$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa File: 49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa (raw, json) Hash identifier: vU6glxnYHkkknT62zPfYsUGZhCJLtNKyez8u+3M5piw= Subject key identifier: 5D:FE:71:05:D3:94:B5:10:B7:18:BF:AE:D2:B2:FC:76:01:0E:86:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65C8B8121FF8F263D7040 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5c:8b:81:21:ff:8f:26:3d:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=5230719c-0913-4a80-ae60-ff9b2d34abad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:61:b7:e7:53:46:b2:be:2f:7a:82:36:25: c1:76:04:b8:53:49:c4:15:6e:f4:3d:f3:11:a7:cd: 7f:5a:68:50:50:dc:72:a5:8a:ee:d8:82:dc:7b:e2: 1c:28:9e:aa:d5:b8:6c:9c:59:30:3b:a8:82:cc:79: 7b:0d:48:f0:c3:a0:b1:8a:20:e3:82:62:fb:cd:09: 25:80:c8:96:fb:e2:0e:60:49:33:b1:b2:20:22:c1: 24:53:15:dd:00:7a:2f:2b:1d:c5:12:1f:3d:2d:2c: 19:f2:09:49:f9:62:8f:fe:5d:1c:98:18:d3:5d:b8: c7:93:05:03:2c:a0:fa:62:2e:3d:6e:91:f4:10:dc: c3:3c:b8:d0:3c:93:02:98:a0:0d:a4:73:65:7b:28: 49:f5:50:ea:84:e1:cb:0d:af:31:f5:7e:3e:9e:0c: 22:2a:37:bb:69:4a:51:44:0c:f4:80:de:1a:7e:45: 07:4a:f0:b1:a7:24:d5:0f:df:7b:2a:00:7d:86:09: 23:ea:4f:45:a3:ec:2d:23:4c:5a:66:11:f9:d3:f1: c0:e5:2e:88:01:e1:e9:70:42:91:1a:06:06:2b:0d: 86:ba:fc:e9:6a:0b:35:9a:37:9d:03:ce:61:5f:30: b7:9b:58:5d:fa:5a:4c:2f:76:0d:23:52:ab:19:97: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FE:71:05:D3:94:B5:10:B7:18:BF:AE:D2:B2:FC:76:01:0E:86:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49b2bb17-952b-3ff6-92fb-d9195fa2b66e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:ea:f0:0d:68:61:aa:ab:38:3a:1e:4f:7a:95:32:a8:d2:8b: 07:5e:a7:b4:8e:9f:60:48:7a:0c:cc:cb:fe:10:47:f6:8f:fe: a2:c1:d2:c4:4c:a5:cc:61:29:85:ce:57:80:1f:63:b5:ec:02: 55:d5:b5:dc:d5:61:3a:70:62:d7:75:f7:42:1a:7f:19:7a:23: 4f:63:f1:a5:c3:a9:31:f1:0d:3d:92:3a:0e:ec:62:38:b5:77: 9b:c3:2c:26:ab:aa:f1:7f:94:5e:1a:a7:e8:85:46:a4:55:80: 5c:c9:d5:38:2f:89:ce:27:ee:fd:a7:45:0b:fc:32:d1:77:51: 63:b8:a0:c2:11:a5:e0:65:66:df:03:85:80:b2:60:fd:c0:2e: 3d:43:62:c5:46:57:a0:23:15:b0:f4:6f:15:4d:9b:b3:29:f5: 02:fd:8c:53:c3:74:39:a0:a4:84:1d:01:04:02:ad:d1:36:56: 19:70:b2:b5:8a:d9:83:e1:82:7c:c3:1c:fc:1a:35:39:8e:e9: 4e:1c:2e:6c:bd:38:dd:68:78:25:11:ab:4b:81:ac:80:ec:6f: f8:b9:85:cf:21:56:08:00:33:17:a2:f9:43:65:dd:70:8b:a5: 50:b6:21:fd:cd:6c:13:b7:f0:9a:1c:c3:1f:d2:21:77:5f:ce: 1d:3d:c2:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lyLgSH/jyY9cEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NTIzMDcxOWMtMDkxMy00YTgwLWFlNjAtZmY5YjJkMzRhYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumBht+dTRrK+L3qCNiXBdgS4U0nEFW70PfMR p81/WmhQUNxypYru2ILce+IcKJ6q1bhsnFkwO6iCzHl7DUjww6CxiiDjgmL7zQkl gMiW++IOYEkzsbIgIsEkUxXdAHovKx3FEh89LSwZ8glJ+WKP/l0cmBjTXbjHkwUD LKD6Yi49bpH0ENzDPLjQPJMCmKANpHNleyhJ9VDqhOHLDa8x9X4+ngwiKje7aUpR RAz0gN4afkUHSvCxpyTVD997KgB9hgkj6k9Fo+wtI0xaZhH50/HA5S6IAeHpcEKR GgYGKw2Guvzpags1mjedA85hXzC3m1hd+lpML3YNI1KrGZf42wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3+cQXTlLUQtxi/rtKy/HYBDobjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDliMmJiMTctOTUyYi0z ZmY2LTkyZmItZDkxOTVmYTJiNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPq8A1oYaqrODoeT3qVMqjSiwdep7SOn2BIegzMy/4QR/aP/qLB0sRM pcxhKYXOV4AfY7XsAlXVtdzVYTpwYtd190Iafxl6I09j8aXDqTHxDT2SOg7sYji1 d5vDLCarqvF/lF4ap+iFRqRVgFzJ1Tgvic4n7v2nRQv8MtF3UWO4oMIRpeBlZt8D hYCyYP3ALj1DYsVGV6AjFbD0bxVNm7Mp9QL9jFPDdDmgpIQdAQQCrdE2VhlwsrWK 2YPhgnzDHPwaNTmO6U4cLmy9ON1oeCURq0uBrIDsb/i5hc8hVggAMxei+UNl3XCL pVC2If3NbBO38Jocwx/SIXdfzh09wrw= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:25 2025 by rpki-client