$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64dada41-a1e7-3f21-9240-9d3cbc668d68.roa File: 64dada41-a1e7-3f21-9240-9d3cbc668d68.roa (raw, json) Hash identifier: XWy2dCktV2reophhrCfAUjpp9ykBWa4lVwicybALlyg= Subject key identifier: 6F:B5:37:02:A7:5B:00:16:D1:33:DC:32:ED:DC:ED:D7:1A:94:CE:72 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64E1E2A567A1B2F1B6E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64dada41-a1e7-3f21-9240-9d3cbc668d68.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4e:1e:2a:56:7a:1b:2f:1b:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=0cd82f94-4920-4618-b5fa-4f3cfc4739d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:3d:1f:89:90:6f:6e:e2:09:10:b8:a9:7a: eb:e2:58:58:b9:b4:76:b6:48:e5:33:c9:f0:8e:cc: 52:cd:80:90:4b:35:26:66:5f:1c:b0:8d:52:8f:75: 4b:d0:a6:1c:06:37:69:72:1c:c9:4b:24:44:86:1a: db:d6:ce:cf:fd:bf:a4:6c:3d:41:a5:7c:0d:2f:57: 73:03:01:1a:30:a8:43:30:d7:86:9f:5a:7e:cf:bb: c9:6f:9a:a6:b3:cb:06:ad:1f:5d:32:12:51:0c:65: 1d:8f:07:e6:7a:86:d0:cc:96:d9:8e:29:ae:3a:3d: 6d:bc:57:0f:03:9a:10:44:2e:ef:76:32:bd:1b:0a: 0e:cc:14:05:89:dd:ee:56:86:46:90:b7:ed:9b:ff: 6a:30:81:0b:33:c9:e2:ac:e7:24:b1:c8:32:74:0b: 0c:07:bd:6e:35:1c:3e:09:c2:97:67:b9:32:10:fd: cd:13:8e:7d:ce:f9:30:1c:78:55:fd:26:a5:43:6e: 87:f1:80:4f:81:5c:86:c8:68:e7:00:ae:ee:1c:1a: d4:87:65:86:0d:2a:73:9b:e6:da:a7:7b:23:38:cb: 79:0f:ae:19:cf:43:57:3c:a0:4e:39:fb:4f:d8:78: d7:51:85:c6:ad:b0:ea:7f:68:a6:bb:b3:67:10:7d: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:37:02:A7:5B:00:16:D1:33:DC:32:ED:DC:ED:D7:1A:94:CE:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64dada41-a1e7-3f21-9240-9d3cbc668d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2b:f1:99:8a:bc:de:71:f7:44:08:2c:aa:09:f8:10:09:8e: aa:1f:f3:34:91:22:e9:ef:74:e0:38:13:d6:47:dd:02:ca:75: 56:ee:35:6f:22:94:1a:98:6a:3c:c3:e9:1b:19:07:25:60:b0: f3:18:e5:2b:20:06:06:7e:b9:ab:70:c8:bb:8d:a5:d4:cd:5a: 05:79:83:a5:28:fd:b1:52:b7:a0:6d:a5:30:9b:05:94:47:81: c4:e8:37:a8:51:e3:d2:8f:30:5e:9e:1d:65:46:b8:50:dc:08: d0:b4:fe:45:3c:1c:b2:2a:04:a5:87:40:3f:e6:5f:6b:2f:81: cd:06:cc:e5:8d:0a:4e:5a:c8:5a:f2:33:cc:2f:3d:cb:74:46: f8:7d:8e:06:27:a5:07:c7:a9:0e:27:20:84:80:6e:c3:2d:3a: cb:f9:9e:f3:27:41:c8:dd:8c:f2:33:1c:5d:48:0f:19:41:a9: ad:09:8a:e6:81:34:39:0b:87:ab:76:8e:f9:87:4a:5a:26:94: 4b:d7:68:a4:bb:bb:9f:3e:77:b7:d1:3a:39:8d:c0:a3:6d:fb: 2d:ff:b6:e6:23:c3:4d:8c:d1:2d:37:ea:36:24:1f:41:62:62: f6:d2:2c:d1:3f:c8:66:70:24:ea:bf:45:3a:b5:87:d9:cd:a5: 60:e6:98:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1k4eKlZ6Gy8bboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MGNkODJmOTQtNDkyMC00NjE4LWI1ZmEtNGYzY2ZjNDczOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju89H4mQb27iCRC4qXrr4lhYubR2tkjlM8nw jsxSzYCQSzUmZl8csI1Sj3VL0KYcBjdpchzJSyREhhrb1s7P/b+kbD1BpXwNL1dz AwEaMKhDMNeGn1p+z7vJb5qms8sGrR9dMhJRDGUdjwfmeobQzJbZjimuOj1tvFcP A5oQRC7vdjK9GwoOzBQFid3uVoZGkLftm/9qMIELM8nirOckscgydAsMB71uNRw+ CcKXZ7kyEP3NE459zvkwHHhV/SalQ26H8YBPgVyGyGjnAK7uHBrUh2WGDSpzm+ba p3sjOMt5D64Zz0NXPKBOOftP2HjXUYXGrbDqf2imu7NnEH3fkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+1NwKnWwAW0TPcMu3c7dcalM5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjRkYWRhNDEtYTFlNy0z ZjIxLTkyNDAtOWQzY2JjNjY4ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkr8ZmKvN5x90QILKoJ+BAJjqof8zSRIunvdOA4E9ZH3QLKdVbuNW8i lBqYajzD6RsZByVgsPMY5SsgBgZ+uatwyLuNpdTNWgV5g6Uo/bFSt6BtpTCbBZRH gcToN6hR49KPMF6eHWVGuFDcCNC0/kU8HLIqBKWHQD/mX2svgc0GzOWNCk5ayFry M8wvPct0Rvh9jgYnpQfHqQ4nIISAbsMtOsv5nvMnQcjdjPIzHF1IDxlBqa0JiuaB NDkLh6t2jvmHSlomlEvXaKS7u58+d7fROjmNwKNt+y3/tuYjw02M0S036jYkH0Fi YvbSLNE/yGZwJOq/RTq1h9nNpWDmmMI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:20 2025 by rpki-client