$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa File: a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa (raw, json) Hash identifier: TV6q0m3dMoPWLD0ioo47gKeWPaTciuwFU/5SssvsCSw= Subject key identifier: 8A:32:01:8A:DF:E0:1E:AF:EB:80:33:78:E9:7D:44:C1:AA:72:01:1D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D6526BBA9F213F416E42C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:52:6b:ba:9f:21:3f:41:6e:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=fefc8c65-a40e-428f-8eec-abac9a07e3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9c:72:51:46:e2:5f:5b:7d:42:2c:fe:4a:fd: c5:d2:91:e1:04:eb:ed:60:3f:28:f2:30:2a:97:b2: 73:0d:6a:80:0a:d4:60:c8:4b:67:53:91:23:3c:53: 15:e5:15:aa:1d:ed:50:fc:a2:c3:f9:1a:cf:91:e3: c9:06:ee:93:59:17:bd:df:8a:66:d9:1c:ac:bc:9c: 61:3a:80:18:06:a0:83:7b:8b:6e:ad:13:bc:29:45: 2d:d5:0b:26:86:7d:1b:b0:58:3f:c6:5d:bd:59:b6: 3f:1b:34:d0:fb:6a:31:bb:39:ef:a4:e5:f7:f3:06: 69:29:3c:39:e9:4f:00:47:f5:4b:22:25:40:80:29: 30:ea:1b:61:20:c7:15:f6:58:32:e0:b4:16:8e:8e: dd:bf:df:20:04:7f:2d:5d:17:f0:72:a8:74:a8:0e: 18:a2:59:da:c4:83:b8:9e:1a:87:a4:0f:d7:08:61: f1:2d:06:4f:f2:70:53:5c:f2:81:c3:ac:3e:da:09: b9:0b:b0:45:7d:72:40:5d:c9:2e:0c:65:da:05:6d: 83:8f:4a:36:2b:a0:67:27:fe:ca:5a:2d:d8:91:d9: 83:04:87:58:07:3e:2c:8e:63:3b:84:60:05:45:c9: 39:39:50:70:13:be:22:c1:81:12:10:10:6b:8a:a8: 9b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:32:01:8A:DF:E0:1E:AF:EB:80:33:78:E9:7D:44:C1:AA:72:01:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:68:00:59:06:d4:05:b1:87:4e:01:62:84:89:87:89:ee:4b: 1f:01:8d:11:c7:96:c7:08:82:89:32:8d:e6:12:ea:70:c1:c6: 70:72:62:c5:ea:be:25:66:8b:bd:6d:55:e0:84:18:6e:7b:aa: 93:37:9b:ee:00:e5:21:1f:9f:a2:37:c7:63:41:f4:64:f6:32: bb:a2:27:df:77:32:b3:5d:fd:23:95:26:75:13:47:8d:78:c7: 6f:c8:c8:ab:f5:1f:4a:4c:ae:0c:c7:85:b0:ad:7c:33:4b:dd: dc:aa:68:42:ea:6c:af:89:fe:89:ab:6c:ba:37:cf:e8:ad:66: a2:e3:76:a5:f5:a9:91:64:db:06:34:c8:93:75:cc:37:47:79: ed:cc:89:d1:f6:9b:3f:b0:5e:38:9d:86:7b:88:76:d0:d9:20: 77:d3:7a:11:4c:ca:2b:08:77:cb:ac:2d:e1:0e:8e:68:3c:75: ef:04:7e:e8:69:d3:19:fe:65:f6:59:76:ca:23:b8:a7:10:60: ed:c1:3f:91:8e:50:38:20:a0:68:b4:04:0d:99:d0:50:4b:e4: 9a:96:59:00:17:e8:b7:48:75:34:f6:2b:38:ae:38:65:3a:15: 11:ff:ad:fd:64:16:66:16:df:41:cb:97:7f:62:0d:74:ed:22: aa:18:ea:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lJrup8hP0FuQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZmVmYzhjNjUtYTQwZS00MjhmLThlZWMtYWJhYzlhMDdlM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJxyUUbiX1t9Qiz+Sv3F0pHhBOvtYD8o8jAq l7JzDWqACtRgyEtnU5EjPFMV5RWqHe1Q/KLD+RrPkePJBu6TWRe934pm2RysvJxh OoAYBqCDe4turRO8KUUt1Qsmhn0bsFg/xl29WbY/GzTQ+2oxuznvpOX38wZpKTw5 6U8AR/VLIiVAgCkw6hthIMcV9lgy4LQWjo7dv98gBH8tXRfwcqh0qA4YolnaxIO4 nhqHpA/XCGHxLQZP8nBTXPKBw6w+2gm5C7BFfXJAXckuDGXaBW2Dj0o2K6BnJ/7K Wi3YkdmDBIdYBz4sjmM7hGAFRck5OVBwE74iwYESEBBriqibNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoyAYrf4B6v64AzeOl9RMGqcgEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTgwN2MxY2MtZTU2OS0z MWY1LTlmN2UtNDdmYzRmM2E2YmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEflMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpoAFkG1AWxh04BYoSJh4nuSx8BjRHHlscIgokyjeYS6nDBxnByYsXq viVmi71tVeCEGG57qpM3m+4A5SEfn6I3x2NB9GT2MruiJ993MrNd/SOVJnUTR414 x2/IyKv1H0pMrgzHhbCtfDNL3dyqaELqbK+J/omrbLo3z+itZqLjdqX1qZFk2wY0 yJN1zDdHee3MidH2mz+wXjidhnuIdtDZIHfTehFMyisId8usLeEOjmg8de8Efuhp 0xn+ZfZZdsojuKcQYO3BP5GOUDggoGi0BA2Z0FBL5JqWWQAX6LdIdTT2KziuOGU6 FRH/rf1kFmYW30HLl39iDXTtIqoY6tA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:54 2025 by rpki-client