$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2df24873-17e8-3e43-9caa-e65a220bd335.roa File: 2df24873-17e8-3e43-9caa-e65a220bd335.roa (raw, json) Hash identifier: xHMxzwcIpS3WbBJp14hZSVJfu15kfIdLmvECFogDDss= Subject key identifier: 2C:E7:6E:21:DC:70:4C:1F:36:2D:4D:D5:10:ED:9C:9C:E2:F5:17:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64B4FEBAA0B65342F0680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2df24873-17e8-3e43-9caa-e65a220bd335.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4b:4f:eb:aa:0b:65:34:2f:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=531564b9-db67-49a6-a3de-8a1a904b89ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:50:fa:52:a7:61:75:03:de:0d:63:4d:e9:d7: 6e:eb:f2:d1:17:c3:1d:12:69:ec:52:08:2b:6c:13: cb:f1:a7:62:6c:c3:15:08:db:d9:8c:dc:38:ec:cc: f4:ea:87:f7:18:4d:a7:bd:28:89:b8:7e:c7:18:32: b1:e7:b7:0e:6c:d0:5a:de:bf:66:54:6c:7e:f2:fa: 2c:ae:d6:f5:2b:4a:10:56:33:dd:30:32:c6:21:26: e8:e3:2d:dd:34:0a:09:29:4a:29:5e:a7:fe:f8:db: 61:2d:c4:fc:13:62:59:0d:2d:df:f0:68:5d:3e:54: 76:ae:03:71:7d:83:74:6d:5f:ea:19:ae:13:dd:58: 69:39:43:17:d4:54:5d:6a:d8:8f:3d:e1:35:90:4d: 6f:49:09:df:4a:64:ff:31:1f:a3:67:6a:27:46:b8: 01:d5:39:c8:82:a9:c1:be:cb:a1:a2:4a:63:85:d3: bc:9f:62:85:9f:4e:27:33:e4:79:4e:b6:ac:b5:49: b4:f3:8b:7a:b5:fe:5f:b3:d1:c1:a1:20:0b:69:ad: 77:c5:4a:a9:75:a2:e8:e9:90:bb:a5:b0:18:01:42: 38:ff:73:fa:cf:bf:60:96:ca:0c:0f:57:75:c7:e7: 12:10:df:9f:18:c0:d3:36:07:8f:da:03:b4:bd:55: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E7:6E:21:DC:70:4C:1F:36:2D:4D:D5:10:ED:9C:9C:E2:F5:17:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2df24873-17e8-3e43-9caa-e65a220bd335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b7:21:ec:7a:4a:86:c0:11:73:27:55:0e:9d:2d:8d:bd:ed: 58:33:ee:5c:6e:fc:f6:c5:23:c9:b4:a6:b8:e1:b4:de:20:f2: d5:32:5a:bf:20:bb:8c:5b:24:54:7b:6c:81:fe:fe:1f:78:88: 73:81:58:fd:4c:ec:15:e6:61:bd:1b:66:bb:b5:83:e8:d2:5c: 88:18:ce:2c:fc:a3:f2:b9:c9:67:8a:b6:69:2c:22:21:1a:48: 13:48:1f:09:a2:5d:be:c1:69:b1:2e:03:3e:45:3f:c5:2e:52: 78:82:fd:51:70:e5:d4:74:31:23:5e:07:e1:28:c1:31:48:2f: 3b:3c:d8:7a:94:58:a4:10:e5:17:0a:60:1b:ce:e9:52:c7:a2: 6b:d7:41:72:a9:14:08:84:d1:9b:cb:ef:39:11:67:69:95:e0: 77:f2:f5:54:fc:52:c8:76:d7:93:e0:ec:1b:a1:36:0e:5e:4a: f8:c2:c6:cd:b5:bf:9f:92:81:39:e1:22:49:cd:d0:87:65:67: 4d:51:08:af:00:1d:aa:cc:23:a3:fc:7d:af:fb:87:fe:29:42: f5:cf:a2:a4:c7:b9:88:5e:8a:e6:06:45:0c:74:1a:2c:81:05: b7:c2:42:ae:b7:f3:c9:df:df:3b:2f:14:5b:06:ca:49:7e:16: eb:fe:4c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1ktP66oLZTQvBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NTMxNTY0YjktZGI2Ny00OWE2LWEzZGUtOGExYTkwNGI4OWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FD6UqdhdQPeDWNN6ddu6/LRF8MdEmnsUggr bBPL8adibMMVCNvZjNw47Mz06of3GE2nvSiJuH7HGDKx57cObNBa3r9mVGx+8vos rtb1K0oQVjPdMDLGISbo4y3dNAoJKUopXqf++NthLcT8E2JZDS3f8GhdPlR2rgNx fYN0bV/qGa4T3VhpOUMX1FRdatiPPeE1kE1vSQnfSmT/MR+jZ2onRrgB1TnIgqnB vsuhokpjhdO8n2KFn04nM+R5TrastUm084t6tf5fs9HBoSALaa13xUqpdaLo6ZC7 pbAYAUI4/3P6z79glsoMD1d1x+cSEN+fGMDTNgeP2gO0vVWOnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCznbiHccEwfNi1N1RDtnJzi9RfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmRmMjQ4NzMtMTdlOC0z ZTQzLTljYWEtZTY1YTIyMGJkMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC3Iex6SobAEXMnVQ6dLY297Vgz7lxu/PbFI8m0prjhtN4g8tUyWr8g u4xbJFR7bIH+/h94iHOBWP1M7BXmYb0bZru1g+jSXIgYziz8o/K5yWeKtmksIiEa SBNIHwmiXb7BabEuAz5FP8UuUniC/VFw5dR0MSNeB+EowTFILzs82HqUWKQQ5RcK YBvO6VLHomvXQXKpFAiE0ZvL7zkRZ2mV4Hfy9VT8Ush215Pg7BuhNg5eSvjCxs21 v5+SgTnhIknN0IdlZ01RCK8AHarMI6P8fa/7h/4pQvXPoqTHuYheiuYGRQx0GiyB BbfCQq6388nf3zsvFFsGykl+Fuv+TII= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:18 2025 by rpki-client