$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a95a405-f2a3-3033-b746-b09b7eb542d4.roa File: 5a95a405-f2a3-3033-b746-b09b7eb542d4.roa (raw, json) Hash identifier: kKN/wsiqGNq7WgM4tIkDWD1Hbqb7q4Ufp7CJGeEYrk8= Subject key identifier: 81:5E:98:72:B8:F2:EB:49:83:CE:E3:1A:59:B2:B1:59:04:D1:D1:BD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABAE9EB4E31F1B3FC1D080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a95a405-f2a3-3033-b746-b09b7eb542d4.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.71.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:ae:9e:b4:e3:1f:1b:3f:c1:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=ec4988a7-a50a-44d2-899d-47ed9c2190cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:d6:73:42:8c:7a:fb:6f:1e:d8:b9:97:1e: c1:da:76:5d:0e:14:f2:ff:62:7c:58:59:02:df:79: 02:ba:9d:02:f3:73:e2:7d:8a:92:71:89:94:2a:aa: d7:fb:45:88:c1:66:d2:72:a6:1e:ee:92:6d:0c:31: e6:93:aa:e6:b4:31:12:3d:a4:7f:79:21:ce:65:74: ed:0a:a2:ea:ae:f4:c2:c5:fb:b2:6c:f3:98:24:66: df:e1:c5:60:ff:e2:01:d7:21:81:30:99:c5:23:e0: 3f:e4:60:af:10:87:59:28:b8:02:11:d8:12:62:c7: dd:d1:02:c7:01:2e:ac:83:20:f5:2b:2b:93:54:9c: b8:59:f3:57:aa:06:8f:e7:34:cc:52:3d:f4:e3:01: cd:4e:0d:50:a8:8f:bd:c1:51:a0:09:93:22:e6:80: ad:ff:52:df:14:7e:99:62:b0:ba:83:25:e3:7c:69: 72:39:8f:d8:80:93:46:af:fc:a2:da:44:18:a4:a0: 3b:8c:35:5a:75:33:e5:dd:88:d4:eb:3b:a4:ec:58: dd:0f:5e:93:98:26:9e:d7:b5:a1:df:c4:e7:ab:2e: 2a:3b:d9:2c:a1:37:2c:d1:2c:58:bc:5a:5c:a8:81: 48:91:91:5e:46:02:d9:db:ab:04:ec:04:da:b8:15: 32:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5E:98:72:B8:F2:EB:49:83:CE:E3:1A:59:B2:B1:59:04:D1:D1:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a95a405-f2a3-3033-b746-b09b7eb542d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ee:07:09:f4:ab:09:f3:af:32:d2:a8:02:b8:b9:2a:8f:24: 48:cb:d6:8c:5a:aa:b2:ec:e3:e5:ec:07:05:1c:35:fd:64:f7: 5c:a9:bc:ef:a9:53:a8:d6:9d:d7:14:f4:ff:ae:e1:d0:77:15: 19:31:72:23:c2:af:96:04:a9:1a:c6:32:50:78:90:39:22:fc: 89:4e:0f:92:6c:c8:3a:ac:4d:38:13:77:b4:15:a0:f8:12:1d: b3:38:df:9d:30:11:2d:33:bf:ed:fb:ac:b5:62:0e:e6:fb:b0: 47:50:22:c7:e6:ab:34:f4:35:09:5e:33:3e:64:ab:fb:dc:40: a4:6b:7a:2d:da:20:b0:cb:5b:26:81:2b:d9:fd:bc:e8:80:6b: ab:91:eb:06:df:2f:10:bd:e3:ed:c7:4a:d0:04:86:9a:34:7a: 41:e4:7e:5a:54:bf:45:0b:ab:10:8c:d5:f9:ea:86:55:79:83: db:91:bb:27:b7:e6:ec:e3:90:c2:e7:ce:e5:dd:2c:03:a6:eb: 08:16:a6:e2:98:38:8c:ad:e8:fd:1f:95:ba:80:5e:f3:65:61: 32:25:1a:7f:bc:30:60:21:87:db:7f:65:1f:94:fc:92:da:5f: de:84:f8:04:a4:27:55:f0:4f:ff:2e:3c:bc:3b:d4:f7:d6:b1: 20:6b:cc:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq66etOMfGz/B0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZWM0OTg4YTctYTUwYS00NGQyLTg5OWQtNDdlZDljMjE5MGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8PWc0KMevtvHti5lx7B2nZdDhTy/2J8WFkC 33kCup0C83PifYqScYmUKqrX+0WIwWbScqYe7pJtDDHmk6rmtDESPaR/eSHOZXTt CqLqrvTCxfuybPOYJGbf4cVg/+IB1yGBMJnFI+A/5GCvEIdZKLgCEdgSYsfd0QLH AS6sgyD1KyuTVJy4WfNXqgaP5zTMUj304wHNTg1QqI+9wVGgCZMi5oCt/1LfFH6Z YrC6gyXjfGlyOY/YgJNGr/yi2kQYpKA7jDVadTPl3YjU6zuk7FjdD16TmCae17Wh 38Tnqy4qO9ksoTcs0SxYvFpcqIFIkZFeRgLZ26sE7ATauBUy9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFemHK48utJg87jGlmysVkE0dG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWE5NWE0MDUtZjJhMy0z MDMzLWI3NDYtYjA5YjdlYjU0MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXuBwn0qwnzrzLSqAK4uSqPJEjL1oxaqrLs4+XsBwUcNf1k91ypvO+p U6jWndcU9P+u4dB3FRkxciPCr5YEqRrGMlB4kDki/IlOD5JsyDqsTTgTd7QVoPgS HbM4350wES0zv+37rLViDub7sEdQIsfmqzT0NQleMz5kq/vcQKRrei3aILDLWyaB K9n9vOiAa6uR6wbfLxC94+3HStAEhpo0ekHkflpUv0ULqxCM1fnqhlV5g9uRuye3 5uzjkMLnzuXdLAOm6wgWpuKYOIyt6P0flbqAXvNlYTIlGn+8MGAhh9t/ZR+U/JLa X96E+ASkJ1XwT/8uPLw71PfWsSBrzOo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:30 2025 by rpki-client