$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a62af52e-109f-3786-bbda-f2baf4984586.roa File: a62af52e-109f-3786-bbda-f2baf4984586.roa (raw, json) Hash identifier: EOUVHencFQc8RhkbAlz6KeGCTBr2G0ULcw+pShacrgY= Subject key identifier: E0:52:8E:4C:3A:0F:C6:A0:1D:77:22:EE:3F:92:C0:0E:B8:63:2B:12 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D6600635FD932693DDB100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a62af52e-109f-3786-bbda-f2baf4984586.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:60:06:35:fd:93:26:93:dd:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=ca4b4dd3-3629-4f4a-a069-4931ccfcfbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:e9:c3:74:be:a5:3f:cd:44:2a:54:3b:d2: 7e:6a:45:c1:e2:f8:31:65:25:5a:ae:b6:36:2d:d8: 1b:ea:05:9c:0d:94:11:58:a3:22:2e:9b:0b:b8:d2: 10:4e:c6:b6:4b:d7:35:8f:ac:cf:c5:71:44:cc:3b: 67:44:73:ec:6b:bd:29:9e:56:a3:cc:62:71:a2:2f: ca:d5:bf:bc:93:ca:23:e8:18:16:ee:21:42:50:17: 43:56:65:37:fe:18:a0:de:37:22:dd:13:26:68:05: c0:d8:ad:94:0e:83:17:d6:b7:32:71:ae:74:a2:57: 8c:a4:18:dd:b0:21:96:26:fb:bb:9d:c8:cf:49:15: 6f:68:e8:a9:3a:a3:42:3e:e1:a9:e8:36:f8:3f:84: 05:f5:87:88:5e:82:e4:0a:5c:f1:34:35:81:5c:ea: 41:44:f6:f5:12:37:42:dc:16:81:19:7d:b3:d7:56: 9f:48:08:64:2e:4c:e1:f1:43:a1:23:b6:33:b5:af: 5c:52:37:69:31:9f:f0:52:f8:55:aa:5a:fc:c3:3b: dc:0d:61:03:50:ca:97:3e:f8:e7:a9:2b:81:11:a9: 81:13:c7:64:b4:1b:f5:36:fd:e1:82:9c:86:58:7d: 1e:21:e2:11:cd:c4:34:49:48:1f:90:58:73:5b:e2: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:52:8E:4C:3A:0F:C6:A0:1D:77:22:EE:3F:92:C0:0E:B8:63:2B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a62af52e-109f-3786-bbda-f2baf4984586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b4:da:4e:87:34:c2:66:53:6e:cc:d0:e2:82:de:72:9f:ad: a2:98:c8:9d:40:48:3d:c2:f6:55:17:91:d6:71:70:12:0c:33: cf:02:4f:eb:e1:a7:d4:e2:9c:74:15:39:83:b6:29:76:ce:e4: 10:e3:59:90:b2:bb:34:5c:44:05:97:05:84:d3:72:f1:99:02: 83:61:59:44:39:ee:3e:99:8e:d0:91:79:cc:ed:d7:ac:e8:7f: 11:8a:0c:ea:2c:66:78:38:f8:b1:19:c7:90:7e:4d:7f:12:a3: 4b:f9:84:1d:15:a3:19:c5:81:45:d7:06:73:3d:58:12:58:51: 56:b5:7b:f0:72:bb:1b:7e:12:d2:dd:78:ce:c8:de:a0:b9:7f: 6a:8e:36:91:8e:da:63:88:bb:8d:db:14:54:c2:c9:fb:b9:d7: 42:6a:68:65:c2:f5:77:5c:bb:c0:96:98:fd:6d:c4:ef:96:18: 60:13:a9:dc:09:d8:94:7b:3c:c5:68:c1:42:6b:60:5a:b4:30: 3d:81:6d:40:f8:e4:84:6c:3c:54:4f:de:c0:fc:86:54:ac:c2: 4e:90:c2:f2:1f:15:13:92:fc:55:9f:0e:f9:cd:5f:ec:1d:9b: de:65:4e:db:01:5a:a7:8b:af:bb:5a:00:bf:09:22:9f:60:92: e0:73:d4:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mAGNf2TJpPdsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk Y2E0YjRkZDMtMzYyOS00ZjRhLWEwNjktNDkzMWNjZmNmYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZzpw3S+pT/NRCpUO9J+akXB4vgxZSVarrY2 Ldgb6gWcDZQRWKMiLpsLuNIQTsa2S9c1j6zPxXFEzDtnRHPsa70pnlajzGJxoi/K 1b+8k8oj6BgW7iFCUBdDVmU3/hig3jci3RMmaAXA2K2UDoMX1rcyca50oleMpBjd sCGWJvu7ncjPSRVvaOipOqNCPuGp6Db4P4QF9YeIXoLkClzxNDWBXOpBRPb1EjdC 3BaBGX2z11afSAhkLkzh8UOhI7Yzta9cUjdpMZ/wUvhVqlr8wzvcDWEDUMqXPvjn qSuBEamBE8dktBv1Nv3hgpyGWH0eIeIRzcQ0SUgfkFhzW+LutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBSjkw6D8agHXci7j+SwA64YysSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTYyYWY1MmUtMTA5Zi0z Nzg2LWJiZGEtZjJiYWY0OTg0NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO02k6HNMJmU27M0OKC3nKfraKYyJ1ASD3C9lUXkdZxcBIMM88CT+vh p9TinHQVOYO2KXbO5BDjWZCyuzRcRAWXBYTTcvGZAoNhWUQ57j6ZjtCReczt16zo fxGKDOosZng4+LEZx5B+TX8So0v5hB0VoxnFgUXXBnM9WBJYUVa1e/Byuxt+EtLd eM7I3qC5f2qONpGO2mOIu43bFFTCyfu510JqaGXC9Xdcu8CWmP1txO+WGGATqdwJ 2JR7PMVowUJrYFq0MD2BbUD45IRsPFRP3sD8hlSswk6QwvIfFROS/FWfDvnNX+wd m95lTtsBWqeLr7taAL8JIp9gkuBz1A0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:17:09 2025 by rpki-client