$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5821854a-b87c-3ce0-91e0-20156ceb09ee.roa File: 5821854a-b87c-3ce0-91e0-20156ceb09ee.roa (raw, json) Hash identifier: Zk8L4CXDE5o2VoOCZt/LzQJC+TfpAGhc7sNKlZzHc3o= Subject key identifier: B9:68:E0:57:09:50:01:49:0A:86:0D:FE:EE:5F:AB:4C:6E:A5:9D:17 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64FD545D0E76EB47B2FC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5821854a-b87c-3ce0-91e0-20156ceb09ee.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4f:d5:45:d0:e7:6e:b4:7b:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=24cac8a5-8cda-49d1-9430-75cc5bbece31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:33:52:03:7b:d8:ae:18:4e:a6:f0:ea:cd: 5b:ca:a1:6c:cb:be:1e:ca:c7:89:72:52:cf:1e:a3: 31:40:f5:a9:f0:ed:6b:4c:1b:28:62:22:74:b8:28: 42:f3:df:4e:56:09:a5:c9:c4:5e:de:2c:a0:5e:1c: 6a:95:e3:fb:dc:11:6e:36:4a:28:55:c6:32:8f:b2: f1:e2:58:55:ca:b9:ac:2c:db:3e:34:0b:3e:e1:f1: 5a:cb:61:ff:51:d1:b5:de:92:8b:fd:e7:e4:54:4f: 9c:ba:56:e5:b3:16:ba:ad:88:67:8f:34:5b:4c:98: f0:9d:b8:44:f1:ab:88:05:95:d0:b9:23:8b:53:dc: 07:8f:1c:75:6d:ee:91:e4:e6:aa:bd:48:8d:c8:f9: 7a:76:f9:ff:f3:1b:91:ac:90:88:5b:a7:cd:48:ea: 5c:31:da:d0:da:8e:e9:a5:55:41:cc:cd:48:e7:63: 0e:3f:ea:c5:20:71:ec:f2:30:fb:1c:35:9e:be:3b: 90:c4:62:90:51:03:18:c6:2a:21:2c:a1:07:74:8b: 04:f6:51:6e:e1:42:bd:90:09:dd:6e:93:bf:7a:c8: 02:ca:49:2c:06:61:73:a6:3a:26:84:da:2a:98:21: e0:ed:5b:83:6a:c9:a8:8e:84:88:53:46:cc:52:bc: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:68:E0:57:09:50:01:49:0A:86:0D:FE:EE:5F:AB:4C:6E:A5:9D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5821854a-b87c-3ce0-91e0-20156ceb09ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e4:00:ac:67:7b:fb:70:05:66:48:58:08:e7:ef:16:1c:69: f8:80:48:b8:e6:5d:55:20:d8:1b:bf:ef:c9:b6:81:75:af:3b: 61:88:99:13:a0:0c:61:04:4a:cb:6b:18:2a:f5:75:d7:d8:02: 5d:69:67:a0:aa:9a:cc:7c:b1:0b:cd:99:46:4d:cd:e6:3a:62: 63:53:5c:19:e5:84:65:7e:f8:74:2a:2d:37:2d:98:db:1a:3a: c6:52:1a:71:91:49:5e:ca:73:f1:8a:e3:b1:a6:0e:68:02:22: 23:67:c0:1c:c4:f0:6b:fa:2c:af:79:e7:76:d6:a8:9a:33:cd: e6:f1:b8:b7:69:f3:15:1c:9d:c4:8e:76:33:a9:aa:42:a6:a3: 96:15:de:3f:c1:29:46:c6:67:93:9e:b8:55:45:cd:a3:db:0e: 5e:c2:fd:72:9e:4b:a4:40:99:7c:a3:b3:3a:35:43:d9:8c:06: 56:6d:f9:74:60:18:de:c2:26:cd:fb:c6:92:23:78:72:96:67: 12:23:6f:6e:f3:b2:e6:1b:f8:30:5a:82:dd:5e:ba:c5:84:6d: b6:6f:66:99:ce:d0:19:64:50:4b:0b:90:d0:65:23:65:b6:4b: 5d:73:68:1e:54:37:74:5c:11:ad:e3:85:20:bb:0f:e6:03:ae: 37:c4:89:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1k/VRdDnbrR7L8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MjRjYWM4YTUtOGNkYS00OWQxLTk0MzAtNzVjYzViYmVjZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2czUgN72K4YTqbw6s1byqFsy74eyseJclLP HqMxQPWp8O1rTBsoYiJ0uChC899OVgmlycRe3iygXhxqleP73BFuNkooVcYyj7Lx 4lhVyrmsLNs+NAs+4fFay2H/UdG13pKL/efkVE+culblsxa6rYhnjzRbTJjwnbhE 8auIBZXQuSOLU9wHjxx1be6R5OaqvUiNyPl6dvn/8xuRrJCIW6fNSOpcMdrQ2o7p pVVBzM1I52MOP+rFIHHs8jD7HDWevjuQxGKQUQMYxiohLKEHdIsE9lFu4UK9kAnd bpO/esgCykksBmFzpjomhNoqmCHg7VuDasmojoSIU0bMUrzXWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlo4FcJUAFJCoYN/u5fq0xupZ0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTgyMTg1NGEtYjg3Yy0z Y2UwLTkxZTAtMjAxNTZjZWIwOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHkAKxne/twBWZIWAjn7xYcafiASLjmXVUg2Bu/78m2gXWvO2GImROg DGEESstrGCr1ddfYAl1pZ6Cqmsx8sQvNmUZNzeY6YmNTXBnlhGV++HQqLTctmNsa OsZSGnGRSV7Kc/GK47GmDmgCIiNnwBzE8Gv6LK9553bWqJozzebxuLdp8xUcncSO djOpqkKmo5YV3j/BKUbGZ5OeuFVFzaPbDl7C/XKeS6RAmXyjszo1Q9mMBlZt+XRg GN7CJs37xpIjeHKWZxIjb27zsuYb+DBagt1eusWEbbZvZpnO0BlkUEsLkNBlI2W2 S11zaB5UN3RcEa3jhSC7D+YDrjfEidg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:10 2025 by rpki-client