$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa File: 42994a69-182c-326f-b80c-adb381440cc9.roa (raw, json) Hash identifier: Zd2B69OBg6PoZLhV+OpFBInG8HXl0KK5agyqvXOj4OI= Subject key identifier: 2A:36:83:24:AB:8B:63:FB:5F:5A:79:72:45:7B:AE:D8:ED:E5:DC:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64BDDEBADD77B67AF0000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4b:dd:eb:ad:d7:7b:67:af:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=d0ff82b2-9d55-4c19-ac18-5f0b508d9197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:da:16:b6:84:4c:f1:86:fa:be:c5:7f:2e: dc:81:e9:72:61:d4:16:69:61:c2:21:36:3b:8e:f9: f8:3c:c7:c9:9f:36:b5:48:d9:96:ad:07:c8:ed:ce: 17:27:59:4e:bd:92:b0:f6:04:be:72:f3:bc:ed:63: 47:d6:37:5d:24:fc:03:80:4d:3c:da:07:f2:f3:0e: ef:9a:ed:fc:19:2a:5b:d9:97:7d:9a:d8:f3:b2:be: 93:c6:87:e5:54:67:a0:53:17:cb:dd:df:29:7d:90: 84:80:21:a8:b8:ae:1d:85:23:1b:af:b1:e5:6a:c0: 23:fa:a2:5d:26:c6:f2:1e:15:4e:f5:76:06:75:c3: 87:ce:a7:1a:51:8e:b7:d1:51:e4:af:71:50:e9:e1: b5:56:d1:62:61:a9:8b:67:97:9d:1b:ee:23:d3:88: cb:44:74:3f:45:91:24:40:b5:e1:d4:29:76:58:dd: 12:33:00:fc:ce:d7:a5:ac:d6:e2:4f:d2:59:a5:e6: 48:cf:fa:9f:9e:3c:d4:10:bc:63:dc:00:99:3f:f9: 49:82:58:3a:e6:3d:99:f2:10:93:c2:b6:73:28:d0: 5a:43:cc:84:3e:98:70:f1:ef:ae:2b:e3:80:bd:d3: 54:40:1b:e4:81:61:89:61:af:07:1c:20:52:19:25: 51:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:36:83:24:AB:8B:63:FB:5F:5A:79:72:45:7B:AE:D8:ED:E5:DC:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42994a69-182c-326f-b80c-adb381440cc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ba:a1:7a:66:07:5b:bb:8d:a9:94:48:8a:d1:db:24:40:5a: 39:b6:6a:df:3c:66:21:bd:8e:c3:c6:4c:a8:47:3b:9b:32:ab: 81:c0:77:cf:7e:63:60:dd:6f:ea:a6:e6:55:95:f5:60:e0:ba: f5:5a:9d:20:b6:2e:7d:73:45:2c:27:aa:6a:7c:e5:af:34:f8: b1:1a:13:fe:65:61:05:49:d1:08:11:6c:fc:b4:6e:cf:29:99: 1d:8f:69:35:ec:44:b3:6c:a2:79:4a:9c:ae:83:f8:8f:e3:a0: 1b:87:a5:b6:5e:0d:ca:fe:96:d7:65:13:27:1a:07:90:2c:83: 42:0c:7c:74:37:80:94:f0:95:28:3b:75:54:cb:dd:cc:94:52: fa:79:e5:73:70:7e:5d:ad:e6:8b:89:6d:5a:5b:50:22:53:fa: 58:08:cf:bc:a5:97:89:cd:a2:12:5f:cf:56:b5:06:ed:24:1f: 89:33:25:6e:80:e2:c2:69:02:82:32:1f:58:0b:de:df:68:21: 84:de:f0:9f:c2:3d:9f:15:8c:3d:17:a0:bd:d5:9e:14:b6:44: 28:9a:dd:90:98:30:8b:0c:af:a4:0e:4d:ba:7c:34:d9:2b:51: 78:a1:cf:77:f0:2b:f9:47:67:48:bd:4b:68:76:70:80:24:23: f4:a5:4d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kvd663Xe2evAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZDBmZjgyYjItOWQ1NS00YzE5LWFjMTgtNWYwYjUwOGQ5MTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOnaFraETPGG+r7Ffy7cgelyYdQWaWHCITY7 jvn4PMfJnza1SNmWrQfI7c4XJ1lOvZKw9gS+cvO87WNH1jddJPwDgE082gfy8w7v mu38GSpb2Zd9mtjzsr6TxoflVGegUxfL3d8pfZCEgCGouK4dhSMbr7HlasAj+qJd JsbyHhVO9XYGdcOHzqcaUY630VHkr3FQ6eG1VtFiYamLZ5edG+4j04jLRHQ/RZEk QLXh1Cl2WN0SMwD8ztelrNbiT9JZpeZIz/qfnjzUELxj3ACZP/lJglg65j2Z8hCT wrZzKNBaQ8yEPphw8e+uK+OAvdNUQBvkgWGJYa8HHCBSGSVRlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo2gySri2P7X1p5ckV7rtjt5dw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDI5OTRhNjktMTgyYy0z MjZmLWI4MGMtYWRiMzgxNDQwY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy6oXpmB1u7jamUSIrR2yRAWjm2at88ZiG9jsPGTKhHO5syq4HAd89+ Y2Ddb+qm5lWV9WDguvVanSC2Ln1zRSwnqmp85a80+LEaE/5lYQVJ0QgRbPy0bs8p mR2PaTXsRLNsonlKnK6D+I/joBuHpbZeDcr+ltdlEycaB5Asg0IMfHQ3gJTwlSg7 dVTL3cyUUvp55XNwfl2t5ouJbVpbUCJT+lgIz7yll4nNohJfz1a1Bu0kH4kzJW6A 4sJpAoIyH1gL3t9oIYTe8J/CPZ8VjD0XoL3VnhS2RCia3ZCYMIsMr6QOTbp8NNkr UXihz3fwK/lHZ0i9S2h2cIAkI/SlTdc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:02 2025 by rpki-client