$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9adbafcd-3e89-3384-a841-a56fd04e9a52.roa File: 9adbafcd-3e89-3384-a841-a56fd04e9a52.roa (raw, json) Hash identifier: EtGc/KcgkdPRyWNUTamKdm2mYj93pj6U4mjX+0EYtTw= Subject key identifier: 20:A0:AD:0A:AA:76:DC:39:20:7A:D7:3B:C3:C2:0E:2C:A6:5D:33:6E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65F7829AC878576E51500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9adbafcd-3e89-3384-a841-a56fd04e9a52.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5f:78:29:ac:87:85:76:e5:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=809aed0e-90be-436a-920a-950f54afec40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:cc:3e:7b:e1:9b:49:b2:d0:f2:b8:12:cf: bb:30:43:f8:9e:a1:2e:30:34:77:e6:5e:2d:b8:3e: ea:10:ca:b0:a4:ac:3e:ab:01:2f:81:5b:85:dd:63: c5:ac:f8:50:f2:0e:8e:d0:91:4b:ec:97:50:74:24: b3:1e:17:b8:31:cc:36:61:d7:97:dc:4b:bb:92:ee: cb:d2:06:46:ae:2b:bc:02:c6:4c:c9:6a:e6:78:41: 89:a7:58:e8:a2:de:5d:b8:ad:c8:bd:0e:d5:b0:29: 52:1f:54:59:2f:2d:48:8f:3c:49:db:35:c2:48:63: a9:1a:3b:36:42:ef:f3:19:e9:06:f0:8c:86:f4:55: 11:5f:de:36:6f:44:dc:2c:d5:8a:58:29:c1:09:6b: e4:35:1c:1d:14:be:71:e2:9e:87:c0:da:7d:28:30: fe:c6:a1:42:40:9e:50:b5:35:38:a0:b2:af:6b:12: 66:69:33:5c:a3:92:61:0f:34:5e:b5:8b:31:a1:8d: 43:cc:bf:fe:19:62:7a:b7:72:24:52:58:d8:09:eb: c5:c7:f6:5f:4f:0d:f8:38:2b:19:62:27:ec:7f:d0: 81:8a:70:cc:11:8a:23:5a:a3:68:e8:8f:2f:2d:b7: d4:a5:ba:90:4e:bd:f0:f0:8a:ce:e1:8f:8f:e5:e4: f9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A0:AD:0A:AA:76:DC:39:20:7A:D7:3B:C3:C2:0E:2C:A6:5D:33:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9adbafcd-3e89-3384-a841-a56fd04e9a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d8:88:fb:18:1f:d6:78:74:f0:6c:cf:34:2d:75:f0:5a:e8: a0:e9:ed:0d:2b:19:b0:c5:48:e5:77:dc:77:1c:3b:69:d9:76: ab:e9:3b:50:2e:2c:5e:a8:6d:ec:00:9f:97:0c:62:7c:d7:fc: d5:d2:c6:c0:2f:c9:7e:7a:20:fb:e7:ac:58:7c:78:4c:9c:fb: 41:3e:e0:8b:e6:44:9c:9a:48:b7:6a:22:8c:6d:43:2f:c8:b2: e1:47:b9:05:b7:2a:a1:ea:3f:80:c8:2a:51:f5:1e:1e:ef:2e: d4:55:b3:9f:c1:e9:14:3e:6d:51:55:09:14:ce:25:5d:05:f7: da:a1:77:24:9c:82:62:ce:bf:c5:31:f9:32:85:9e:a7:25:dd: ac:c7:4b:81:6c:38:c7:fc:2d:d5:3a:2d:c0:21:f4:8c:29:fb: 8b:16:a8:b6:52:e7:32:71:35:a7:ea:22:1c:df:3e:d3:29:d1: 8f:8c:71:8d:08:ae:b7:b0:5d:03:65:07:27:66:c3:d4:1c:ab: 5a:34:21:67:c9:15:a0:94:67:25:20:4b:b5:49:85:c7:43:4d: aa:ba:f2:0d:d9:ae:0d:2e:90:91:45:5b:f1:c4:64:c7:10:8c: 32:af:72:70:60:8e:40:cb:a6:c0:47:29:0f:e9:4a:bc:af:83: 59:42:b2:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1l94KayHhXblFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ODA5YWVkMGUtOTBiZS00MzZhLTkyMGEtOTUwZjU0YWZlYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbLMPnvhm0my0PK4Es+7MEP4nqEuMDR35l4t uD7qEMqwpKw+qwEvgVuF3WPFrPhQ8g6O0JFL7JdQdCSzHhe4Mcw2YdeX3Eu7ku7L 0gZGriu8AsZMyWrmeEGJp1joot5duK3IvQ7VsClSH1RZLy1IjzxJ2zXCSGOpGjs2 Qu/zGekG8IyG9FURX942b0TcLNWKWCnBCWvkNRwdFL5x4p6HwNp9KDD+xqFCQJ5Q tTU4oLKvaxJmaTNco5JhDzRetYsxoY1DzL/+GWJ6t3IkUljYCevFx/ZfTw34OCsZ Yifsf9CBinDMEYojWqNo6I8vLbfUpbqQTr3w8IrO4Y+P5eT57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCgrQqqdtw5IHrXO8PCDiymXTNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWFkYmFmY2QtM2U4OS0z Mzg0LWE4NDEtYTU2ZmQwNGU5YTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHYiPsYH9Z4dPBszzQtdfBa6KDp7Q0rGbDFSOV33HccO2nZdqvpO1Au LF6obewAn5cMYnzX/NXSxsAvyX56IPvnrFh8eEyc+0E+4IvmRJyaSLdqIoxtQy/I suFHuQW3KqHqP4DIKlH1Hh7vLtRVs5/B6RQ+bVFVCRTOJV0F99qhdyScgmLOv8Ux +TKFnqcl3azHS4FsOMf8LdU6LcAh9Iwp+4sWqLZS5zJxNafqIhzfPtMp0Y+McY0I rrewXQNlBydmw9Qcq1o0IWfJFaCUZyUgS7VJhcdDTaq68g3Zrg0ukJFFW/HEZMcQ jDKvcnBgjkDLpsBHKQ/pSryvg1lCsnM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:00:46 2025 by rpki-client