$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78ba8e00-7830-3f30-8570-8013cd9d96c2.roa File: 78ba8e00-7830-3f30-8570-8013cd9d96c2.roa (raw, json) Hash identifier: yEFw6esrIKetlY7nQwVslpM8E2KPvp/KUvNaMICtLDY= Subject key identifier: 30:FA:54:65:B7:47:FC:E3:B4:94:1E:C7:A7:AF:74:97:4D:5F:06:BF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64E5A5E98F891504F8F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78ba8e00-7830-3f30-8570-8013cd9d96c2.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4e:5a:5e:98:f8:91:50:4f:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=b4507f6c-ba06-4ff0-94e0-f0144f7312a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:bd:4d:0b:e0:13:62:f2:31:25:6c:64:80: 47:7d:bf:c5:0e:39:98:dc:71:dc:43:93:a5:f2:a1: e5:13:06:ae:62:33:2c:56:d2:b1:e1:a1:60:a9:69: 9a:6d:3c:64:e3:f3:8f:29:ff:85:51:11:0d:56:21: 0f:bf:bb:1a:e1:fd:f4:bc:20:65:da:fc:24:cb:f3: b7:ad:cf:ee:37:12:c3:10:90:54:5e:27:2a:41:dd: 4a:47:52:09:3d:cf:9b:1d:69:86:43:55:42:d4:e3: 6a:ae:7d:5b:8a:04:ad:e5:63:c5:3f:77:75:bb:cd: 62:c9:58:2a:b3:72:52:dc:56:bd:f5:14:de:f8:7d: 62:23:25:9c:7f:15:6c:c8:12:43:58:36:af:c8:ab: c2:cd:ea:b7:4e:b9:d9:41:8c:73:f9:0c:61:45:32: e6:7c:5c:3e:a9:b5:ac:7b:d7:9d:a6:22:76:57:41: 02:19:c8:7e:59:9f:ba:1c:f6:54:45:a7:29:45:63: 21:e3:ec:07:23:a2:f0:fe:d5:0d:71:1e:0a:a8:a2: 9f:06:2a:3f:e8:cd:c9:b9:3f:30:86:54:ad:98:2a: ce:43:10:c5:df:a8:25:93:a9:57:a2:15:3d:03:e9: 39:c9:2c:86:8b:2b:60:d0:64:76:7e:0d:29:10:28: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FA:54:65:B7:47:FC:E3:B4:94:1E:C7:A7:AF:74:97:4D:5F:06:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78ba8e00-7830-3f30-8570-8013cd9d96c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:12:8f:cf:cc:75:10:0b:da:26:fb:54:cb:3d:2d:52:f8:f7: 67:77:57:db:9f:b0:2d:6b:78:f5:02:de:49:62:b0:c0:41:5a: f1:8e:31:d2:85:03:fa:bb:39:bc:67:e1:4c:b3:7f:47:14:7a: d8:3d:12:04:e8:37:5f:20:4e:7f:24:6c:a9:fa:6b:98:88:e9: f8:de:84:02:fb:fb:b5:45:16:a0:b8:f0:09:2b:07:83:42:85: cf:d5:e1:2e:17:57:7e:38:2c:fa:d5:ca:7f:f0:a8:c7:96:18: 83:74:70:b3:03:7c:a2:53:04:78:9f:4d:ba:4e:85:aa:b5:a2: c7:7c:c8:56:f5:46:ba:85:a9:1e:d2:f9:4c:0d:ba:ac:04:58: 38:17:18:e8:41:99:06:eb:ce:ed:52:8b:37:b8:93:dd:c2:e7: 11:97:81:32:b9:b8:d5:a4:b4:9e:d2:35:a1:76:cf:1b:2a:67: 2a:67:2c:9b:c7:ce:d2:1a:90:69:8e:b2:16:65:eb:15:ee:e1: 85:5e:f3:7d:23:df:12:12:61:33:9f:03:b1:13:15:f5:64:81: 24:0c:73:b4:28:f9:ab:9b:1d:ef:48:b9:1c:39:6b:84:cc:aa: 77:22:6e:09:2c:49:5a:5b:09:5f:69:61:9a:c5:ff:19:a8:a7: 44:7d:93:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1k5aXpj4kVBPj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YjQ1MDdmNmMtYmEwNi00ZmYwLTk0ZTAtZjAxNDRmNzMxMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4q9TQvgE2LyMSVsZIBHfb/FDjmY3HHcQ5Ol 8qHlEwauYjMsVtKx4aFgqWmabTxk4/OPKf+FURENViEPv7sa4f30vCBl2vwky/O3 rc/uNxLDEJBUXicqQd1KR1IJPc+bHWmGQ1VC1ONqrn1bigSt5WPFP3d1u81iyVgq s3JS3Fa99RTe+H1iIyWcfxVsyBJDWDavyKvCzeq3TrnZQYxz+QxhRTLmfFw+qbWs e9edpiJ2V0ECGch+WZ+6HPZURacpRWMh4+wHI6Lw/tUNcR4KqKKfBio/6M3JuT8w hlStmCrOQxDF36glk6lXohU9A+k5ySyGiytg0GR2fg0pECgwzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD6VGW3R/zjtJQex6evdJdNXwa/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzhiYThlMDAtNzgzMC0z ZjMwLTg1NzAtODAxM2NkOWQ5NmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwSj8/MdRAL2ib7VMs9LVL492d3V9ufsC1rePUC3klisMBBWvGOMdKF A/q7Obxn4Uyzf0cUetg9EgToN18gTn8kbKn6a5iI6fjehAL7+7VFFqC48AkrB4NC hc/V4S4XV344LPrVyn/wqMeWGIN0cLMDfKJTBHifTbpOhaq1osd8yFb1RrqFqR7S +UwNuqwEWDgXGOhBmQbrzu1Size4k93C5xGXgTK5uNWktJ7SNaF2zxsqZypnLJvH ztIakGmOshZl6xXu4YVe830j3xISYTOfA7ETFfVkgSQMc7Qo+aubHe9IuRw5a4TM qncibgksSVpbCV9pYZrF/xmop0R9k3g= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:56 2025 by rpki-client