$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b693eaf-d004-324d-b72a-3fd529d5b222.roa File: 7b693eaf-d004-324d-b72a-3fd529d5b222.roa (raw, json) Hash identifier: GY/rnzk31NAIVmiWDjY46JX/l4JFp/RtFVsInJu59JM= Subject key identifier: 39:06:06:15:2A:5F:AE:D4:03:DF:FA:97:B5:FB:BE:8D:A5:07:94:FC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65C3B49C58FAA9281A680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b693eaf-d004-324d-b72a-3fd529d5b222.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5c:3b:49:c5:8f:aa:92:81:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=b498d499-d704-459b-b295-63217694d481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:e4:8e:5e:d2:6b:7d:3b:d4:b2:93:ac:10: 4a:78:49:31:ad:68:36:8b:6f:36:b8:7b:d2:21:98: a8:3f:d4:02:85:8b:fe:1b:75:10:cb:da:b5:6c:7b: 49:69:96:db:51:ac:20:e6:75:1a:e8:ca:5b:91:ae: 41:02:57:4a:a6:1a:34:d0:01:7c:d4:c9:40:9b:94: d0:aa:ea:15:f8:5c:0f:60:e1:a5:e7:2d:2c:d0:17: b0:96:a5:f7:74:f0:c7:5e:5a:aa:32:df:3b:22:94: 19:16:c8:81:9d:60:bc:ee:38:2a:cf:6e:2a:72:a9: a3:a4:46:ca:f1:e4:9d:b0:c4:70:4f:fd:c9:78:cd: 2c:65:b1:fd:0d:38:6d:bf:f3:e2:ed:1c:b0:43:43: e8:79:50:d8:67:00:4d:0b:4e:f7:f0:dc:46:03:32: a1:08:23:9e:76:ab:39:6a:a4:27:2f:5d:a2:88:42: 8b:54:52:0b:ef:08:c8:30:3a:64:7e:15:ae:1c:37: 99:04:b9:59:d7:84:5f:86:75:4d:0b:44:2b:3a:8c: f8:57:29:dc:34:83:f3:5b:e0:67:f5:fa:61:4a:86: 9b:c4:14:91:5a:6b:48:4d:11:9d:26:22:2f:4d:72: 78:f5:c0:1c:0c:ec:c0:30:69:46:b3:f9:05:0d:58: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:06:06:15:2A:5F:AE:D4:03:DF:FA:97:B5:FB:BE:8D:A5:07:94:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b693eaf-d004-324d-b72a-3fd529d5b222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:63:6b:84:91:73:c3:05:55:e1:65:4a:0a:74:04:4c:8f:e7: 52:c5:e1:d1:de:66:6e:ab:f3:c7:47:51:23:b4:59:b6:f9:8e: f7:36:51:70:52:df:74:b8:9d:c9:3f:d5:21:75:5c:6b:47:0f: 11:e0:ac:ca:55:9c:60:fd:d4:36:38:0c:74:71:59:8f:da:25: f6:28:4f:09:8a:86:b2:45:2d:63:67:23:8a:90:63:5f:fb:75: 5b:88:87:c1:66:25:93:c4:3c:92:65:9c:40:12:39:94:4c:1c: 03:b6:aa:8f:3a:fb:07:6c:55:e4:3d:61:fa:ac:64:68:13:26: 90:28:d3:2e:c2:d6:e0:57:c6:c7:f0:42:38:71:6b:bd:ca:15: 82:0d:d3:7b:df:cd:67:a0:84:fe:3e:29:fb:c1:8c:c4:c3:9d: 0c:88:1f:a7:f9:a5:9c:03:0e:7c:82:b0:10:56:34:85:25:5c: bd:e5:58:d0:c3:a1:79:3f:c7:8a:82:68:96:14:58:3f:53:7a: 75:ed:d2:12:6d:d3:54:01:64:29:46:2f:0b:d0:1f:a1:5f:eb: da:20:87:3f:4b:1d:9b:13:4a:56:a9:f0:6e:fa:9e:f0:17:74: 94:96:ce:e7:e5:25:bd:c6:74:e7:8f:8b:fa:2c:be:53:1a:4c: 77:29:ff:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lw7ScWPqpKBpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YjQ5OGQ0OTktZDcwNC00NTliLWIyOTUtNjMyMTc2OTRkNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNXkjl7Sa3071LKTrBBKeEkxrWg2i282uHvS IZioP9QChYv+G3UQy9q1bHtJaZbbUawg5nUa6Mpbka5BAldKpho00AF81MlAm5TQ quoV+FwPYOGl5y0s0BewlqX3dPDHXlqqMt87IpQZFsiBnWC87jgqz24qcqmjpEbK 8eSdsMRwT/3JeM0sZbH9DThtv/Pi7RywQ0PoeVDYZwBNC0738NxGAzKhCCOedqs5 aqQnL12iiEKLVFIL7wjIMDpkfhWuHDeZBLlZ14RfhnVNC0QrOoz4VyncNIPzW+Bn 9fphSoabxBSRWmtITRGdJiIvTXJ49cAcDOzAMGlGs/kFDVhqoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkGBhUqX67UA9/6l7X7vo2lB5T8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2I2OTNlYWYtZDAwNC0z MjRkLWI3MmEtM2ZkNTI5ZDViMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdja4SRc8MFVeFlSgp0BEyP51LF4dHeZm6r88dHUSO0Wbb5jvc2UXBS 33S4nck/1SF1XGtHDxHgrMpVnGD91DY4DHRxWY/aJfYoTwmKhrJFLWNnI4qQY1/7 dVuIh8FmJZPEPJJlnEASOZRMHAO2qo86+wdsVeQ9YfqsZGgTJpAo0y7C1uBXxsfw Qjhxa73KFYIN03vfzWeghP4+KfvBjMTDnQyIH6f5pZwDDnyCsBBWNIUlXL3lWNDD oXk/x4qCaJYUWD9TenXt0hJt01QBZClGLwvQH6Ff69oghz9LHZsTSlap8G76nvAX dJSWzuflJb3GdOePi/osvlMaTHcp/2k= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:28 2025 by rpki-client