$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5218f7fa-2ee3-3f67-9829-e67d3101775c.roa File: 5218f7fa-2ee3-3f67-9829-e67d3101775c.roa (raw, json) Hash identifier: fpKTmMRQRO8o4MIvY30DNwA0UPnbg5zUTIqpjhPXxDQ= Subject key identifier: 12:ED:AB:02:04:FE:03:54:83:C6:02:5C:3A:85:0B:BE:42:B3:80:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC8765F0ED02782EDF3601084 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5218f7fa-2ee3-3f67-9829-e67d3101775c.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.71.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:5f:0e:d0:27:82:ed:f3:60:10:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=f063597f-0d76-4ae0-8a6a-795697ab880d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:f9:57:58:7e:dd:e2:d3:cf:93:03:bd:ec: 7f:20:f5:77:dd:bf:94:b6:9a:b4:4b:7f:5f:24:7b: a8:28:4a:94:f0:6d:03:7a:f5:54:05:1c:2a:a9:c7: 65:35:b3:1d:7b:09:a2:43:c9:f1:86:4d:76:3c:8f: ac:f1:25:87:96:89:59:64:fd:8a:7d:06:47:43:83: 3a:46:58:63:45:b4:22:55:4e:40:b4:00:22:a4:46: d5:f8:8e:b3:4e:30:12:0b:bd:2c:34:4b:38:a6:de: 96:55:0e:ef:d5:27:a2:0a:04:63:b3:f6:dc:80:b4: d9:ba:6a:e0:ae:56:7a:61:7f:d3:7a:12:28:a7:fd: 96:ad:c5:10:e8:25:a7:0d:96:9e:e6:01:0f:07:e5: e8:f5:31:84:d7:07:22:e3:d5:f5:c1:b2:ef:81:6d: d2:57:1e:80:d7:b9:06:ea:9b:d9:d5:51:e8:3d:45: 28:7e:41:33:a0:91:82:a0:fb:28:85:df:37:ca:5c: 92:3e:87:89:b4:8a:92:ea:a3:78:11:08:69:1b:07: 24:a7:cf:e0:31:c8:c9:3c:f4:0b:2b:61:f1:70:2f: b8:c4:e5:41:74:7b:b3:0b:9a:ac:3e:14:a7:33:35: 25:20:fc:3e:e3:b5:c4:67:3f:22:22:e0:c7:76:f7: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:ED:AB:02:04:FE:03:54:83:C6:02:5C:3A:85:0B:BE:42:B3:80:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5218f7fa-2ee3-3f67-9829-e67d3101775c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:98:83:81:7b:c8:56:a8:ea:f8:90:93:65:e7:e8:8e:65:4c: e4:b6:4d:c9:52:cd:a6:d0:bb:1b:9b:7e:a0:26:59:e2:6a:cd: e6:4c:98:ea:c0:76:08:77:88:60:fd:f8:b2:a3:92:f5:fa:2f: 50:3b:41:98:97:4e:5c:be:05:b0:2d:b7:68:cf:6b:5b:15:43: b3:82:da:58:af:e8:ab:bc:99:a8:11:0f:9a:e5:0f:52:6a:ba: aa:5d:90:c5:a1:bd:fe:b5:f5:ae:01:56:1c:97:19:aa:7c:51: 57:9b:d9:9c:cc:21:c6:bf:f7:e5:74:9d:a9:7a:fe:c7:90:d9: ca:49:af:d7:7a:5d:62:f4:45:da:cf:14:d8:86:92:02:5e:24: 21:f3:af:ed:b1:8b:25:1b:ff:96:3f:48:eb:6f:cc:b6:66:ea: 5b:15:a1:38:81:03:9b:07:2a:65:e5:f1:7b:cd:74:55:74:5c: 6a:bc:ee:41:8d:53:79:14:6d:12:e1:ab:64:2e:16:b2:c4:8b: e7:37:39:51:00:ce:14:a0:c3:c3:78:82:a3:bb:b6:55:8a:af: f4:a4:5d:31:2a:8f:64:e8:41:e5:5f:e5:2a:49:05:24:36:0f: cc:10:a6:7f:d3:7b:93:f5:c7:ea:b7:7d:c2:2e:20:31:9d:18: db:53:53:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdl8O0CeC7fNgEIQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjA2MzU5N2YtMGQ3Ni00YWUwLThhNmEtNzk1Njk3YWI4ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR35V1h+3eLTz5MDvex/IPV33b+Utpq0S39f JHuoKEqU8G0DevVUBRwqqcdlNbMdewmiQ8nxhk12PI+s8SWHlolZZP2KfQZHQ4M6 RlhjRbQiVU5AtAAipEbV+I6zTjASC70sNEs4pt6WVQ7v1SeiCgRjs/bcgLTZumrg rlZ6YX/TehIop/2WrcUQ6CWnDZae5gEPB+Xo9TGE1wci49X1wbLvgW3SVx6A17kG 6pvZ1VHoPUUofkEzoJGCoPsohd83ylySPoeJtIqS6qN4EQhpGwckp8/gMcjJPPQL K2HxcC+4xOVBdHuzC5qsPhSnMzUlIPw+47XEZz8iIuDHdvdZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLtqwIE/gNUg8YCXDqFC75Cs4BmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTIxOGY3ZmEtMmVlMy0z ZjY3LTk4MjktZTY3ZDMxMDE3NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6Yg4F7yFao6viQk2Xn6I5lTOS2TclSzabQuxubfqAmWeJqzeZMmOrA dgh3iGD9+LKjkvX6L1A7QZiXTly+BbAtt2jPa1sVQ7OC2liv6Ku8magRD5rlD1Jq uqpdkMWhvf619a4BVhyXGap8UVeb2ZzMIca/9+V0nal6/seQ2cpJr9d6XWL0RdrP FNiGkgJeJCHzr+2xiyUb/5Y/SOtvzLZm6lsVoTiBA5sHKmXl8XvNdFV0XGq87kGN U3kUbRLhq2QuFrLEi+c3OVEAzhSgw8N4gqO7tlWKr/SkXTEqj2ToQeVf5SpJBSQ2 D8wQpn/Te5P1x+q3fcIuIDGdGNtTU0Q= -----END CERTIFICATE-----Generated at Sat Aug 23 17:33:51 2025 by rpki-client