$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e3ae088-6353-3be1-aead-7babd5fdd94e.roa File: 5e3ae088-6353-3be1-aead-7babd5fdd94e.roa (raw, json) Hash identifier: siPJLDhPXzi3zDRcCqQ+8Eizz41xBtAobCvJsqiJCQ4= Subject key identifier: A7:2B:7A:4D:58:3B:F9:7F:28:2A:C7:12:CA:F7:C4:87:99:7B:D7:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64BB7FC46ED2D99DD8B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e3ae088-6353-3be1-aead-7babd5fdd94e.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4b:b7:fc:46:ed:2d:99:dd:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=b2e8cd11-c35a-4166-9b26-798e58cba4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:53:37:5a:c6:f7:97:92:c3:3e:0b:69:05: 86:93:f1:cb:e1:6f:66:b6:65:8c:25:eb:4a:5d:65: e7:34:34:86:cf:5d:fc:cd:a1:18:58:5d:82:8e:74: b1:b3:1b:d2:0b:03:2e:67:58:fd:f0:09:78:82:11: 90:ea:00:be:cf:71:58:4b:58:fc:ad:7c:f3:2e:0c: fb:ef:ed:79:57:f1:9f:af:cb:73:48:17:70:22:16: 08:8c:ec:9c:45:df:80:00:c4:e0:d1:48:24:82:bb: c5:d1:76:a2:fa:06:4a:c1:8b:58:6f:74:f6:9a:59: eb:5b:33:69:04:8e:2d:f5:55:87:8e:85:35:05:db: b9:dd:a1:ea:8e:61:d3:e9:18:73:5c:72:9d:f3:d8: 37:cc:3e:97:19:a6:92:0e:ce:e4:6a:88:44:d9:c3: 9b:78:df:80:51:c9:8b:cd:9a:65:e9:b6:68:bc:7f: c5:11:4a:3e:0e:43:b9:f7:c2:d7:36:9b:90:75:88: c1:2d:06:1f:86:81:4a:1f:82:04:90:01:54:e5:6f: a8:98:a9:6c:4b:7c:99:11:70:ea:96:a7:a3:27:ac: 12:55:45:fc:0a:c2:d3:ab:1d:09:95:ba:30:a9:05: 1f:79:c1:80:c6:0b:42:02:6b:1f:d3:f3:b7:3d:f2: 9c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2B:7A:4D:58:3B:F9:7F:28:2A:C7:12:CA:F7:C4:87:99:7B:D7:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e3ae088-6353-3be1-aead-7babd5fdd94e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:0f:b9:58:89:f4:24:60:13:44:a9:5f:6c:5f:7f:c4:18:42: 9b:95:8b:46:fa:13:eb:09:23:50:d1:3a:10:6e:1c:a9:ec:70: 67:6f:18:ae:9d:e6:ad:e5:9d:04:d0:85:59:e6:45:84:16:ad: 94:24:3d:16:f4:0a:ca:e2:c4:83:64:e1:c8:5b:de:ac:b4:ef: 05:f0:1e:eb:66:87:ad:91:d6:d1:e4:6c:a6:b0:98:bf:6d:1c: 81:81:f1:7b:1c:bb:58:2e:74:f1:3d:78:89:29:da:82:9a:d7: 20:9c:7c:5c:83:ff:c3:58:66:a2:13:93:cf:39:ae:01:23:06: a4:f4:62:dd:95:e9:27:a2:ac:56:84:0f:04:86:5b:23:5b:f7: 26:99:6e:84:a7:aa:75:54:9e:16:b8:28:ef:9d:77:81:01:a3: 92:2d:48:8e:26:e4:94:16:38:c9:1a:0c:b0:ef:26:32:b3:fb: 63:74:97:b1:fb:79:43:0b:3d:f9:49:c6:fd:d3:f1:b7:b1:da: 92:0b:5c:1e:6a:1a:31:e4:e4:d9:4a:82:34:a9:fa:91:d1:26: 50:9c:ad:7d:c1:bb:64:79:28:9b:1c:0f:fc:7c:18:94:da:23: b9:84:a1:78:b4:a1:70:2b:59:79:44:e1:dd:b7:63:d1:21:63: a3:97:e4:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1ku3/EbtLZndi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YjJlOGNkMTEtYzM1YS00MTY2LTliMjYtNzk4ZTU4Y2JhNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSFTN1rG95eSwz4LaQWGk/HL4W9mtmWMJetK XWXnNDSGz138zaEYWF2CjnSxsxvSCwMuZ1j98Al4ghGQ6gC+z3FYS1j8rXzzLgz7 7+15V/Gfr8tzSBdwIhYIjOycRd+AAMTg0UgkgrvF0Xai+gZKwYtYb3T2mlnrWzNp BI4t9VWHjoU1Bdu53aHqjmHT6RhzXHKd89g3zD6XGaaSDs7kaohE2cObeN+AUcmL zZpl6bZovH/FEUo+DkO598LXNpuQdYjBLQYfhoFKH4IEkAFU5W+omKlsS3yZEXDq lqejJ6wSVUX8CsLTqx0JlbowqQUfecGAxgtCAmsf0/O3PfKcPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcrek1YO/l/KCrHEsr3xIeZe9c0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWUzYWUwODgtNjM1My0z YmUxLWFlYWQtN2JhYmQ1ZmRkOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoPuViJ9CRgE0SpX2xff8QYQpuVi0b6E+sJI1DROhBuHKnscGdvGK6d 5q3lnQTQhVnmRYQWrZQkPRb0CsrixINk4chb3qy07wXwHutmh62R1tHkbKawmL9t HIGB8Xscu1gudPE9eIkp2oKa1yCcfFyD/8NYZqITk885rgEjBqT0Yt2V6SeirFaE DwSGWyNb9yaZboSnqnVUnha4KO+dd4EBo5ItSI4m5JQWOMkaDLDvJjKz+2N0l7H7 eUMLPflJxv3T8bex2pILXB5qGjHk5NlKgjSp+pHRJlCcrX3Bu2R5KJscD/x8GJTa I7mEoXi0oXArWXlE4d23Y9EhY6OX5O0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:47 2025 by rpki-client