:6c:d5:3f:d2:2e:9b:e4:48:75: 31:cc:a2:bd:d5:0b:ef:4d:9f:4a:05:8e:da:1a:d1:c5:35:13: ad:99:9a:de:06:07:f1:44:1e:66:a1:77:0b:2a:7c:7b:43:f7: 74:c7:2f:da:d8:6d:f5:c9:1e:bf:51:78:18:1c:d6:90:c9:eb: a9:63:1e:45:3e:c2:e2:bb:d5:d9:74:49:21:be:98:37:fd:21: 3d:d2:b7:9a:67:88:21:0e:3f:f1:f2:9b:1e:29:ea:52:5f:e4: e2:b1:f2:fa:f3:69:a5:20:a4:d7:6a:71:12:24:39:2a:03:e2: 32:df:eb:33:cf:01:4a:03:7e:2e:58:4f:b0:01:9d:eb:a6:0c: a4:97:c1:b3:8f:6b:ab:4f:a2:e6:1d:e6:a3:0f:06:30:e2:34: 52:dc:97:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdm7M0PLsamPMa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjBkZDQ5ZGUtM2VjYi00MmIxLWJiOGYtZWE2Njg0MDk2ODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE5tSMNCTjhPKH9kIumEzBKdlPvh09dz6xpj ycitDw7ZYqTHwL3mGqYobRYyTbxC66wklUnGQbRYY/D1IS1tFI6MUuer5LLvbtcN tN8n8JxpdPYiW6bQd+XUIbdQ/OW6ZJ+6r5L4RJX+xCym40sz+rQ13B/2Mr/jL0RV X2uDompjQZOQvLa9mnyMH1iaUUzKvRvfaf5+sclkcCrej4sGJYGOTAhTYKoEGf3Y yP5UD+VGYzfgTwfaM7Z0AOC/DO8XJVYdwqSBXaiS/RMJSbEE+K0FQg+J/Z7M6wQv pApHhWFYeNkB4Oat5G8huM6KSgug8pPB089ak7SEu2hl3ACmYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdXTvWyEk2R6xikfjQC2HUPeRwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjhhNmU4MzAtZWQ5OC0z MWIwLTk4MTEtOTFlZjk0ODJkMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdNh70gl8SrakbwfnM+YvgsnQm0QJSVBKi6OHP5MYYR4RBIXvDXAqkj iBxm5uo+K0nM74bZ9SN1/e6ajX+/30pKHN9f9tzdErIo3y6OAQwmH5jnCPiN3m9s Iws2Zzbjbsx87WzVP9Ium+RIdTHMor3VC+9Nn0oFjtoa0cU1E62Zmt4GB/FEHmah dwsqfHtD93THL9rYbfXJHr9ReBgc1pDJ66ljHkU+wuK71dl0SSG+mDf9IT3St5pn iCEOP/Hymx4p6lJf5OKx8vrzaaUgpNdqcRIkOSoD4jLf6zPPAUoDfi5YT7ABneum DKSXwbOPa6tPouYd5qMPBjDiNFLclyc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:08:58 2025 by rpki-client