$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa File: 2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa (raw, json) Hash identifier: p1wfc8eNE+eLIOaw4gIBb3tNo1i5dpTGKJIU1mu/aOs= Subject key identifier: 37:CD:C9:C5:4D:EC:99:AA:14:22:2C:EF:E2:FE:FA:7E:F2:94:7D:83 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D652D9C201D08C5B0DD6A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:52:d9:c2:01:d0:8c:5b:0d:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=99a4ae1d-e8e1-4fa0-ba1f-5014fc44ca05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:a5:6f:6b:5d:ee:d9:61:6e:77:ab:89:ea: 32:e0:4b:b1:84:c8:c2:67:a6:6d:e4:fa:ff:51:58: 76:c6:92:df:3e:0e:b6:b7:51:37:ed:ef:28:1a:d9: c6:a8:e1:94:9a:a4:3f:3e:0d:1e:de:0b:07:ae:7b: 56:95:64:70:94:2b:2c:b1:f6:01:ab:fb:4d:45:f9: a4:d8:e0:ed:69:71:64:58:9a:c8:dd:92:d3:87:78: 78:fc:b8:ac:6b:ed:b4:6d:4b:c4:8d:0f:70:5e:1f: 97:ef:32:44:f8:41:85:7c:1b:81:58:e0:da:16:bf: 68:96:29:66:29:1b:b1:47:09:ef:6d:0b:6e:f4:f9: 2a:91:48:f1:82:f1:36:28:55:2d:c9:55:58:28:a2: ba:52:96:cf:ee:dc:8f:dc:a3:c9:52:4b:9c:ee:73: 04:39:d6:dc:58:d2:68:e7:e9:14:b1:ed:fa:c7:88: a3:d8:7c:79:0b:ee:4d:fb:da:69:c9:6b:09:e8:b5: b1:32:c9:06:1b:ff:c1:86:04:83:c3:b2:19:3a:1e: 96:08:fe:50:87:f1:95:09:0f:cb:fd:1e:b3:93:28: dc:b6:9a:d2:6d:83:8a:95:b7:00:b8:60:97:f5:fd: 8b:2e:69:43:c0:5a:b3:fc:a1:4a:83:b3:bb:76:e2: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CD:C9:C5:4D:EC:99:AA:14:22:2C:EF:E2:FE:FA:7E:F2:94:7D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7f:2c:16:13:9b:1a:6d:ae:1d:1d:19:5a:28:5b:49:80:c7: 40:f7:6a:63:4f:f4:a1:96:42:cf:26:11:77:41:f4:ed:e5:bf: 42:b8:fb:ac:79:36:8e:55:80:e8:45:63:9c:16:70:39:cd:47: c1:ec:db:ff:a8:bc:c2:42:b5:31:d1:1b:0b:bd:06:61:04:6a: c8:83:07:08:c8:9a:0e:17:0f:36:89:84:f2:f2:e4:a0:56:2c: b1:79:ba:86:b5:82:f0:8e:c8:ca:e5:e7:53:20:c6:c2:62:5e: 45:e0:d9:4a:07:ee:e0:dd:52:ca:d4:8e:9d:ac:48:45:04:df: d5:9d:0d:47:5b:bb:e7:d6:c5:2c:dc:67:c5:b0:fa:35:a7:52: 30:5e:f1:2f:9b:aa:8d:17:e5:38:1f:56:b1:cc:8e:23:0f:50: f0:d9:6f:c9:11:40:e0:98:a0:38:dd:f9:fe:e8:06:3a:31:a7: a5:b6:cb:68:0e:41:f5:a5:11:f0:b1:1c:2b:0b:f4:e7:dd:2b: 75:4b:8e:34:f9:9c:75:84:1c:44:87:c5:96:77:c4:61:a1:19: b6:54:f3:f5:76:8b:69:67:af:4c:f8:be:d3:d2:bc:bd:3b:86: 58:23:f7:5e:74:47:21:ef:dd:e3:1e:90:30:08:dd:a1:c1:3d: d6:94:bc:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lLZwgHQjFsN1qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk OTlhNGFlMWQtZThlMS00ZmEwLWJhMWYtNTAxNGZjNDRjYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMqlb2td7tlhbnerieoy4EuxhMjCZ6Zt5Pr/ UVh2xpLfPg62t1E37e8oGtnGqOGUmqQ/Pg0e3gsHrntWlWRwlCsssfYBq/tNRfmk 2ODtaXFkWJrI3ZLTh3h4/Lisa+20bUvEjQ9wXh+X7zJE+EGFfBuBWODaFr9olilm KRuxRwnvbQtu9PkqkUjxgvE2KFUtyVVYKKK6UpbP7tyP3KPJUkuc7nMEOdbcWNJo 5+kUse36x4ij2Hx5C+5N+9ppyWsJ6LWxMskGG//BhgSDw7IZOh6WCP5Qh/GVCQ/L /R6zkyjctprSbYOKlbcAuGCX9f2LLmlDwFqz/KFKg7O7duIOzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfNycVN7JmqFCIs7+L++n7ylH2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU1OGE2ZGQtZjNlZi0z YmI1LTk4YjEtMDY2NmVlZGIwNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR/LBYTmxptrh0dGVooW0mAx0D3amNP9KGWQs8mEXdB9O3lv0K4+6x5 No5VgOhFY5wWcDnNR8Hs2/+ovMJCtTHRGwu9BmEEasiDBwjImg4XDzaJhPLy5KBW LLF5uoa1gvCOyMrl51MgxsJiXkXg2UoH7uDdUsrUjp2sSEUE39WdDUdbu+fWxSzc Z8Ww+jWnUjBe8S+bqo0X5TgfVrHMjiMPUPDZb8kRQOCYoDjd+f7oBjoxp6W2y2gO QfWlEfCxHCsL9OfdK3VLjjT5nHWEHESHxZZ3xGGhGbZU8/V2i2lnr0z4vtPSvL07 hlgj9150RyHv3eMekDAI3aHBPdaUvAg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:04 2025 by rpki-client