$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36a28eda-404c-3721-ad64-936664d3cc28.roa File: 36a28eda-404c-3721-ad64-936664d3cc28.roa (raw, json) Hash identifier: L9aCNXbPZPDn0k178B115mjqZK8a6m8Bz8PtPjGWX8g= Subject key identifier: 86:95:CE:CD:AD:44:E7:08:B1:38:C4:E8:F0:4D:C6:0B:17:83:54:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65F8A9B4E72ADFFF2C480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36a28eda-404c-3721-ad64-936664d3cc28.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5f:8a:9b:4e:72:ad:ff:f2:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=26ebc8a1-fff1-4d6d-99de-aeca94dceba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:41:49:73:5e:56:09:37:3e:4f:29:b8:c9:ac: b7:95:3e:ae:30:18:ca:4f:87:6e:a1:e0:7b:35:a7: c6:b6:7a:69:4b:27:b7:15:6c:65:67:c1:d5:82:bf: 92:01:98:ac:98:ea:2e:49:52:6b:72:fa:2a:a9:39: e4:3a:77:83:0e:0c:1e:93:67:e8:39:3b:f0:63:11: ef:b1:1d:22:e9:a2:3a:ba:b4:6f:1c:eb:d9:78:13: 03:02:83:84:3a:f7:c6:54:d9:0c:34:18:10:ae:3e: 42:2a:33:58:96:f4:f8:45:1c:4a:9e:8b:b1:fd:08: 82:17:e2:b6:45:48:89:48:46:e9:cc:fb:30:9c:40: 9c:7d:15:b2:c3:96:f0:54:55:cf:d3:f1:48:fd:dc: 6b:fb:01:3f:bd:2d:67:06:68:c7:f2:b7:5e:02:7a: 40:6d:2d:2c:29:c8:cd:25:b0:46:70:cc:66:57:cb: 75:c7:0a:79:25:3c:e6:a3:dc:d1:85:63:47:16:6b: 7a:3b:0c:e4:76:64:da:37:ab:17:c7:bd:8c:d3:86: e9:37:af:02:66:2d:6b:33:47:66:83:50:6b:b7:00: be:45:ae:e2:2e:06:fd:6a:39:85:2a:05:85:5c:a2: e0:b1:56:c3:87:f7:b9:3c:0b:1c:08:ea:d9:a9:1d: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:CE:CD:AD:44:E7:08:B1:38:C4:E8:F0:4D:C6:0B:17:83:54:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36a28eda-404c-3721-ad64-936664d3cc28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:81:4f:3d:a7:31:e3:d0:d6:79:34:e1:05:42:00:f2:db:8f: 3a:c9:23:c4:3d:93:85:a3:e8:c9:a0:c4:9e:30:8f:38:8f:84: ba:bb:f5:f3:59:fa:7c:61:76:fa:6a:72:52:a5:1b:b3:b2:a4: bb:37:c7:f2:15:9c:6a:b1:83:72:58:96:98:c0:be:8b:85:b1: 1c:0a:35:d9:c5:c0:ef:10:37:bc:20:7e:61:2f:94:16:c9:cd: 0c:98:74:81:2b:f3:bf:d7:bb:82:8f:1e:19:33:d2:33:ea:19: af:93:b9:7a:ca:2b:6c:0d:c1:89:c7:71:bc:54:b7:a9:eb:86: 30:a5:c8:d1:31:b7:bd:e3:81:e7:77:57:4d:04:fa:d8:bd:f8: 61:61:60:d1:a9:34:61:8f:9e:d6:92:d6:18:00:c5:aa:b7:5f: 99:34:35:23:bc:20:65:cd:40:44:8d:2c:6c:7e:15:cd:eb:fa: 8d:92:a6:97:e2:69:80:16:1e:d7:4b:7a:9a:d3:0d:4c:a7:72: 78:7f:0e:ed:2e:9f:31:71:dc:eb:84:53:b4:a5:cd:fe:be:e2: 2b:ac:23:9c:a8:c2:2e:c7:87:dd:51:11:57:9e:60:96:c8:4f: a4:a0:60:57:31:97:f3:41:40:b9:82:47:6e:46:61:4c:8e:66: f2:75:2d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1l+Km05yrf/yxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MjZlYmM4YTEtZmZmMS00ZDZkLTk5ZGUtYWVjYTk0ZGNlYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EFJc15WCTc+Tym4yay3lT6uMBjKT4duoeB7 NafGtnppSye3FWxlZ8HVgr+SAZismOouSVJrcvoqqTnkOneDDgwek2foOTvwYxHv sR0i6aI6urRvHOvZeBMDAoOEOvfGVNkMNBgQrj5CKjNYlvT4RRxKnoux/QiCF+K2 RUiJSEbpzPswnECcfRWyw5bwVFXP0/FI/dxr+wE/vS1nBmjH8rdeAnpAbS0sKcjN JbBGcMxmV8t1xwp5JTzmo9zRhWNHFmt6OwzkdmTaN6sXx72M04bpN68CZi1rM0dm g1BrtwC+Ra7iLgb9ajmFKgWFXKLgsVbDh/e5PAscCOrZqR2hkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaVzs2tROcIsTjE6PBNxgsXg1RQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzZhMjhlZGEtNDA0Yy0z NzIxLWFkNjQtOTM2NjY0ZDNjYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOBTz2nMePQ1nk04QVCAPLbjzrJI8Q9k4Wj6MmgxJ4wjziPhLq79fNZ +nxhdvpqclKlG7OypLs3x/IVnGqxg3JYlpjAvouFsRwKNdnFwO8QN7wgfmEvlBbJ zQyYdIEr87/Xu4KPHhkz0jPqGa+TuXrKK2wNwYnHcbxUt6nrhjClyNExt73jged3 V00E+ti9+GFhYNGpNGGPntaS1hgAxaq3X5k0NSO8IGXNQESNLGx+Fc3r+o2Sppfi aYAWHtdLeprTDUyncnh/Du0unzFx3OuEU7Slzf6+4iusI5yowi7Hh91REVeeYJbI T6SgYFcxl/NBQLmCR25GYUyOZvJ1Lds= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:45 2025 by rpki-client