$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dfb918c-dc85-3154-a36b-ff66efabc600.roa File: 2dfb918c-dc85-3154-a36b-ff66efabc600.roa (raw, json) Hash identifier: VmQ7u3MLSYsBUhil4bXjSAG2GkvNfJo0IaxSzh30zTk= Subject key identifier: ED:D7:D5:B5:DE:76:7A:D8:27:F7:CB:76:30:8E:06:23:A9:FE:6E:80 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65CDA1B6F94CBC6F345C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dfb918c-dc85-3154-a36b-ff66efabc600.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5c:da:1b:6f:94:cb:c6:f3:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=3c9c9ed0-4f77-4438-a857-62c8cb4c4d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:df:e5:fb:6a:e6:76:a8:a0:ef:f5:39:03: d7:2a:f4:19:40:0e:b4:49:0a:91:1d:ec:75:97:2d: 87:a3:4e:d1:c9:79:4c:57:08:f8:1c:b2:51:7c:1a: b4:5f:b3:5d:2b:5c:39:b4:65:e4:83:08:3d:3e:f3: a4:09:04:28:22:22:5e:5f:3f:b7:73:db:cc:de:33: 35:e0:b5:e2:c2:17:f3:18:17:07:92:9f:a1:ab:49: b5:d0:5d:05:71:98:12:62:17:b0:4a:13:cd:54:dc: 44:52:34:71:f9:b2:42:28:aa:2f:3c:56:49:c8:ff: 49:18:38:49:83:71:a4:16:b6:8c:85:c9:82:08:ac: 8e:85:8f:28:91:47:e6:3a:0f:58:ee:09:b0:d6:89: b9:cb:a0:ee:c6:13:9d:aa:68:d4:99:94:3c:73:50: 8c:68:c1:e0:38:f0:f8:3a:09:e6:52:07:24:90:94: bc:27:56:dc:4d:e4:bd:2e:a0:9a:b0:81:82:d9:25: f9:2e:13:50:53:0f:9d:ec:f6:57:9c:df:4b:e1:e9: 48:90:0c:1f:79:8f:a0:57:6f:3b:54:bd:1e:07:e1: 3f:0f:d4:70:08:83:08:10:53:66:b6:77:d8:4c:ad: f8:00:70:1a:62:6b:ce:98:81:06:7c:dd:dc:d4:f7: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:D5:B5:DE:76:7A:D8:27:F7:CB:76:30:8E:06:23:A9:FE:6E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2dfb918c-dc85-3154-a36b-ff66efabc600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b7:be:16:6a:14:43:77:7b:0d:2a:bf:d7:86:19:6e:a9:b6: a6:2f:f2:55:93:2e:e3:b4:de:c2:b4:57:1a:46:35:a1:6f:1e: 08:7f:09:19:59:70:6e:8c:ae:e9:ac:4f:90:07:8d:e9:48:9c: 7f:70:48:4c:a9:66:57:f3:2a:5a:cd:2b:78:89:f4:c9:87:ed: af:24:8d:36:fc:7e:3b:f4:f6:3c:03:d0:e5:fd:65:f1:83:e6: 6b:2c:68:7f:34:12:72:df:53:dc:f4:8c:ae:af:65:72:09:83: 79:af:e9:1f:a5:80:14:f4:b1:77:c3:83:b9:ca:8e:b2:58:a2: e5:46:c4:fa:6e:45:bb:02:e7:10:d3:7d:1b:f1:67:7d:46:4d: bf:47:b3:b9:c2:91:8f:5c:af:e1:81:a3:f9:d7:60:c8:f1:16: 22:b1:d4:ef:df:6c:ed:69:96:ed:6d:f7:71:03:ac:50:a5:73: 6d:44:94:c6:b0:35:66:e7:e0:40:d6:4d:0a:bd:d7:53:f8:b1: 4c:19:e4:7d:33:df:15:b1:6e:d9:ef:eb:4b:26:38:7a:c0:4e: e6:b2:01:46:24:6b:7e:a6:1b:6f:b2:f9:e4:d1:83:43:ef:8a: 19:e2:de:65:d0:04:98:9a:69:71:74:9a:07:c8:dd:23:50:8d: bd:22:49:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lzaG2+Uy8bzRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk M2M5YzllZDAtNGY3Ny00NDM4LWE4NTctNjJjOGNiNGM0ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYHf5ftq5naooO/1OQPXKvQZQA60SQqRHex1 ly2Ho07RyXlMVwj4HLJRfBq0X7NdK1w5tGXkgwg9PvOkCQQoIiJeXz+3c9vM3jM1 4LXiwhfzGBcHkp+hq0m10F0FcZgSYhewShPNVNxEUjRx+bJCKKovPFZJyP9JGDhJ g3GkFraMhcmCCKyOhY8okUfmOg9Y7gmw1om5y6DuxhOdqmjUmZQ8c1CMaMHgOPD4 OgnmUgckkJS8J1bcTeS9LqCasIGC2SX5LhNQUw+d7PZXnN9L4elIkAwfeY+gV287 VL0eB+E/D9RwCIMIEFNmtnfYTK34AHAaYmvOmIEGfN3c1PfZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3X1bXednrYJ/fLdjCOBiOp/m6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmRmYjkxOGMtZGM4NS0z MTU0LWEzNmItZmY2NmVmYWJjNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe3vhZqFEN3ew0qv9eGGW6ptqYv8lWTLuO03sK0VxpGNaFvHgh/CRlZ cG6MrumsT5AHjelInH9wSEypZlfzKlrNK3iJ9MmH7a8kjTb8fjv09jwD0OX9ZfGD 5mssaH80EnLfU9z0jK6vZXIJg3mv6R+lgBT0sXfDg7nKjrJYouVGxPpuRbsC5xDT fRvxZ31GTb9Hs7nCkY9cr+GBo/nXYMjxFiKx1O/fbO1plu1t93EDrFClc21ElMaw NWbn4EDWTQq911P4sUwZ5H0z3xWxbtnv60smOHrATuayAUYka36mG2+y+eTRg0Pv ihni3mXQBJiaaXF0mgfI3SNQjb0iSbw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:44 2025 by rpki-client