$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72e6ff8a-2526-3c6e-af02-4b9a8d638a55.roa File: 72e6ff8a-2526-3c6e-af02-4b9a8d638a55.roa (raw, json) Hash identifier: yxlH8hsfQUNIH5i1ES5sIAxyrAW3jM70KgXkBXmHbyw= Subject key identifier: 4A:C6:F4:81:9B:AF:89:88:8A:A5:8E:26:25:A4:9B:A6:57:78:65:C5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65D8E9F63ED746BDFAC80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72e6ff8a-2526-3c6e-af02-4b9a8d638a55.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5d:8e:9f:63:ed:74:6b:df:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=6b51c41a-2100-40b4-ac83-8d0ac558b8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:16:c6:71:9e:a0:1c:f1:76:49:34:b8:27: a2:fc:d8:52:a4:20:fc:cf:e0:bf:6d:f5:f3:30:fa: 90:c3:cd:9e:bf:ce:73:7d:6c:5b:f5:93:c5:e0:ff: 19:f8:d9:7d:66:e7:cb:d2:85:26:d8:14:22:ca:cb: a9:05:03:85:b0:ec:e0:8a:0f:c4:58:cd:f7:b7:6d: e0:84:e3:63:fd:42:27:51:f5:f0:ee:27:74:8a:c7: 2b:ac:78:d9:49:fb:19:06:53:bd:cf:83:2b:cf:76: cc:21:c9:38:32:ae:e5:fe:f7:29:e5:ba:e9:a2:80: 6a:6c:7a:90:3b:41:28:66:9a:76:02:22:a5:dc:b1: 3a:ef:40:a5:20:e9:75:4c:a6:1b:e9:bc:48:d3:35: b7:c9:39:cd:c2:a3:9d:30:e3:ab:7d:25:53:b2:36: a5:51:70:be:68:9a:99:1e:4e:64:90:5f:d7:49:20: 11:1a:38:16:6f:ef:4b:04:80:3f:b9:3b:f0:2c:7e: 68:48:6a:c9:90:0a:92:7a:75:f2:cd:2f:8a:b3:8c: 9c:92:b0:33:42:bd:b9:9c:c7:61:5d:d8:82:b0:5b: 53:dc:03:ad:1c:cb:46:4a:89:e7:82:10:c8:fc:8e: 33:2b:4d:c7:50:e7:ce:75:43:fe:44:a3:d1:59:22: 71:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C6:F4:81:9B:AF:89:88:8A:A5:8E:26:25:A4:9B:A6:57:78:65:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72e6ff8a-2526-3c6e-af02-4b9a8d638a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3c:49:7f:f6:6e:97:e0:9a:c9:a1:f2:15:85:59:8a:7d:49: 6f:18:e1:f1:c7:f6:26:f3:38:b5:df:56:09:e7:b9:06:70:e2: 0a:9c:8a:96:a8:36:88:f7:ea:12:c2:e7:57:1d:bd:fc:32:7c: 01:ae:11:28:2f:87:53:b5:ad:75:08:d3:ca:c0:e5:2f:1d:22: 28:8d:e3:48:03:8b:f6:dc:34:0b:d6:fc:15:c4:36:2e:27:e2: e1:7d:f3:48:25:37:4e:f5:b5:7e:4b:97:83:c5:c7:87:df:37: ea:2d:65:21:0c:05:a7:b5:e4:db:54:47:2b:1f:b0:75:85:3e: cf:cf:60:45:1e:5e:ad:74:6d:cd:7d:d3:31:f3:47:1d:ac:39: 27:68:89:f5:60:18:4c:c4:9a:61:9d:71:f6:f4:3d:ae:f1:3e: e3:62:ab:20:72:1d:58:12:b6:69:fa:96:1a:72:4a:fa:85:93: 37:12:2c:f3:31:3e:95:e3:5d:27:55:fa:95:d0:9b:10:37:05: af:da:5e:80:6c:6e:76:7c:51:c2:f5:49:96:05:74:a0:d6:24: ef:ea:56:39:54:ed:09:25:35:1f:6a:a8:a6:9a:1e:f0:07:43: a9:27:19:74:67:0e:77:6f:96:f7:a6:fc:bc:08:3a:46:56:f1: aa:1a:dc:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1l2On2PtdGvfrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NmI1MWM0MWEtMjEwMC00MGI0LWFjODMtOGQwYWM1NThiOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzIWxnGeoBzxdkk0uCei/NhSpCD8z+C/bfXz MPqQw82ev85zfWxb9ZPF4P8Z+Nl9ZufL0oUm2BQiysupBQOFsOzgig/EWM33t23g hONj/UInUfXw7id0iscrrHjZSfsZBlO9z4Mrz3bMIck4Mq7l/vcp5brpooBqbHqQ O0EoZpp2AiKl3LE670ClIOl1TKYb6bxI0zW3yTnNwqOdMOOrfSVTsjalUXC+aJqZ Hk5kkF/XSSARGjgWb+9LBIA/uTvwLH5oSGrJkAqSenXyzS+Ks4yckrAzQr25nMdh XdiCsFtT3AOtHMtGSonnghDI/I4zK03HUOfOdUP+RKPRWSJx1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErG9IGbr4mIiqWOJiWkm6ZXeGXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzJlNmZmOGEtMjUyNi0z YzZlLWFmMDItNGI5YThkNjM4YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU8SX/2bpfgmsmh8hWFWYp9SW8Y4fHH9ibzOLXfVgnnuQZw4gqcipao Noj36hLC51cdvfwyfAGuESgvh1O1rXUI08rA5S8dIiiN40gDi/bcNAvW/BXENi4n 4uF980glN071tX5Ll4PFx4ffN+otZSEMBae15NtURysfsHWFPs/PYEUeXq10bc19 0zHzRx2sOSdoifVgGEzEmmGdcfb0Pa7xPuNiqyByHVgStmn6lhpySvqFkzcSLPMx PpXjXSdV+pXQmxA3Ba/aXoBsbnZ8UcL1SZYFdKDWJO/qVjlU7QklNR9qqKaaHvAH Q6knGXRnDndvlvem/LwIOkZW8aoa3LY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:56:38 2025 by rpki-client