$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa File: 6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa (raw, json) Hash identifier: LIbj9VR6VOmiUjNOeRqi+7rAbvZQMtNisSkgVTXrbGA= Subject key identifier: 12:A5:59:89:7B:B8:0C:45:CF:8C:8C:F9:93:5D:CE:FB:5C:0A:70:7F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65EA4321FC71A4232CA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5e:a4:32:1f:c7:1a:42:32:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=598df04f-79fa-49ba-95b3-44dfbc7272b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:5e:e8:be:2e:b0:48:18:af:1b:c9:7c:66: 0f:99:3b:32:da:65:00:9e:68:ac:c7:43:e9:20:ad: 80:fe:e3:d8:61:53:6f:e1:53:0c:0d:25:19:a6:37: 0d:87:42:74:74:5b:2c:c5:28:c7:0b:b6:51:18:f8: 2f:22:8e:ec:0f:7e:43:22:c2:44:b1:d2:8d:00:5b: 94:b8:f0:c3:91:11:bc:0c:ab:18:81:7a:20:c0:46: 47:fb:40:03:6f:c5:c5:57:c6:3d:f7:2b:05:b5:4a: 02:87:e9:88:25:8c:c8:9a:78:d1:e7:8b:85:a6:ef: 4c:0d:f3:45:27:be:86:4b:fa:6a:38:01:b4:0d:33: 3e:7a:83:a7:13:3b:d0:56:a4:b5:57:d4:88:54:b9: 9e:5a:ae:0e:98:a2:70:bf:74:b0:d5:ef:20:19:ed: 4f:60:95:89:68:d9:5e:cd:2e:26:ab:56:a6:ae:e0: 86:6a:db:18:3f:41:79:0b:dd:0d:85:9a:e1:1a:e6: a1:b2:48:b4:dc:7b:9d:50:02:18:ec:4f:bf:c7:36: 6a:c5:6b:7b:36:67:eb:31:37:28:a8:8b:7a:5e:67: 1e:8b:88:f6:0d:e7:1b:78:a4:57:be:2b:38:6f:f7: dc:74:12:1f:c3:9d:a0:29:91:60:93:fd:e8:30:7a: 8f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A5:59:89:7B:B8:0C:45:CF:8C:8C:F9:93:5D:CE:FB:5C:0A:70:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9f:a2:84:9e:f3:09:a9:ae:e9:a4:33:84:0b:73:4e:d3:46: 99:36:e4:3a:12:a7:21:d3:4b:a0:9b:7e:be:f7:ad:f3:e6:3d: 9a:65:3f:fc:1c:8f:6f:eb:b4:05:2e:c1:ed:02:28:83:e6:ff: 4d:2e:81:b1:81:55:55:d1:fc:ac:ce:95:e4:47:fb:2a:ec:a0: 88:90:e2:3e:ea:82:20:84:a1:ce:bd:3d:48:44:fc:d4:5f:92: bd:1f:78:b1:c0:3b:54:4f:58:91:42:55:db:f6:f2:16:34:51: af:93:03:47:8a:2e:5f:21:28:17:32:ad:94:36:c2:7b:68:c2: 46:36:f8:e7:ce:02:75:df:cb:d3:c2:1f:5b:a4:f5:a5:80:6c: 34:cd:7b:70:2f:da:ed:6d:4c:fc:26:41:d4:8c:41:77:5a:ec: 0b:bb:30:40:0a:1e:b8:10:3e:74:c9:6a:39:5a:99:a6:6c:96: 30:17:ee:ff:1e:5d:2a:b1:45:53:7d:19:64:6f:72:6e:b2:9f: 38:35:c0:b3:06:f6:b9:5e:19:ff:e1:5c:8c:08:50:e3:54:87: 4c:d7:97:17:54:a4:3c:13:74:52:d4:20:69:c2:d8:40:34:6f: 8d:99:e9:b5:1f:66:41:e1:63:0e:1a:39:8e:0e:55:1d:5c:46: 81:30:6d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1l6kMh/HGkIyyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NTk4ZGYwNGYtNzlmYS00OWJhLTk1YjMtNDRkZmJjNzI3MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTRe6L4usEgYrxvJfGYPmTsy2mUAnmisx0Pp IK2A/uPYYVNv4VMMDSUZpjcNh0J0dFssxSjHC7ZRGPgvIo7sD35DIsJEsdKNAFuU uPDDkRG8DKsYgXogwEZH+0ADb8XFV8Y99ysFtUoCh+mIJYzImnjR54uFpu9MDfNF J76GS/pqOAG0DTM+eoOnEzvQVqS1V9SIVLmeWq4OmKJwv3Sw1e8gGe1PYJWJaNle zS4mq1amruCGatsYP0F5C90NhZrhGuahski03HudUAIY7E+/xzZqxWt7NmfrMTco qIt6Xmcei4j2DecbeKRXvis4b/fcdBIfw52gKZFgk/3oMHqPywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKlWYl7uAxFz4yM+ZNdzvtcCnB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjk5N2RmNGItNzFkOS0z ZjhkLWEyYWQtNDUxMWY2MzZjN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6fooSe8wmprumkM4QLc07TRpk25DoSpyHTS6Cbfr73rfPmPZplP/wc j2/rtAUuwe0CKIPm/00ugbGBVVXR/KzOleRH+yrsoIiQ4j7qgiCEoc69PUhE/NRf kr0feLHAO1RPWJFCVdv28hY0Ua+TA0eKLl8hKBcyrZQ2wntowkY2+OfOAnXfy9PC H1uk9aWAbDTNe3Av2u1tTPwmQdSMQXda7Au7MEAKHrgQPnTJajlamaZsljAX7v8e XSqxRVN9GWRvcm6ynzg1wLMG9rleGf/hXIwIUONUh0zXlxdUpDwTdFLUIGnC2EA0 b42Z6bUfZkHhYw4aOY4OVR1cRoEwbd8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:05:56 2025 by rpki-client