$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b27d1e1-7e44-3200-8f07-aa11e036a04c.roa File: 6b27d1e1-7e44-3200-8f07-aa11e036a04c.roa (raw, json) Hash identifier: vKmJtmOHsJhCU3ehp4TKt9P5TuJ4eYdVvlO3a5MaGv4= Subject key identifier: E1:B7:20:77:AF:10:6F:40:39:57:0D:32:65:45:BA:83:D2:03:B7:D6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D661538DC2816123825880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b27d1e1-7e44-3200-8f07-aa11e036a04c.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:61:53:8d:c2:81:61:23:82:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=6569e85b-a47c-4070-b6af-f2d06f7d9588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ef:6c:18:f3:3a:86:11:f3:e6:10:4f:5e:db: 39:eb:bc:ef:36:ec:56:90:d1:79:a4:81:2a:b3:04: 32:a1:81:48:39:cc:1a:e8:90:94:5c:7e:be:fe:2a: 08:29:33:e2:1c:72:b1:d4:f7:82:13:fe:23:a1:08: 26:6f:5e:43:5f:c8:37:75:6f:fd:11:ec:70:09:76: 6b:aa:74:44:1c:86:f4:a9:da:c4:e8:39:90:7d:c7: d5:26:09:95:2b:d3:54:cc:b8:ba:c7:ac:a1:c0:cd: 4f:56:13:d5:f5:c5:23:9f:e2:9c:f1:1b:70:07:10: 3d:39:58:49:dd:3e:b0:29:90:be:b7:dd:64:8d:d1: d7:df:32:c9:6a:a8:a0:eb:d6:d4:04:85:da:ec:1f: 4c:69:d2:22:63:2d:c5:18:88:ca:c6:29:bc:36:f0: 17:31:2c:b6:36:35:d1:8a:18:85:62:d1:71:af:57: 17:bb:8e:a3:44:27:70:56:de:8c:66:1a:6f:40:55: 9f:f2:73:fb:57:79:3d:c0:fb:b6:ee:7a:7a:08:e4: 53:5d:2d:5c:13:0c:bc:9c:8d:32:60:1b:eb:92:10: 23:16:0f:d6:76:2a:fc:9a:a9:e7:17:14:83:07:05: 2c:71:dc:ce:68:64:ed:3d:7e:12:3c:3e:1a:ac:5b: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B7:20:77:AF:10:6F:40:39:57:0D:32:65:45:BA:83:D2:03:B7:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b27d1e1-7e44-3200-8f07-aa11e036a04c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:96:b8:3e:dc:9b:68:e5:de:ca:8e:7c:f0:1f:e0:29:88:f1: 68:51:17:65:e1:52:d4:6a:b5:32:f3:ea:99:9b:84:30:6e:db: fb:db:d2:c7:95:0b:d4:65:c4:47:9a:1a:07:2c:c3:6a:35:79: 52:7c:ba:fe:f8:d0:ba:2c:b9:ce:f8:76:eb:0e:62:bc:f8:a7: a7:fd:be:c1:fc:ad:cc:ac:dd:8f:f3:a8:e9:50:f0:21:67:18: a1:02:1c:34:1d:4a:53:07:82:bb:77:33:0a:fe:e8:93:ca:a4: b1:70:3c:fa:12:71:06:06:11:b2:bc:b3:53:71:73:8e:ec:94: aa:ae:4b:e1:46:05:27:8c:74:d4:95:15:aa:13:48:e4:3b:4b: 9d:06:f4:9b:81:e7:e5:31:60:a7:e0:b3:03:9e:c9:ce:21:b3: f1:74:f1:08:3f:80:fe:e6:2b:e3:e5:39:49:60:85:bd:bb:5e: ae:78:d7:3f:d9:b8:8c:d7:f0:1d:a0:78:15:44:62:53:fc:bb: 92:55:c3:28:55:b4:c2:a7:96:44:31:f4:ec:af:13:8b:fc:77: 7c:52:f7:2f:4e:fa:aa:e8:0d:6a:9a:40:ff:bc:01:a0:99:6c: 94:c4:e8:35:13:47:37:f6:ba:53:0e:90:14:ae:93:aa:e3:6c: 59:f0:fa:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mFTjcKBYSOCWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NjU2OWU4NWItYTQ3Yy00MDcwLWI2YWYtZjJkMDZmN2Q5NTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu9sGPM6hhHz5hBPXts567zvNuxWkNF5pIEq swQyoYFIOcwa6JCUXH6+/ioIKTPiHHKx1PeCE/4joQgmb15DX8g3dW/9EexwCXZr qnREHIb0qdrE6DmQfcfVJgmVK9NUzLi6x6yhwM1PVhPV9cUjn+Kc8RtwBxA9OVhJ 3T6wKZC+t91kjdHX3zLJaqig69bUBIXa7B9MadIiYy3FGIjKxim8NvAXMSy2NjXR ihiFYtFxr1cXu46jRCdwVt6MZhpvQFWf8nP7V3k9wPu27np6CORTXS1cEwy8nI0y YBvrkhAjFg/Wdir8mqnnFxSDBwUscdzOaGTtPX4SPD4arFvQ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOG3IHevEG9AOVcNMmVFuoPSA7fWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmIyN2QxZTEtN2U0NC0z MjAwLThmMDctYWExMWUwMzZhMDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+WuD7cm2jl3sqOfPAf4CmI8WhRF2XhUtRqtTLz6pmbhDBu2/vb0seV C9RlxEeaGgcsw2o1eVJ8uv740Losuc74dusOYrz4p6f9vsH8rcys3Y/zqOlQ8CFn GKECHDQdSlMHgrt3Mwr+6JPKpLFwPPoScQYGEbK8s1Nxc47slKquS+FGBSeMdNSV FaoTSOQ7S50G9JuB5+UxYKfgswOeyc4hs/F08Qg/gP7mK+PlOUlghb27Xq541z/Z uIzX8B2geBVEYlP8u5JVwyhVtMKnlkQx9OyvE4v8d3xS9y9O+qroDWqaQP+8AaCZ bJTE6DUTRzf2ulMOkBSuk6rjbFnw+pA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:11:54 2025 by rpki-client