$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/969b0afd-f5de-37f5-8fd2-c4c392870bad.roa File: 969b0afd-f5de-37f5-8fd2-c4c392870bad.roa (raw, json) Hash identifier: P6+mIbeNjUX7aNRER2pe0VD/M7qs4wr6TautPUmUZYU= Subject key identifier: CE:3C:DE:5B:24:AA:D9:5C:04:AE:F4:30:CA:F4:42:84:79:AD:E0:60 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65172629DA12D5DF36200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/969b0afd-f5de-37f5-8fd2-c4c392870bad.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:51:72:62:9d:a1:2d:5d:f3:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=59b864cd-1405-4662-8912-504a8ef5c0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:f3:9d:bf:be:e5:69:a5:a9:be:14:5e:b9: 2c:7d:9c:b9:cb:9f:da:ad:ae:bc:e4:de:9a:39:3c: 25:fe:ca:b7:e1:e5:a3:0d:c7:57:41:3b:34:a6:8d: ec:af:78:69:fb:d1:82:1f:74:8f:db:b9:a1:7a:2d: ba:da:26:17:0d:10:54:d5:a9:c9:aa:df:56:cd:73: a2:16:7d:a5:0c:97:58:4f:75:45:85:56:04:f2:6c: b6:17:db:71:93:9a:84:e9:c0:3f:a0:1f:65:2a:1c: 74:5c:82:9b:3d:cf:c7:2a:a3:7e:60:7e:ae:45:13: 60:73:38:a8:c5:d3:42:b4:51:2e:8a:f3:55:86:e9: 9f:d0:ba:f1:2a:fd:b7:9b:44:62:4e:f6:42:f9:ba: 04:eb:5a:5e:98:e8:cf:13:63:e1:1f:04:b4:7a:11: ad:85:7f:7e:52:e4:05:02:65:3b:56:f9:9f:16:3a: c2:12:6f:65:a6:a0:1e:dc:be:5b:ca:53:dc:bf:6d: 94:16:70:c6:2e:65:79:d6:53:3a:8f:b7:80:1c:00: 8d:8b:4e:51:40:40:ea:3f:e3:f3:e9:d9:54:85:0d: d9:34:4e:9d:1e:a7:fa:29:26:44:23:a7:3f:d7:53: 93:bf:98:3d:df:fc:fc:ba:fc:41:4e:30:5f:c0:6c: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3C:DE:5B:24:AA:D9:5C:04:AE:F4:30:CA:F4:42:84:79:AD:E0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/969b0afd-f5de-37f5-8fd2-c4c392870bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:62:6a:91:49:23:63:03:6f:55:87:d8:ec:e3:6b:dc:00:6a: 5b:97:27:d2:64:ca:61:fe:82:5c:70:e9:26:7a:a2:c5:c4:b3: 66:a5:5f:12:96:a2:ab:3a:58:4e:e6:37:cf:cf:37:2e:df:59: 1d:11:e5:56:bb:83:85:56:b6:b5:30:59:4f:98:f9:19:a4:f4: 97:2d:5b:32:b7:36:14:ef:e6:f9:b7:fa:5f:25:47:5d:5a:31: 13:9a:c8:36:51:7b:51:cc:23:ff:4d:0b:d2:db:a3:4f:00:d3: d4:22:0f:cb:ed:fa:0b:63:d4:98:7b:81:86:50:03:ac:76:a6: c3:9f:ed:90:c2:02:4d:22:fb:a0:57:89:f5:33:a7:ab:46:36: 17:01:9a:db:8b:48:3a:93:4a:31:1b:68:f6:66:1f:4d:4c:b1: 6f:a9:f6:d1:5a:ec:1b:0f:4f:33:82:59:7d:ea:b9:1c:65:28: 78:26:9c:6f:b4:85:c2:83:a1:30:26:55:05:0d:60:51:f5:bd: 61:4a:a3:7c:1d:4f:ab:ba:53:cd:f5:72:d9:58:ae:42:37:a8: 34:b3:20:a5:d8:e1:38:98:6f:a9:82:4c:37:a8:f1:d9:83:5d: f6:dd:18:2f:4c:ef:69:9f:6a:83:a9:87:b7:bf:9e:f6:0c:56: 0f:32:94:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lFyYp2hLV3zYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NTliODY0Y2QtMTQwNS00NjYyLTg5MTItNTA0YThlZjVjMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCDznb++5Wmlqb4UXrksfZy5y5/ara685N6a OTwl/sq34eWjDcdXQTs0po3sr3hp+9GCH3SP27mhei262iYXDRBU1anJqt9WzXOi Fn2lDJdYT3VFhVYE8my2F9txk5qE6cA/oB9lKhx0XIKbPc/HKqN+YH6uRRNgczio xdNCtFEuivNVhumf0LrxKv23m0RiTvZC+boE61pemOjPE2PhHwS0ehGthX9+UuQF AmU7VvmfFjrCEm9lpqAe3L5bylPcv22UFnDGLmV51lM6j7eAHACNi05RQEDqP+Pz 6dlUhQ3ZNE6dHqf6KSZEI6c/11OTv5g93/z8uvxBTjBfwGxnRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM483lskqtlcBK70MMr0QoR5reBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTY5YjBhZmQtZjVkZS0z N2Y1LThmZDItYzRjMzkyODcwYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFiapFJI2MDb1WH2Ozja9wAaluXJ9JkymH+glxw6SZ6osXEs2alXxKW oqs6WE7mN8/PNy7fWR0R5Va7g4VWtrUwWU+Y+Rmk9JctWzK3NhTv5vm3+l8lR11a MROayDZRe1HMI/9NC9Lbo08A09QiD8vt+gtj1Jh7gYZQA6x2psOf7ZDCAk0i+6BX ifUzp6tGNhcBmtuLSDqTSjEbaPZmH01MsW+p9tFa7BsPTzOCWX3quRxlKHgmnG+0 hcKDoTAmVQUNYFH1vWFKo3wdT6u6U831ctlYrkI3qDSzIKXY4TiYb6mCTDeo8dmD XfbdGC9M72mfaoOph7e/nvYMVg8ylFw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:23 2025 by rpki-client