$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/799dac6d-77ec-354d-93ee-26d180b5d533.roa File: 799dac6d-77ec-354d-93ee-26d180b5d533.roa (raw, json) Hash identifier: JGfpeU0aOwUXI4Mg14KJX8swwMHu+7d5PNXMKHxjvqM= Subject key identifier: A3:F1:01:14:51:97:31:DE:E9:EB:61:37:3C:C3:7A:2B:BA:11:5E:48 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D6509EEB6B817E2BF200E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/799dac6d-77ec-354d-93ee-26d180b5d533.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:50:9e:eb:6b:81:7e:2b:f2:00:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=2f5fa4a3-acaf-4a04-91fd-95cf39dfa572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cd:73:05:ef:e7:be:b8:df:50:a2:b0:2a:69: 96:a5:77:aa:3f:82:d9:ac:fb:bf:fc:d1:54:6b:17: 8e:72:e7:b8:05:8f:4e:c5:1a:33:29:c5:dc:5c:4e: 67:8e:5a:06:8d:a0:5d:1c:4f:c4:fb:0e:02:9b:20: 6a:9b:29:85:9f:5b:ae:d0:c9:0f:f6:7b:c3:0f:28: e7:6a:a9:06:06:59:fe:88:31:11:35:a7:de:4c:1c: c1:12:ef:05:86:1d:b9:49:d4:e0:aa:51:1a:91:5f: db:b5:55:20:66:8d:c7:f0:ae:9a:c2:bb:1e:05:de: 97:df:8b:1a:5d:df:cd:6f:c8:88:6f:10:ff:61:81: 48:ea:bd:58:13:03:76:e9:fc:dc:aa:b6:63:7b:19: 4f:52:a8:e8:34:16:09:99:9b:6e:21:df:c0:39:ac: 3a:6b:e7:e0:0a:f5:d7:93:6e:d5:a2:f5:82:8f:8a: b6:21:60:56:b3:90:47:2c:43:6b:b4:e7:71:0a:e3: a9:2f:a5:7f:cc:7c:64:f8:67:56:21:13:f3:ba:b9: ea:32:69:d8:02:1c:ca:fa:d5:b5:89:23:e5:6b:01: cd:b9:57:12:80:a2:79:71:f0:bc:13:a8:62:8c:67: d2:2a:c2:50:0d:11:59:f7:64:1a:e6:0b:08:7c:f9: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:01:14:51:97:31:DE:E9:EB:61:37:3C:C3:7A:2B:BA:11:5E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/799dac6d-77ec-354d-93ee-26d180b5d533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d5:b6:67:f1:86:c6:d5:5b:f8:23:7d:16:74:ff:41:4b:40: ea:c1:76:0b:6b:80:7f:8d:e9:c0:e3:48:ee:3e:57:2f:f4:64: d8:b7:26:ff:9f:34:14:a0:d3:51:6a:e2:d0:20:8f:08:61:98: 43:53:ca:45:8a:a4:e3:7c:91:69:12:69:0a:8a:7d:84:d9:3c: bc:a9:28:52:ac:31:46:00:eb:7e:c7:9d:b2:2d:bc:46:7d:54: 7e:3c:88:27:b8:fe:45:63:15:0c:66:3b:e2:32:fc:6e:b2:44: b6:a2:01:50:93:e8:c2:6a:66:2c:67:87:e8:50:dd:9d:17:d5: da:d4:e8:57:e1:cd:30:cc:d3:8d:ab:91:9b:7b:a2:b8:6e:65: 7a:aa:51:18:53:03:49:56:a3:b9:90:a2:85:55:f9:dc:bb:40: 13:12:d0:95:f3:4c:15:ac:fb:81:2a:4e:c3:c5:f4:ef:43:be: bb:cb:a2:a1:6a:16:c1:57:d3:5d:6a:91:1c:e4:ef:10:01:72: 51:80:cb:14:11:96:02:40:c4:87:93:d2:4e:9c:8a:76:85:96: 5d:ae:ae:69:e5:5c:9f:75:95:c7:1e:f6:fe:5f:db:7e:e2:b2: 41:8a:40:be:e5:a8:5f:09:d0:a4:73:41:dd:d5:88:9d:9f:60: 24:99:8a:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lCe62uBfivyAOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MmY1ZmE0YTMtYWNhZi00YTA0LTkxZmQtOTVjZjM5ZGZhNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM1zBe/nvrjfUKKwKmmWpXeqP4LZrPu//NFU axeOcue4BY9OxRozKcXcXE5njloGjaBdHE/E+w4CmyBqmymFn1uu0MkP9nvDDyjn aqkGBln+iDERNafeTBzBEu8Fhh25SdTgqlEakV/btVUgZo3H8K6awrseBd6X34sa Xd/Nb8iIbxD/YYFI6r1YEwN26fzcqrZjexlPUqjoNBYJmZtuId/AOaw6a+fgCvXX k27VovWCj4q2IWBWs5BHLENrtOdxCuOpL6V/zHxk+GdWIRPzurnqMmnYAhzK+tW1 iSPlawHNuVcSgKJ5cfC8E6hijGfSKsJQDRFZ92Qa5gsIfPngeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPxARRRlzHe6ethNzzDeiu6EV5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzk5ZGFjNmQtNzdlYy0z NTRkLTkzZWUtMjZkMTgwYjVkNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzVtmfxhsbVW/gjfRZ0/0FLQOrBdgtrgH+N6cDjSO4+Vy/0ZNi3Jv+f NBSg01Fq4tAgjwhhmENTykWKpON8kWkSaQqKfYTZPLypKFKsMUYA637HnbItvEZ9 VH48iCe4/kVjFQxmO+Iy/G6yRLaiAVCT6MJqZixnh+hQ3Z0X1drU6FfhzTDM042r kZt7orhuZXqqURhTA0lWo7mQooVV+dy7QBMS0JXzTBWs+4EqTsPF9O9DvrvLoqFq FsFX011qkRzk7xABclGAyxQRlgJAxIeT0k6cinaFll2urmnlXJ91lcce9v5f237i skGKQL7lqF8J0KRzQd3ViJ2fYCSZiuc= -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:23 2025 by rpki-client