$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7db0c2-e203-319a-b4ca-beca1a786ff9.roa File: 9c7db0c2-e203-319a-b4ca-beca1a786ff9.roa (raw, json) Hash identifier: 34JF344XNmyN4S1IFVRm1ZEf+KiBUo9jNjxuNnRlrug= Subject key identifier: 87:8A:F4:17:EC:1A:3F:4D:D3:73:5F:C0:2D:E2:AB:8B:59:4D:3E:4C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACF7106FBD047F293E4DEF980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7db0c2-e203-319a-b4ca-beca1a786ff9.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.70.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:06:fb:d0:47:f2:93:e4:de:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=c1e68faa-3d3c-469f-949a-d7ace5e08b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:66:64:f6:5f:97:c2:a6:0b:d8:1b:fb:2a:c4: 76:b3:26:0d:a7:d5:90:f1:0d:5c:9d:b1:2a:fb:34: 0b:b6:c0:40:52:22:a5:9b:da:1d:5e:f8:54:7a:27: 1c:c4:20:2d:94:3b:f4:5b:7a:e4:5c:7f:ed:68:6b: 1b:1f:fa:d5:78:35:35:20:15:2d:34:25:fd:ae:e2: a8:0c:f8:38:77:46:da:ae:49:1d:56:a5:cf:64:d6: 86:f8:07:96:ed:f9:c6:46:3c:75:33:a7:7d:26:cb: ec:a1:20:c8:15:e2:b6:a1:71:06:c7:79:8f:cb:43: 4c:08:8c:5e:91:64:a7:54:75:f1:e1:0c:7d:01:b2: 4b:a4:96:09:31:26:25:f1:4c:8a:b8:a3:4b:fd:35: 4d:54:8c:07:56:c6:ed:99:01:17:95:1b:af:08:49: a9:86:b8:5f:e1:89:0a:6c:15:9e:87:08:ec:95:5e: 5b:c1:c5:21:7d:9e:3a:cd:f4:01:eb:63:6a:33:be: 4f:b1:1b:76:7d:13:ff:99:cc:90:36:bd:79:e7:2a: 13:0d:cc:38:76:c8:8a:b3:c9:a2:da:d2:d8:3b:5e: 76:b1:63:10:f9:5d:6f:24:c3:26:4b:9a:28:41:dd: b3:e5:7a:c7:0c:6a:6b:8b:cc:c2:2b:95:eb:8d:97: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8A:F4:17:EC:1A:3F:4D:D3:73:5F:C0:2D:E2:AB:8B:59:4D:3E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c7db0c2-e203-319a-b4ca-beca1a786ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9d:fe:f4:8e:47:d3:14:b8:a1:09:a1:e8:26:a1:b2:5f:6b: 53:5c:c7:f4:dc:e4:1d:53:a0:04:73:77:7a:f9:94:e1:23:20: 12:e6:41:ea:a9:41:0f:67:8b:ba:b8:eb:99:d6:e2:f8:28:e7: 6b:0d:62:ab:0c:91:54:32:9b:d0:cb:56:42:61:ee:d2:09:d0: bf:d5:84:ed:57:78:14:87:66:bb:42:b5:a6:b2:ac:0b:38:4d: 88:39:db:a0:c5:24:f1:47:35:55:57:17:65:17:d3:a3:1f:79: 16:7f:ad:1d:b5:2d:17:6e:cc:cb:02:46:4c:dd:71:18:d8:8a: 64:71:46:92:11:3e:fb:dc:8f:67:2f:60:7a:66:bc:63:ef:cd: ef:15:21:e2:37:65:00:9f:0f:40:2b:0d:57:f9:9b:78:37:e2: bc:15:d9:2d:2f:af:b3:7e:30:9d:19:b8:63:20:65:55:e2:bb: aa:cf:b4:22:e0:9f:79:8b:cb:7f:5b:3d:29:f0:9e:23:5b:9f: 48:5d:46:f0:af:b2:d7:14:28:32:0b:a1:0f:d6:93:1f:5e:72: a3:a1:00:3c:4a:07:0c:3f:74:ec:2f:4f:95:fd:4a:5a:c6:33: 09:de:b3:9c:52:e2:1f:d5:cd:b7:d0:07:56:ca:12:fa:a8:d4: 7d:de:a9:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQb70Efyk+Te+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk YzFlNjhmYWEtM2QzYy00NjlmLTk0OWEtZDdhY2U1ZTA4Yjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimZk9l+XwqYL2Bv7KsR2syYNp9WQ8Q1cnbEq +zQLtsBAUiKlm9odXvhUeiccxCAtlDv0W3rkXH/taGsbH/rVeDU1IBUtNCX9ruKo DPg4d0barkkdVqXPZNaG+AeW7fnGRjx1M6d9JsvsoSDIFeK2oXEGx3mPy0NMCIxe kWSnVHXx4Qx9AbJLpJYJMSYl8UyKuKNL/TVNVIwHVsbtmQEXlRuvCEmphrhf4YkK bBWehwjslV5bwcUhfZ46zfQB62NqM75PsRt2fRP/mcyQNr155yoTDcw4dsiKs8mi 2tLYO152sWMQ+V1vJMMmS5ooQd2z5XrHDGpri8zCK5XrjZcFvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeK9BfsGj9N03NfwC3iq4tZTT5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWM3ZGIwYzItZTIwMy0z MTlhLWI0Y2EtYmVjYTFhNzg2ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqd/vSOR9MUuKEJoegmobJfa1Ncx/Tc5B1ToARzd3r5lOEjIBLmQeqp QQ9ni7q465nW4vgo52sNYqsMkVQym9DLVkJh7tIJ0L/VhO1XeBSHZrtCtaayrAs4 TYg526DFJPFHNVVXF2UX06MfeRZ/rR21LRduzMsCRkzdcRjYimRxRpIRPvvcj2cv YHpmvGPvze8VIeI3ZQCfD0ArDVf5m3g34rwV2S0vr7N+MJ0ZuGMgZVXiu6rPtCLg n3mLy39bPSnwniNbn0hdRvCvstcUKDILoQ/Wkx9ecqOhADxKBww/dOwvT5X9SlrG Mwnes5xS4h/VzbfQB1bKEvqo1H3eqQo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:53 2025 by rpki-client