$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa File: 4702aa40-4077-3e55-a44b-27f1cb8e885d.roa (raw, json) Hash identifier: b926Z+wDqqdskKbPMSBUUh0cBFuE0FTzkSN+lTRHW3w= Subject key identifier: 4E:6B:03:EC:03:91:0F:B1:F8:4F:C6:19:77:45:E3:69:3E:CA:A5:4D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D137FEDF4AEBBA67EE39C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 132892 IP address blocks: 172.70.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:37:fe:df:4a:eb:ba:67:ee:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=f8c243cb-4be4-4d83-aef6-c35b26de5db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:33:c3:a7:57:05:1d:9b:a4:60:bf:c2:b9:da: aa:40:f3:a3:a3:86:e9:1a:18:d7:36:a1:0d:3b:14: 4b:cb:97:ad:33:73:9f:eb:2a:15:70:b8:73:3a:d8: 8b:e0:af:bb:4b:06:8a:1a:3a:4e:5c:67:a5:1e:6c: 2d:62:b8:bb:cc:9f:18:21:bc:72:c2:9d:8b:d6:dc: 55:d1:2a:b5:3d:5b:ec:87:8d:64:28:8c:a5:10:43: 1e:e9:01:00:69:ac:cc:0d:73:33:82:e5:be:5d:2e: 5d:b9:af:30:59:35:6a:ba:83:59:24:fa:66:06:b4: 7e:d7:d7:e7:67:e8:7b:c0:4e:65:f5:91:ff:d8:e4: b3:e9:26:44:37:de:74:ae:a5:e0:77:f7:72:83:35: 64:b7:58:aa:39:8a:34:ea:2f:07:0f:6c:2f:4c:f1: 31:78:a2:fc:91:2c:e5:33:c0:67:5c:ef:76:d2:84: 1b:28:79:c7:af:d9:2d:63:8b:b8:93:c1:17:99:b1: 04:83:a9:e2:89:e9:e1:a7:a8:90:a5:92:cf:31:87: 86:66:1b:b1:76:53:ce:6a:52:2a:43:d6:84:36:7b: 02:ad:2e:a6:48:e5:03:4d:d2:f0:d4:51:3e:5e:54: 72:6d:84:60:2a:35:ab:2a:49:ff:f3:69:84:f2:fe: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6B:03:EC:03:91:0F:B1:F8:4F:C6:19:77:45:E3:69:3E:CA:A5:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:06:78:61:88:e4:8d:db:3d:53:80:68:37:dc:10:63:e1:18: 54:eb:87:e9:11:87:41:fe:5c:40:27:d7:81:98:e8:32:cd:78: 3c:a4:27:bc:91:9f:23:6a:f3:c3:10:a9:87:93:d1:2a:d9:96: 25:82:9a:22:bc:aa:95:40:a1:9e:fc:1b:92:f5:48:d9:54:06: 11:5c:47:c0:a0:f4:ee:a0:48:b5:86:ea:6f:94:11:48:9d:2e: 98:7e:d2:e5:d7:2d:95:be:0e:6c:f1:27:e7:72:4b:db:f1:c2: 30:2f:ee:7e:63:ca:4b:37:0f:6a:d5:cd:4c:b9:88:f0:7d:c7: cb:02:3e:10:30:ae:7c:50:d8:a9:56:08:cd:96:21:22:c2:ec: 23:36:b1:6e:7a:1f:e6:22:33:fa:e6:9c:87:c0:cf:12:ac:dd: a5:de:3f:41:e7:36:48:fa:89:fe:9f:55:82:db:c3:70:af:ae: 48:81:95:55:df:4c:b6:aa:3c:2c:a9:e2:9c:a5:2a:c0:7b:44: dc:ef:31:74:b4:bc:10:3b:95:94:c3:60:28:b3:62:22:af:e5: 54:6b:df:83:33:7c:d6:60:ba:4c:e3:86:7c:59:2e:b4:6a:3a: 22:dd:b9:d0:7b:52:03:7f:4b:bc:ae:e8:ec:9c:05:89:80:67: f8:a2:45:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0Tf+30rrumfuOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZjhjMjQzY2ItNGJlNC00ZDgzLWFlZjYtYzM1YjI2ZGU1ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DPDp1cFHZukYL/CudqqQPOjo4bpGhjXNqEN OxRLy5etM3Of6yoVcLhzOtiL4K+7SwaKGjpOXGelHmwtYri7zJ8YIbxywp2L1txV 0Sq1PVvsh41kKIylEEMe6QEAaazMDXMzguW+XS5dua8wWTVquoNZJPpmBrR+19fn Z+h7wE5l9ZH/2OSz6SZEN950rqXgd/dygzVkt1iqOYo06i8HD2wvTPExeKL8kSzl M8BnXO920oQbKHnHr9ktY4u4k8EXmbEEg6niienhp6iQpZLPMYeGZhuxdlPOalIq Q9aENnsCrS6mSOUDTdLw1FE+XlRybYRgKjWrKkn/82mE8v4ZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5rA+wDkQ+x+E/GGXdF42k+yqVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDcwMmFhNDAtNDA3Ny0z ZTU1LWE0NGItMjdmMWNiOGU4ODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrEZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIGeGGI5I3bPVOAaDfcEGPhGFTrh+kRh0H+XEAn14GY6DLNeDykJ7yR nyNq88MQqYeT0SrZliWCmiK8qpVAoZ78G5L1SNlUBhFcR8Cg9O6gSLWG6m+UEUid Lph+0uXXLZW+DmzxJ+dyS9vxwjAv7n5jyks3D2rVzUy5iPB9x8sCPhAwrnxQ2KlW CM2WISLC7CM2sW56H+YiM/rmnIfAzxKs3aXeP0HnNkj6if6fVYLbw3CvrkiBlVXf TLaqPCyp4pylKsB7RNzvMXS0vBA7lZTDYCizYiKv5VRr34MzfNZgukzjhnxZLrRq OiLdudB7UgN/S7yu6OycBYmAZ/iiRfw= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:15 2025 by rpki-client