$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa File: 5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa (raw, json) Hash identifier: +U6HhQZc91p2N6QwU/xQuljXg7vi9CUscHO36wy4+qo= Subject key identifier: 05:E0:5A:93:2B:DB:5D:7E:5E:D2:B2:D4:E0:D1:6A:06:62:34:B1:D7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D650B5B02B4A14A7B72048 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:50:b5:b0:2b:4a:14:a7:b7:20:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=7d1adfd2-9bb5-4ebd-a9d1-bdbaad48f701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:77:4b:b2:63:b9:ff:da:d6:8a:15:69:c5: 3a:53:87:e4:bc:25:db:22:88:63:ec:db:0f:3b:64: 22:ac:a5:f9:3e:73:36:ea:c2:d9:c2:85:b6:c3:b8: f9:7f:c5:0f:bf:a8:25:4c:b5:26:d2:06:8d:b0:a2: 2f:a1:0d:1b:3a:45:09:f2:f7:0d:92:95:f0:60:1b: 63:4f:92:f0:a6:0c:27:72:d0:d9:65:6c:d7:82:88: a1:b4:9e:cd:45:ff:90:00:d9:22:a8:52:bd:22:2f: fa:a2:5c:56:eb:3a:19:fa:bf:be:80:5b:e2:17:0d: 2f:bc:7a:6a:79:69:a9:08:2b:cf:5f:de:fd:38:2b: e4:3f:1a:6c:8f:a5:c3:38:11:bd:96:9b:de:a1:19: 79:3a:cf:7f:87:d4:1c:23:3c:c4:e7:8f:a6:a8:8c: 5d:c5:d4:eb:cd:be:a1:ec:0e:48:34:45:d1:a8:e6: 98:3c:40:b4:9a:60:4d:04:fa:be:17:81:87:be:5b: 36:b6:49:f6:e1:1f:5e:98:96:e7:aa:11:26:4a:93: 9b:25:15:0b:b9:0a:d2:d2:26:f2:93:d5:d8:1c:32: a3:3b:23:49:18:a1:63:65:67:cb:f3:2a:84:76:0f: 83:09:59:00:97:16:12:04:a0:6a:7f:98:33:53:4b: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E0:5A:93:2B:DB:5D:7E:5E:D2:B2:D4:E0:D1:6A:06:62:34:B1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:64:1f:b1:ab:e0:6d:e2:fd:3e:22:db:42:9a:83:33:24:96: 41:7c:fc:a9:12:1d:6f:c3:19:ce:9b:fb:38:22:5b:28:20:1d: d2:b4:60:89:ac:14:db:04:28:43:a6:c7:4d:34:ed:2f:c2:c3: 72:f0:2e:54:36:44:5a:58:51:74:cb:da:d9:93:fe:f1:97:42: 87:29:07:f0:f6:84:c9:f7:51:ff:f5:0c:64:1b:06:47:26:0d: 8a:3b:c0:8f:f4:c6:9b:2a:a7:10:95:3d:8e:62:d5:59:61:6a: 06:82:81:d4:4b:f7:51:24:22:00:6b:ec:1e:73:46:54:07:48: e8:71:81:64:3a:1a:64:10:50:fe:fa:43:b4:c9:84:85:69:30: 9d:e1:78:25:ae:46:fd:dd:3c:e2:2f:95:a2:87:4e:2d:5f:58: 2f:86:0f:5f:3a:64:8c:67:e1:4f:eb:ec:a4:b9:5a:a3:70:df: 3a:5e:49:66:27:d6:29:35:e7:c7:cb:03:54:08:e8:1b:6c:22: 04:ae:34:20:b9:87:05:94:48:68:c8:4f:5c:90:54:55:99:0b: 3c:77:ef:3d:2d:bd:7b:6f:28:88:0d:9e:61:8a:12:2a:9f:05: ac:f0:1c:d8:59:60:95:94:0f:d6:07:a6:84:1a:24:ab:11:e3: 8e:ed:d2:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lC1sCtKFKe3IEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk N2QxYWRmZDItOWJiNS00ZWJkLWE5ZDEtYmRiYWFkNDhmNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUV3S7Jjuf/a1ooVacU6U4fkvCXbIohj7NsP O2QirKX5PnM26sLZwoW2w7j5f8UPv6glTLUm0gaNsKIvoQ0bOkUJ8vcNkpXwYBtj T5LwpgwnctDZZWzXgoihtJ7NRf+QANkiqFK9Ii/6olxW6zoZ+r++gFviFw0vvHpq eWmpCCvPX979OCvkPxpsj6XDOBG9lpveoRl5Os9/h9QcIzzE54+mqIxdxdTrzb6h 7A5INEXRqOaYPEC0mmBNBPq+F4GHvls2tkn24R9emJbnqhEmSpObJRULuQrS0iby k9XYHDKjOyNJGKFjZWfL8yqEdg+DCVkAlxYSBKBqf5gzU0uO7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXgWpMr211+XtKy1ODRagZiNLHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWE5MzEyNjgtNDJhMi0z N2RlLTgzZjItN2MyNGJjNGVhYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEebMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRkH7Gr4G3i/T4i20KagzMklkF8/KkSHW/DGc6b+zgiWyggHdK0YIms FNsEKEOmx0007S/Cw3LwLlQ2RFpYUXTL2tmT/vGXQocpB/D2hMn3Uf/1DGQbBkcm DYo7wI/0xpsqpxCVPY5i1VlhagaCgdRL91EkIgBr7B5zRlQHSOhxgWQ6GmQQUP76 Q7TJhIVpMJ3heCWuRv3dPOIvlaKHTi1fWC+GD186ZIxn4U/r7KS5WqNw3zpeSWYn 1ik158fLA1QI6BtsIgSuNCC5hwWUSGjIT1yQVFWZCzx37z0tvXtvKIgNnmGKEiqf BazwHNhZYJWUD9YHpoQaJKsR447t0oQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:34 2025 by rpki-client