$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa File: a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa (raw, json) Hash identifier: r+OiS/2m7wR3Xd8nRH/3UhjBBO1c/Z5kPqdfUEzgZSE= Subject key identifier: B8:05:89:CE:B4:85:9C:E8:83:8F:68:28:22:08:A2:62:B0:4E:D6:91 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65AAC52D8F03DF207A480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5a:ac:52:d8:f0:3d:f2:07:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=131fcdc8-a90d-4b88-89ed-9a935ae2e7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:11:65:77:ed:7c:6f:86:a7:ee:a0:28:b9: 8c:77:6d:68:f2:8d:27:61:35:7f:85:3b:3d:06:b5: 4f:5d:f9:48:d7:fe:9b:8a:9b:3c:2e:a2:3a:3f:da: 48:c0:5d:9a:4e:ea:04:6d:ca:69:97:ce:14:fd:fc: c3:5e:f0:6c:4f:68:15:bf:2b:3c:49:8c:ed:7b:43: 21:b5:40:7a:99:2c:a8:cf:7c:8f:28:cd:07:de:2c: 04:0f:3f:c7:fd:e3:49:8f:fb:93:0c:28:ef:da:00: 06:44:09:8a:f0:a7:b5:ef:14:8e:13:cd:59:ea:92: 4f:49:89:15:af:cf:1c:17:68:2a:4c:6c:78:39:3f: 45:67:47:d3:d5:35:e5:94:b3:8f:6e:28:0e:f6:8e: e2:98:3b:c0:0e:a9:a8:6f:61:8c:f4:2d:3f:cc:54: 43:89:dc:02:2b:7b:14:7d:67:ec:ec:57:97:91:cd: c2:9c:09:4d:ca:1f:11:2d:68:29:0c:87:09:fd:47: c1:2a:06:1d:25:71:b3:a4:4a:20:ae:3c:e5:8f:57: ab:91:7a:73:92:bb:b3:19:16:ce:e3:0c:92:4b:38: f6:2f:7d:68:04:92:f8:ea:c2:f8:57:9e:0b:4c:c2: 16:ce:8e:ae:40:7b:41:a4:10:f0:e2:f9:a6:13:bf: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:05:89:CE:B4:85:9C:E8:83:8F:68:28:22:08:A2:62:B0:4E:D6:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:69:83:8f:0a:70:7b:a4:f0:1c:d1:07:f6:bb:34:ba:bf:a9: cd:8a:5a:36:70:52:34:79:de:41:88:27:07:88:a9:25:db:2c: b0:b2:8c:02:7f:5e:df:a7:24:31:b4:e5:b1:c0:a3:33:f1:ef: 45:f5:32:02:c9:85:8e:60:d8:1b:63:62:ba:de:61:80:60:9c: d7:91:82:16:cc:c3:91:55:5a:20:5b:56:55:8f:88:b2:07:f6: 73:09:a1:94:a8:b8:4a:1d:92:38:c2:e1:fc:2f:f6:bd:39:23: 92:5b:5d:e5:4b:e1:1d:0f:90:64:5e:50:4d:98:05:c5:f0:a5: 37:5f:0f:56:6d:fc:bf:ab:00:62:5d:6e:89:6a:18:1f:9d:65: a6:b1:51:36:3e:f8:3a:06:15:07:2c:f3:06:00:ac:9c:89:7c: a2:a8:36:97:03:17:4c:a6:8f:ac:da:63:63:a1:0f:98:a5:1d: 30:67:67:aa:d4:43:d0:39:b6:db:11:56:79:ca:69:d6:8d:a1: f0:23:97:1c:46:77:f3:ff:79:ed:43:2d:3f:c3:00:fe:78:3b: be:ef:ba:8e:72:ec:9b:92:b7:97:00:a1:62:a6:94:2f:23:66: 67:f0:88:47:63:d3:6e:4b:0b:98:ad:11:a6:d6:31:86:81:33: 62:e8:2e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lqsUtjwPfIHpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MTMxZmNkYzgtYTkwZC00Yjg4LTg5ZWQtOWE5MzVhZTJlN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AIRZXftfG+Gp+6gKLmMd21o8o0nYTV/hTs9 BrVPXflI1/6bips8LqI6P9pIwF2aTuoEbcppl84U/fzDXvBsT2gVvys8SYzte0Mh tUB6mSyoz3yPKM0H3iwEDz/H/eNJj/uTDCjv2gAGRAmK8Ke17xSOE81Z6pJPSYkV r88cF2gqTGx4OT9FZ0fT1TXllLOPbigO9o7imDvADqmob2GM9C0/zFRDidwCK3sU fWfs7FeXkc3CnAlNyh8RLWgpDIcJ/UfBKgYdJXGzpEogrjzlj1erkXpzkruzGRbO 4wySSzj2L31oBJL46sL4V54LTMIWzo6uQHtBpBDw4vmmE78oDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgFic60hZzog49oKCIIomKwTtaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTM5NjJmNjAtNTAxNS0z ZjA2LWEzYzMtZDY5NjlmOWExYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdpg48KcHuk8BzRB/a7NLq/qc2KWjZwUjR53kGIJweIqSXbLLCyjAJ/ Xt+nJDG05bHAozPx70X1MgLJhY5g2BtjYrreYYBgnNeRghbMw5FVWiBbVlWPiLIH 9nMJoZSouEodkjjC4fwv9r05I5JbXeVL4R0PkGReUE2YBcXwpTdfD1Zt/L+rAGJd bolqGB+dZaaxUTY++DoGFQcs8wYArJyJfKKoNpcDF0ymj6zaY2OhD5ilHTBnZ6rU Q9A5ttsRVnnKadaNofAjlxxGd/P/ee1DLT/DAP54O77vuo5y7JuSt5cAoWKmlC8j ZmfwiEdj025LC5itEabWMYaBM2LoLj8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:49 2025 by rpki-client