$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa File: 4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa (raw, json) Hash identifier: JRfxbh+Tc6qFbbAs1JP3b9KlsHM0yF0E/FJokLFGgSI= Subject key identifier: F3:71:DB:BB:F2:16:F3:28:84:9B:79:3C:65:F9:36:DD:F0:CC:BD:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8765E9089324DC954249800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.70.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:5e:90:89:32:4d:c9:54:24:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=a684ed27-737e-4176-a541-57e039f13f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2c:99:02:a1:88:81:a9:86:4a:30:19:0f:52: 8b:e7:2e:0c:0e:fe:37:9b:cc:23:b0:a5:fc:1f:22: 52:11:e9:6f:0d:9d:7c:4f:d4:92:b8:d7:c9:f6:db: 07:45:ae:49:0a:9f:04:1f:54:ad:32:47:79:f8:7c: 2e:55:5a:5a:83:be:22:4a:98:99:05:4a:fd:29:c2: 5b:33:c6:6f:2e:1b:95:7b:24:06:90:92:cb:6d:d0: 29:ba:ef:5a:b7:f6:cd:ca:b3:2a:7b:b7:87:8f:b1: 93:f1:01:5a:6b:d0:6a:cd:e6:37:a4:4e:5a:d2:23: 6c:2c:29:e0:3f:d1:a9:ff:83:64:95:84:54:de:81: 68:79:f8:51:31:8e:80:b6:60:0d:80:4c:96:13:ce: 6a:21:29:83:52:48:a5:4a:42:ba:e1:90:b9:55:60: e9:52:89:43:41:56:f3:5f:2f:7e:56:31:9e:64:0c: 5f:34:21:bb:b0:57:79:a3:18:ed:ee:b2:a9:64:3a: 54:bc:3b:c6:88:07:49:3f:8a:4f:97:2f:5d:6a:f1: 88:ce:1c:eb:62:26:89:7f:ea:a8:8c:cc:d9:b4:54: e8:75:3b:c0:b8:9a:20:1e:b1:e5:ca:e1:0a:07:3a: be:ab:65:a2:ff:ec:e0:e9:a8:19:90:9e:2e:db:f2: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:71:DB:BB:F2:16:F3:28:84:9B:79:3C:65:F9:36:DD:F0:CC:BD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9e:8f:67:6c:40:38:c6:ac:b5:88:c1:40:c9:85:33:4a:04: 95:f3:21:f7:c0:f1:e1:4d:5f:f4:e5:5c:3b:79:67:7c:1b:e5: 6a:80:68:7d:73:25:c5:11:c1:7e:50:69:2d:92:5b:49:73:6a: 99:9c:f9:42:d4:13:0a:25:77:f9:5f:4a:9a:62:55:c3:48:9e: f8:7d:6a:99:b2:28:21:ec:6a:be:2d:d9:ed:71:d4:6b:a0:8d: b7:43:9c:6f:19:80:19:4c:1f:25:a8:5c:3c:5e:01:bd:ef:67: 2f:24:cc:fe:0f:8c:d9:57:ca:5a:b2:dc:40:46:89:fe:fe:47: a6:33:40:d5:94:a1:d7:32:17:2e:29:6d:8b:c5:37:c2:ec:e6: b3:1f:6a:55:70:dc:fa:36:3d:b0:2f:22:a6:b6:87:3b:e7:fd: 71:5a:91:5a:78:ed:4d:8a:27:d2:5e:85:a1:3d:0b:2d:c7:39: 86:e6:9d:1f:20:6e:3e:30:08:82:6e:e3:3b:29:14:21:e5:c4: a7:b3:d3:d5:59:91:32:4f:e0:77:4d:17:a5:7a:39:b7:6d:8b: 87:03:8e:d6:b3:99:be:e5:d1:2e:67:ce:01:c7:0a:8a:27:ec: e0:2e:4e:75:b0:38:44:56:75:73:ae:24:69:aa:fa:45:21:b5: 0d:1f:73:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdl6QiTJNyVQkmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTY4NGVkMjctNzM3ZS00MTc2LWE1NDEtNTdlMDM5ZjEzZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CyZAqGIgamGSjAZD1KL5y4MDv43m8wjsKX8 HyJSEelvDZ18T9SSuNfJ9tsHRa5JCp8EH1StMkd5+HwuVVpag74iSpiZBUr9KcJb M8ZvLhuVeyQGkJLLbdApuu9at/bNyrMqe7eHj7GT8QFaa9BqzeY3pE5a0iNsLCng P9Gp/4NklYRU3oFoefhRMY6AtmANgEyWE85qISmDUkilSkK64ZC5VWDpUolDQVbz Xy9+VjGeZAxfNCG7sFd5oxjt7rKpZDpUvDvGiAdJP4pPly9davGIzhzrYiaJf+qo jMzZtFTodTvAuJogHrHlyuEKBzq+q2Wi/+zg6agZkJ4u2/JGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNx27vyFvMohJt5PGX5Nt3wzL0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGYwYWFmNjctYWU4ZC0z MzVjLWEwYTUtZjAzODBhMjAxYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKej2dsQDjGrLWIwUDJhTNKBJXzIffA8eFNX/TlXDt5Z3wb5WqAaH1z JcURwX5QaS2SW0lzapmc+ULUEwold/lfSppiVcNInvh9apmyKCHsar4t2e1x1Gug jbdDnG8ZgBlMHyWoXDxeAb3vZy8kzP4PjNlXylqy3EBGif7+R6YzQNWUodcyFy4p bYvFN8Ls5rMfalVw3Po2PbAvIqa2hzvn/XFakVp47U2KJ9JehaE9Cy3HOYbmnR8g bj4wCIJu4zspFCHlxKez09VZkTJP4HdNF6V6Obdti4cDjtazmb7l0S5nzgHHCoon 7OAuTnWwOERWdXOuJGmq+kUhtQ0fcw8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:55 2025 by rpki-client