$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa File: 7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa (raw, json) Hash identifier: lhfuS6lcpoj83j2HbpVzGXbrMK03dTXT7Og0uYjZulY= Subject key identifier: 3A:22:D6:12:49:76:F6:53:6B:09:38:8A:BC:BE:CE:E6:76:20:5E:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64D5143E824167EC314C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4d:51:43:e8:24:16:7e:c3:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=ea31cc74-3e49-4ada-a970-e754b67ac5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:1e:74:01:ca:cb:d5:a0:ce:ab:a4:70:9c: 21:cc:1f:10:1e:c4:2a:d4:a8:e2:7b:12:7d:78:ef: 23:ff:5a:c0:57:aa:df:e1:4e:aa:b4:47:70:54:a7: 56:7c:e6:80:05:4b:58:2a:f6:6c:a3:09:0f:d7:62: 83:c3:83:c2:20:8f:bd:8a:42:ae:c3:be:30:73:cd: c6:fd:b1:5d:1c:cd:e9:eb:d4:6c:53:46:0e:a4:ec: 3c:07:ca:c0:d6:56:59:4f:56:7e:15:a0:a8:67:40: eb:97:eb:18:19:74:c8:d6:82:c1:66:0f:37:e3:21: e7:be:dd:80:df:bc:1e:45:69:a2:be:27:73:fd:49: f9:ec:bf:06:9f:43:c4:65:15:3c:15:97:a9:65:47: 48:e7:62:77:d8:2e:a9:86:9e:61:79:7e:7f:be:e8: 08:3e:8f:3d:48:6c:50:a5:12:e4:c8:94:04:01:aa: 3f:ca:3c:ca:e9:2a:24:79:26:7a:96:c2:34:d8:f2: ea:f1:7a:15:ba:28:c8:32:27:be:71:40:98:f3:f1: b1:4e:f2:90:e2:9c:8f:bd:94:54:20:fc:42:7b:6a: 68:ac:6e:25:d0:fb:15:d0:16:44:1f:87:59:96:f4: 4f:c3:ef:c3:e6:56:23:e8:39:b8:a3:42:1e:83:4a: a2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:22:D6:12:49:76:F6:53:6B:09:38:8A:BC:BE:CE:E6:76:20:5E:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b6:01:5f:61:22:d8:8e:12:82:16:cf:13:01:90:68:1c:7a: 27:a8:75:03:63:91:77:a8:48:5e:6a:8d:86:24:d8:8b:66:e2: d4:7c:e0:8d:b9:18:dc:9c:30:14:28:15:38:9f:15:da:6a:8e: 50:07:45:a9:fe:86:ef:17:b7:b4:a0:58:57:d1:05:90:33:9e: fd:96:27:dc:a6:8c:04:55:36:e1:6b:f7:42:f8:b0:f6:85:66: 2b:69:ba:8a:f4:28:f9:56:5f:27:5f:8f:dc:fe:36:1c:35:64: d5:1e:94:a2:c7:3c:67:19:56:fb:41:04:d6:98:3e:de:ce:72: dd:09:9d:c3:93:7d:0b:07:b9:ef:65:5a:82:27:19:ac:0e:b1: b1:cc:2d:b0:82:0f:22:e3:71:35:90:30:17:66:7c:ab:1a:fe: 30:49:20:0d:7e:6f:48:6f:36:03:a6:17:e1:33:51:b4:6a:6e: d0:b1:27:9b:55:da:ca:50:26:1b:4e:65:f1:d0:93:02:d2:5a: ca:82:49:ba:b0:1b:7e:70:c3:1d:6e:2b:e3:de:68:7f:3b:83: af:48:75:3b:db:bb:9e:c1:53:74:30:74:a4:06:ff:42:e8:c7: 40:49:97:db:ea:1a:f3:7c:7d:a0:4f:b0:54:ef:6a:28:86:bb: 32:6f:ca:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1k1RQ+gkFn7DFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZWEzMWNjNzQtM2U0OS00YWRhLWE5NzAtZTc1NGI2N2FjNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCQedAHKy9WgzqukcJwhzB8QHsQq1KjiexJ9 eO8j/1rAV6rf4U6qtEdwVKdWfOaABUtYKvZsowkP12KDw4PCII+9ikKuw74wc83G /bFdHM3p69RsU0YOpOw8B8rA1lZZT1Z+FaCoZ0Drl+sYGXTI1oLBZg834yHnvt2A 37weRWmividz/Un57L8Gn0PEZRU8FZepZUdI52J32C6php5heX5/vugIPo89SGxQ pRLkyJQEAao/yjzK6SokeSZ6lsI02PLq8XoVuijIMie+cUCY8/GxTvKQ4pyPvZRU IPxCe2porG4l0PsV0BZEH4dZlvRPw+/D5lYj6Dm4o0Ieg0qiEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoi1hJJdvZTawk4iry+zuZ2IF62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2MzYjBjZDYtZDM2OS0z MTY5LWEwZWMtYzZjNmZiZjRhNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu2AV9hItiOEoIWzxMBkGgceieodQNjkXeoSF5qjYYk2Itm4tR84I25 GNycMBQoFTifFdpqjlAHRan+hu8Xt7SgWFfRBZAznv2WJ9ymjARVNuFr90L4sPaF Zitpuor0KPlWXydfj9z+Nhw1ZNUelKLHPGcZVvtBBNaYPt7Oct0JncOTfQsHue9l WoInGawOsbHMLbCCDyLjcTWQMBdmfKsa/jBJIA1+b0hvNgOmF+EzUbRqbtCxJ5tV 2spQJhtOZfHQkwLSWsqCSbqwG35wwx1uK+PeaH87g69IdTvbu57BU3QwdKQG/0Lo x0BJl9vqGvN8faBPsFTvaiiGuzJvyng= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:33 2025 by rpki-client