$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4684260e-0e34-37e1-a578-384b2cf8a4ba.roa File: 4684260e-0e34-37e1-a578-384b2cf8a4ba.roa (raw, json) Hash identifier: 7LVirFtyCyCY2kFSp9GLvlNwUeG+ovL/JKfVLNXscP4= Subject key identifier: E9:02:7F:BB:6E:7B:67:B3:5D:90:2C:10:23:AB:91:DE:21:E3:FB:31 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D651351C7939F7E37F8280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4684260e-0e34-37e1-a578-384b2cf8a4ba.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:51:35:1c:79:39:f7:e3:7f:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=f1bec8c2-a7d6-4b87-be2e-cc56021e2598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:0f:bd:97:8b:f7:66:c3:b0:00:29:33:02: 3b:e5:07:10:60:d8:8b:14:70:29:1b:d9:d0:18:21: a2:bd:13:a4:45:2d:2e:bd:9f:5b:2e:14:4d:65:4e: 59:0e:5c:e8:24:40:4d:cc:5c:7f:00:ce:9e:4e:b9: 2f:70:ac:8f:5d:8b:ed:3d:35:a9:bc:fc:e7:5e:8b: 67:2c:66:5e:4c:65:33:3c:ce:2a:d6:7f:f0:f3:07: 8b:c2:aa:95:73:6a:62:6d:80:a7:62:da:2b:fa:c1: 68:c0:06:12:b6:ff:25:18:4d:b0:61:44:8e:89:b8: 30:8f:84:59:a6:7d:bd:18:a9:97:9f:29:e5:ff:44: e4:6b:21:a9:0b:18:0a:b0:ce:df:6b:2a:4b:e7:87: d6:8f:69:a6:a2:6d:8a:0e:02:8e:a5:21:02:1e:9d: 45:2b:2b:1a:4c:39:2b:77:5f:61:06:e3:2e:e7:42: ed:5c:86:9c:d0:3b:9c:71:8c:01:bc:33:34:41:b7: 44:49:af:ae:af:ab:02:25:99:cd:3e:89:93:ee:da: a3:72:cb:af:40:da:a7:ca:ef:73:00:1f:5f:58:65: 57:9d:62:70:71:a5:53:dc:42:72:24:7a:a6:87:ef: 6d:2c:5f:a8:f2:15:22:87:99:c2:2d:8e:95:7f:89: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:02:7F:BB:6E:7B:67:B3:5D:90:2C:10:23:AB:91:DE:21:E3:FB:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4684260e-0e34-37e1-a578-384b2cf8a4ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:41:32:30:26:e3:4b:f0:07:80:d4:c8:8c:f3:f8:b2:3f:ef: 9f:12:70:44:a3:f3:7d:af:cc:3c:43:35:10:74:c0:18:4f:52: 9e:0c:4a:a2:62:ac:f2:f7:ce:4d:c4:f2:d4:b1:b5:27:06:ad: 34:92:94:03:eb:a0:1d:ac:2f:f6:0c:71:d4:7c:5e:73:fd:28: a6:fe:8d:eb:cd:09:31:b7:e6:d5:dc:10:fa:0b:a7:2e:81:9c: ab:e5:4b:ad:ff:ee:ca:cd:9e:0c:f3:32:51:fe:75:ce:7e:3f: a7:7f:72:c0:6d:cd:03:81:e1:6b:5b:3a:ca:cb:e8:5c:39:bd: a5:b2:e2:b7:25:3d:a4:33:f2:dd:98:bf:8a:62:bb:4e:a0:a8: e4:33:a3:52:c1:26:a5:df:ff:4a:50:38:19:89:48:d8:a8:3c: f1:3c:bd:36:f8:9c:79:0b:e5:06:c5:88:20:fc:43:b9:71:e9: 18:0f:37:80:10:86:ef:cf:36:86:fa:20:04:e8:7b:6b:61:31: 1b:24:52:54:7b:f5:75:11:23:03:7e:ee:d7:70:fd:85:c7:4e: f6:a3:3a:96:a9:1a:7f:71:7f:d2:d6:1b:0a:15:46:90:21:34: 18:73:6a:a5:8b:2c:e0:c6:77:d3:41:e1:35:3c:3a:e1:5e:e4: 30:a5:15:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lE1HHk59+N/goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZjFiZWM4YzItYTdkNi00Yjg3LWJlMmUtY2M1NjAyMWUyNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQkPvZeL92bDsAApMwI75QcQYNiLFHApG9nQ GCGivROkRS0uvZ9bLhRNZU5ZDlzoJEBNzFx/AM6eTrkvcKyPXYvtPTWpvPznXotn LGZeTGUzPM4q1n/w8weLwqqVc2pibYCnYtor+sFowAYStv8lGE2wYUSOibgwj4RZ pn29GKmXnynl/0TkayGpCxgKsM7faypL54fWj2mmom2KDgKOpSECHp1FKysaTDkr d19hBuMu50LtXIac0DuccYwBvDM0QbdESa+ur6sCJZnNPomT7tqjcsuvQNqnyu9z AB9fWGVXnWJwcaVT3EJyJHqmh+9tLF+o8hUih5nCLY6Vf4ll9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkCf7tue2ezXZAsECOrkd4h4/sxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDY4NDI2MGUtMGUzNC0z N2UxLWE1NzgtMzg0YjJjZjhhNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdBMjAm40vwB4DUyIzz+LI/758ScESj832vzDxDNRB0wBhPUp4MSqJi rPL3zk3E8tSxtScGrTSSlAProB2sL/YMcdR8XnP9KKb+jevNCTG35tXcEPoLpy6B nKvlS63/7srNngzzMlH+dc5+P6d/csBtzQOB4WtbOsrL6Fw5vaWy4rclPaQz8t2Y v4piu06gqOQzo1LBJqXf/0pQOBmJSNioPPE8vTb4nHkL5QbFiCD8Q7lx6RgPN4AQ hu/PNob6IAToe2thMRskUlR79XURIwN+7tdw/YXHTvajOpapGn9xf9LWGwoVRpAh NBhzaqWLLODGd9NB4TU8OuFe5DClFU0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:10:32 2025 by rpki-client