$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a239ea6-1a97-325b-84e1-2586ab9385f2.roa File: 2a239ea6-1a97-325b-84e1-2586ab9385f2.roa (raw, json) Hash identifier: o8sXWGkYeRCyn0W7fcg8d6trWgOqBly8duuR3QKCxkU= Subject key identifier: 61:74:02:B7:95:C9:82:7F:1E:73:5A:35:00:34:38:FF:5D:3B:45:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D6602A85EEC0781694C300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a239ea6-1a97-325b-84e1-2586ab9385f2.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:60:2a:85:ee:c0:78:16:94:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=f2b0036f-9101-47ca-96e8-8b9189c7a14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:bd:0c:d9:91:27:35:1d:d3:e4:bb:6c:3c: 00:27:05:a7:d3:5a:a8:f2:4a:6a:c3:22:62:e1:99: d7:a8:b4:9d:23:91:7f:e8:bc:ec:b1:8c:81:fa:51: 60:19:d8:a0:8d:df:fc:b1:84:7f:08:43:68:bd:96: 6d:40:07:1e:27:3d:d2:00:0c:70:72:a4:3d:50:72: 24:d2:7f:28:95:af:51:86:72:31:0c:cb:b6:70:25: 53:e3:98:34:db:f3:6f:40:d4:cb:ce:ad:1e:5b:b9: 00:8d:ff:30:7d:a8:e2:8e:90:65:d3:d1:fd:ba:b9: fd:21:eb:1a:d8:6e:c0:85:91:12:28:b3:60:1f:d2: 40:c0:1a:f1:e2:a6:99:ba:1e:50:73:6e:00:5d:0a: 83:01:e4:0b:68:7e:99:b4:88:6d:a1:47:79:03:67: 30:65:a9:5f:d1:d6:12:25:01:4e:3b:ab:2b:93:1a: e3:48:dd:49:bc:ff:8e:03:fe:30:2e:4a:53:c2:c5: 00:1c:41:49:4c:1d:5a:1c:05:67:c3:2b:97:61:27: 5d:36:f1:0a:56:d1:62:30:14:0a:20:7c:ed:84:f5: 9c:cb:48:f6:6b:a3:8a:30:e6:61:b6:b3:9f:f4:8a: ae:3e:16:85:e1:03:b6:97:4d:02:03:05:b5:7a:4d: 32:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:02:B7:95:C9:82:7F:1E:73:5A:35:00:34:38:FF:5D:3B:45:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a239ea6-1a97-325b-84e1-2586ab9385f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:00:43:05:8c:84:cc:6e:31:bf:6a:8d:a1:9a:bd:e0:8f:66: a2:3e:9f:a4:84:2d:fb:1e:a2:a5:8c:48:92:29:75:f1:a7:32: b5:91:7b:2c:5e:8b:38:14:5d:6d:0b:ce:70:4f:ff:91:a1:8d: 80:5a:23:c4:c2:93:68:40:2d:21:2d:79:e4:97:38:3a:a8:c2: 4b:1b:f4:0d:a4:9c:4e:cc:e9:7f:0a:23:bc:98:6e:28:b3:e2: 51:97:f4:a5:c3:a0:f1:5c:e6:c2:13:35:dd:a5:d8:d2:bb:dd: d5:d1:fa:9a:55:66:61:99:ee:f0:65:79:4e:9b:9a:19:16:ce: 4e:dc:01:09:8b:f8:64:5b:0b:ff:11:5a:00:e1:f0:97:a1:1e: 32:51:6f:50:cf:f4:c3:7a:3b:ff:c9:20:fc:60:1c:a6:4e:e8: 83:34:94:33:42:32:92:8b:61:81:84:66:05:be:64:c9:e2:5c: 65:bf:d0:3c:c5:13:79:32:3f:55:61:2c:9c:58:74:6b:f8:04: 72:05:4f:e8:07:3c:01:00:29:09:37:ce:1c:b6:7f:19:54:04: 8c:fd:b8:48:9e:90:4d:0a:62:05:f4:f8:83:86:18:3d:9f:91: f3:b1:1c:d5:11:16:ff:40:d5:07:70:58:dd:09:95:bd:ff:f8: 95:79:a5:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mAqhe7AeBaUwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZjJiMDAzNmYtOTEwMS00N2NhLTk2ZTgtOGI5MTg5YzdhMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8G9DNmRJzUd0+S7bDwAJwWn01qo8kpqwyJi 4ZnXqLSdI5F/6LzssYyB+lFgGdigjd/8sYR/CENovZZtQAceJz3SAAxwcqQ9UHIk 0n8ola9RhnIxDMu2cCVT45g02/NvQNTLzq0eW7kAjf8wfajijpBl09H9urn9Iesa 2G7AhZESKLNgH9JAwBrx4qaZuh5Qc24AXQqDAeQLaH6ZtIhtoUd5A2cwZalf0dYS JQFOO6srkxrjSN1JvP+OA/4wLkpTwsUAHEFJTB1aHAVnwyuXYSddNvEKVtFiMBQK IHzthPWcy0j2a6OKMOZhtrOf9IquPhaF4QO2l00CAwW1ek0yIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF0AreVyYJ/HnNaNQA0OP9dO0XiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmEyMzllYTYtMWE5Ny0z MjViLTg0ZTEtMjU4NmFiOTM4NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEedMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcAQwWMhMxuMb9qjaGaveCPZqI+n6SELfseoqWMSJIpdfGnMrWReyxe izgUXW0LznBP/5GhjYBaI8TCk2hALSEteeSXODqowksb9A2knE7M6X8KI7yYbiiz 4lGX9KXDoPFc5sITNd2l2NK73dXR+ppVZmGZ7vBleU6bmhkWzk7cAQmL+GRbC/8R WgDh8JehHjJRb1DP9MN6O//JIPxgHKZO6IM0lDNCMpKLYYGEZgW+ZMniXGW/0DzF E3kyP1VhLJxYdGv4BHIFT+gHPAEAKQk3zhy2fxlUBIz9uEiekE0KYgX0+IOGGD2f kfOxHNURFv9A1QdwWN0Jlb3/+JV5pUY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:18:40 2025 by rpki-client