$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91843d97-6369-3bdf-9c6a-602add1aefbd.roa File: 91843d97-6369-3bdf-9c6a-602add1aefbd.roa (raw, json) Hash identifier: B4KiNboEiJ/gQisReMnct3HofpQFKAWrL010sALD/Ps= Subject key identifier: 98:14:4E:54:87:AD:D5:BE:3A:F2:9F:35:7C:B9:FA:5A:4F:9D:7D:AE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D649A885A906F8EBBFFE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91843d97-6369-3bdf-9c6a-602add1aefbd.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:49:a8:85:a9:06:f8:eb:bf:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=39d8a633-01f5-463e-9328-562030b3300b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:dc:68:02:0d:95:06:a4:dd:55:1a:6e:99: b1:e2:fd:69:a4:b1:9d:3d:aa:f2:b5:a6:59:41:5a: b8:42:26:72:3d:a8:8c:54:23:30:d1:7a:b8:4b:1a: ce:53:52:19:92:26:15:c5:ec:1f:42:ed:cf:fe:aa: b0:cf:91:37:5c:68:ef:de:6e:58:1f:0f:4b:8e:e0: a5:8c:14:a8:2c:0a:bb:f3:93:9b:12:4e:9a:22:cc: 42:3c:0b:01:c5:65:a4:5f:69:01:f9:c4:08:41:28: 71:5c:90:82:3a:b4:78:03:4f:b1:14:d7:45:ba:24: b8:0a:0d:ef:20:94:5c:e2:6c:4d:f2:cc:79:ad:ea: 36:69:45:b4:74:b6:9c:95:6a:cb:cb:0e:fc:e9:be: 47:b1:c4:c7:d8:67:56:00:40:40:49:1e:9c:18:60: 1a:02:d6:62:0d:b2:12:19:f6:43:ae:20:1c:e4:f7: 18:87:52:94:48:d8:a5:ee:8b:5b:ea:c7:48:83:fd: f7:91:67:6c:fa:25:3f:3f:d1:44:22:91:d6:7a:f3: 42:d2:88:7e:f7:03:cc:2d:d8:52:82:59:7d:3f:ee: 37:32:ad:e9:8a:c7:ea:b3:f6:6d:da:64:d0:8d:eb: a4:c1:89:14:89:26:56:36:f5:db:4a:6c:0b:ed:6c: 61:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:14:4E:54:87:AD:D5:BE:3A:F2:9F:35:7C:B9:FA:5A:4F:9D:7D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91843d97-6369-3bdf-9c6a-602add1aefbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:71:e3:d9:d8:59:ce:03:8f:54:bb:e7:04:77:5a:19:b0:d1: 77:75:74:0c:52:1c:5c:6e:f8:52:ba:af:4d:96:94:6f:fe:00: da:5f:e9:af:f1:a4:dd:b0:9f:84:26:d8:9f:35:cc:34:b0:3d: e8:39:5d:bc:ed:75:de:a6:be:ff:4d:65:4a:b0:d7:5f:c1:bc: 69:f0:f4:44:18:fa:11:cf:09:4c:7a:c6:0a:92:ab:53:a8:36: bd:1f:ba:26:2d:fe:fb:e1:24:e0:6f:20:42:f6:7d:79:ca:20: d2:3f:3d:5e:31:99:88:0a:1b:ec:9e:32:81:d5:de:7a:2f:92: 3c:d7:b9:18:2a:97:fb:9b:90:0a:52:06:81:3c:9f:df:13:9f: 1a:5b:6c:87:87:8a:34:11:50:4e:63:49:ae:78:ca:09:dd:11: 76:f1:0a:45:9c:d2:60:e3:1c:f4:89:6c:76:0d:ed:73:ff:e2: be:98:e8:54:b1:d3:2e:3d:96:12:c8:49:b5:f8:99:e7:a4:52: 6f:c9:75:32:89:50:e2:14:6d:9c:ab:10:85:45:82:06:1e:37: f7:7f:90:e2:aa:a1:62:33:de:74:61:72:34:87:10:ef:a4:53: 65:f8:b0:e6:6c:22:0b:db:a2:8b:53:29:5a:d0:bc:25:3e:71: 9b:d2:ac:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kmohakG+Ou//oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MzlkOGE2MzMtMDFmNS00NjNlLTkzMjgtNTYyMDMwYjMzMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NHcaAINlQak3VUabpmx4v1ppLGdParytaZZ QVq4QiZyPaiMVCMw0Xq4SxrOU1IZkiYVxewfQu3P/qqwz5E3XGjv3m5YHw9LjuCl jBSoLAq785ObEk6aIsxCPAsBxWWkX2kB+cQIQShxXJCCOrR4A0+xFNdFuiS4Cg3v IJRc4mxN8sx5reo2aUW0dLaclWrLyw786b5HscTH2GdWAEBASR6cGGAaAtZiDbIS GfZDriAc5PcYh1KUSNil7otb6sdIg/33kWds+iU/P9FEIpHWevNC0oh+9wPMLdhS gll9P+43Mq3pisfqs/Zt2mTQjeukwYkUiSZWNvXbSmwL7WxhWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgUTlSHrdW+OvKfNXy5+lpPnX2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTE4NDNkOTctNjM2OS0z YmRmLTljNmEtNjAyYWRkMWFlZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhx49nYWc4Dj1S75wR3Whmw0Xd1dAxSHFxu+FK6r02WlG/+ANpf6a/x pN2wn4Qm2J81zDSwPeg5Xbztdd6mvv9NZUqw11/BvGnw9EQY+hHPCUx6xgqSq1Oo Nr0fuiYt/vvhJOBvIEL2fXnKINI/PV4xmYgKG+yeMoHV3novkjzXuRgql/ubkApS BoE8n98TnxpbbIeHijQRUE5jSa54ygndEXbxCkWc0mDjHPSJbHYN7XP/4r6Y6FSx 0y49lhLISbX4meekUm/JdTKJUOIUbZyrEIVFggYeN/d/kOKqoWIz3nRhcjSHEO+k U2X4sOZsIgvbootTKVrQvCU+cZvSrC4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:36 2025 by rpki-client