$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa File: 38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa (raw, json) Hash identifier: c1g207enY5B2idTPGFuHixxZa4x8niSW9DBD8nNbIfo= Subject key identifier: 88:0B:01:BE:E3:CF:0A:7A:AC:8E:8D:79:4C:6F:1A:14:EE:18:5B:93 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64DE3182FCE13CA53A640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4d:e3:18:2f:ce:13:ca:53:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=c853736a-f299-4bd1-b683-bff647f7584d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:15:9f:2d:a0:83:6a:7a:81:e0:bd:d1:bd: 5a:6c:4b:9f:94:0b:d0:7b:ca:c6:a7:4c:1b:0f:f8: b8:5e:34:c9:8b:bf:e3:32:83:26:46:c7:e7:aa:a8: 29:ba:26:bb:63:19:19:8a:f5:4f:8a:35:d1:11:5b: b4:df:32:6a:95:4d:c3:38:9c:27:48:05:e6:60:a7: 08:64:74:b6:75:94:85:3c:e5:2a:be:65:5d:f9:8e: 4e:d0:64:b1:f6:9e:ea:34:d4:64:4e:d5:3a:1b:b3: 52:d5:3f:40:01:35:55:f5:2a:b6:99:63:bc:3d:31: ba:dc:5a:7b:da:43:98:ec:4e:9f:4d:88:64:b3:b6: a2:7d:74:57:1b:4a:82:70:2a:d5:12:f2:df:2e:ec: 57:e1:99:a8:ce:65:86:58:ce:c0:a6:58:f9:7c:d5: 2a:aa:f4:5c:3e:26:d7:c6:13:8c:29:38:31:f4:78: 19:22:c1:41:4a:7f:b7:b4:5d:7d:0d:ae:0c:1a:11: 5f:bb:4c:15:1b:9c:f3:f1:98:64:8c:9b:eb:de:13: 6b:df:b6:28:ec:ba:bb:82:74:61:c0:43:2c:cb:fc: 90:0e:9f:af:6d:76:2c:31:d1:cd:96:75:68:c7:4e: c5:b7:25:8e:bc:8b:5e:1c:89:17:78:3b:ff:50:91: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0B:01:BE:E3:CF:0A:7A:AC:8E:8D:79:4C:6F:1A:14:EE:18:5B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38c48ef1-9ffd-3804-a807-2f8543ef3a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c1:6a:b3:10:e0:11:45:81:6e:b4:a2:e4:bc:d4:8a:48:45: c7:2d:05:e2:21:d0:19:e7:52:0c:a7:33:d8:3c:fb:8a:fe:71: 9c:9f:1c:9e:70:e9:03:ce:1f:83:e4:81:51:a2:c9:9a:39:85: 38:80:57:f2:05:ba:9b:ce:a0:70:81:2f:0d:7e:7c:5d:ca:73: e1:69:3c:6e:0c:70:2c:ad:bc:b1:d5:79:ce:73:94:7f:a3:60: e5:f4:0d:e3:8c:9b:d5:d1:27:6a:64:25:34:c6:a6:82:2d:66: 2b:dd:c1:b7:44:e3:78:97:0d:70:f2:2d:23:b0:f9:b3:eb:72: cc:69:ce:4f:a3:04:e3:7e:4d:a2:62:ac:e0:61:4e:b3:14:08: 5d:51:42:94:86:ac:37:30:fd:d4:e6:a1:4e:2a:0d:80:1a:c9: 31:ff:24:bf:fc:f9:90:8a:62:93:a3:49:ee:f0:6b:67:d0:22: 60:62:5f:92:2f:7a:91:e4:89:da:bf:fb:cb:d1:10:93:b0:b9: 80:17:84:4d:b5:23:0d:9c:25:42:8a:5d:17:f5:cf:d7:70:2f: e0:a7:a8:9d:4d:ef:66:32:83:1e:26:d8:d6:9f:3d:30:08:47: 79:9a:8d:f0:13:ed:32:e6:bf:41:28:de:d1:a4:36:3b:8a:4a: f3:de:04:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1k3jGC/OE8pTpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk Yzg1MzczNmEtZjI5OS00YmQxLWI2ODMtYmZmNjQ3Zjc1ODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CUVny2gg2p6geC90b1abEuflAvQe8rGp0wb D/i4XjTJi7/jMoMmRsfnqqgpuia7YxkZivVPijXREVu03zJqlU3DOJwnSAXmYKcI ZHS2dZSFPOUqvmVd+Y5O0GSx9p7qNNRkTtU6G7NS1T9AATVV9Sq2mWO8PTG63Fp7 2kOY7E6fTYhks7aifXRXG0qCcCrVEvLfLuxX4ZmozmWGWM7Aplj5fNUqqvRcPibX xhOMKTgx9HgZIsFBSn+3tF19Da4MGhFfu0wVG5zz8ZhkjJvr3hNr37Yo7Lq7gnRh wEMsy/yQDp+vbXYsMdHNlnVox07FtyWOvIteHIkXeDv/UJFBOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgLAb7jzwp6rI6NeUxvGhTuGFuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzhjNDhlZjEtOWZmZC0z ODA0LWE4MDctMmY4NTQzZWYzYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArBarMQ4BFFgW60ouS81IpIRcctBeIh0BnnUgynM9g8+4r+cZyfHJ5w 6QPOH4PkgVGiyZo5hTiAV/IFupvOoHCBLw1+fF3Kc+FpPG4McCytvLHVec5zlH+j YOX0DeOMm9XRJ2pkJTTGpoItZivdwbdE43iXDXDyLSOw+bPrcsxpzk+jBON+TaJi rOBhTrMUCF1RQpSGrDcw/dTmoU4qDYAayTH/JL/8+ZCKYpOjSe7wa2fQImBiX5Iv epHkidq/+8vREJOwuYAXhE21Iw2cJUKKXRf1z9dwL+CnqJ1N72Yygx4m2NafPTAI R3majfAT7TLmv0Eo3tGkNjuKSvPeBC0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:08 2025 by rpki-client