$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa File: 9ff06541-3068-32ab-8810-f331d453858b.roa (raw, json) Hash identifier: ltU7f6lw0h2nFjHjhhmfGiiw17Dx/s2H3mAQyxT2yVI= Subject key identifier: 37:65:73:E9:DA:DA:7B:8A:FB:29:65:D6:4C:C9:5F:77:1E:28:E8:39 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64C1F7F2A8827F8D5C948 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4c:1f:7f:2a:88:27:f8:d5:c9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=9cf91994-a4c3-4967-b9dc-9fbc789b19d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:3a:c3:eb:dd:d8:f3:8a:83:ca:ec:7f:5d: bb:01:fb:a2:ad:d5:9e:c4:3f:d2:94:0a:06:a9:2e: e6:71:b0:24:96:c0:d7:81:e2:0e:b5:a7:94:d8:e8: ae:de:8d:7f:1c:77:a5:0c:32:7d:62:d0:40:ff:6b: 7c:5d:cc:b5:f6:ff:7a:94:75:5c:e0:ed:84:a4:f6: 7a:65:1c:45:9b:04:d1:99:2e:0c:52:45:7b:75:d3: 19:c5:f6:02:0b:a9:b4:1d:81:d1:57:92:00:77:fe: 2e:be:a2:72:80:23:e8:57:fa:a3:3b:79:10:c7:74: c7:d5:5d:de:d9:87:7c:bb:fa:28:d4:2c:65:db:06: d5:9f:fb:13:4d:53:c9:8b:36:bb:e3:e4:b2:97:17: b8:3e:56:de:3b:49:28:f4:7c:c6:48:23:66:18:a3: 7f:2a:c2:a7:c0:6b:af:08:1a:0a:d4:51:c1:53:1b: 77:8c:bd:ae:f1:1b:91:75:73:9c:42:7a:7a:0c:cd: 82:25:eb:e1:cd:b7:8f:52:27:5a:ea:14:e1:b3:4d: cb:6f:83:55:8a:63:98:49:40:9c:09:d1:2b:23:95: c3:b9:90:8a:e1:01:38:56:cc:84:f0:48:7d:c0:52: 9f:3c:35:c7:d3:ef:ac:33:c0:3f:35:cd:6e:f0:cf: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:73:E9:DA:DA:7B:8A:FB:29:65:D6:4C:C9:5F:77:1E:28:E8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:3e:06:48:e2:51:ac:53:0e:1e:ab:57:16:5a:60:ff:e0:f5: 7d:8c:2f:06:7c:9a:8f:9c:c1:be:f3:ce:bd:90:5c:2f:e5:45: 7c:dc:bd:53:72:9d:eb:70:9c:88:42:93:32:7d:e6:f0:ef:bd: 95:73:48:92:cb:d8:9e:f4:77:a6:02:5f:31:78:62:ec:ca:82: 9a:ff:02:0e:0c:a7:84:dc:0b:2d:3b:74:b9:ae:eb:73:94:16: 30:2a:24:ac:05:2f:07:16:1b:95:8f:a3:19:cb:1f:0b:92:d2: 79:b3:b9:67:78:15:c0:47:57:cd:54:d8:71:c4:8d:87:5e:c0: 99:dc:5f:e3:d4:cf:ff:b4:5f:39:4c:9c:99:b7:58:6f:78:f1: 22:91:22:ac:2b:37:eb:08:4a:39:e4:6c:70:85:4d:ea:50:33: ed:e3:d8:65:81:85:b3:f9:d7:3d:22:aa:88:9b:9d:aa:41:44: 45:71:49:01:9b:ff:84:86:8b:19:a6:82:2a:d8:cd:f1:9f:46: 9b:24:41:fb:47:32:df:4b:1d:07:e2:97:f0:52:9d:43:de:b8: b0:31:81:e1:09:d9:b2:b2:23:fd:1b:d3:4d:19:8e:2b:b5:62: f8:12:68:ec:c1:a5:23:cc:f7:3b:3e:ca:3d:8b:7b:03:d8:26: f8:11:4c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kwffyqIJ/jVyUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk OWNmOTE5OTQtYTRjMy00OTY3LWI5ZGMtOWZiYzc4OWIxOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR06w+vd2POKg8rsf127AfuirdWexD/SlAoG qS7mcbAklsDXgeIOtaeU2Oiu3o1/HHelDDJ9YtBA/2t8Xcy19v96lHVc4O2EpPZ6 ZRxFmwTRmS4MUkV7ddMZxfYCC6m0HYHRV5IAd/4uvqJygCPoV/qjO3kQx3TH1V3e 2Yd8u/oo1Cxl2wbVn/sTTVPJiza74+Sylxe4PlbeO0ko9HzGSCNmGKN/KsKnwGuv CBoK1FHBUxt3jL2u8RuRdXOcQnp6DM2CJevhzbePUida6hThs03Lb4NVimOYSUCc CdErI5XDuZCK4QE4VsyE8Eh9wFKfPDXH0++sM8A/Nc1u8M9hrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdlc+na2nuK+yll1kzJX3ceKOg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWZmMDY1NDEtMzA2OC0z MmFiLTg4MTAtZjMzMWQ0NTM4NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM+BkjiUaxTDh6rVxZaYP/g9X2MLwZ8mo+cwb7zzr2QXC/lRXzcvVNy netwnIhCkzJ95vDvvZVzSJLL2J70d6YCXzF4YuzKgpr/Ag4Mp4TcCy07dLmu63OU FjAqJKwFLwcWG5WPoxnLHwuS0nmzuWd4FcBHV81U2HHEjYdewJncX+PUz/+0XzlM nJm3WG948SKRIqwrN+sISjnkbHCFTepQM+3j2GWBhbP51z0iqoibnapBREVxSQGb /4SGixmmgirYzfGfRpskQftHMt9LHQfil/BSnUPeuLAxgeEJ2bKyI/0b000Zjiu1 YvgSaOzBpSPM9zs+yj2LewPYJvgRTE0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:59 2025 by rpki-client