$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa File: a88128f7-729a-3527-a66e-0f8deb6e69f8.roa (raw, json) Hash identifier: qPIK8k/iv0Frk13j2ekpMvlm+PwSg2DrmAeKVdpKM8s= Subject key identifier: 14:B0:5C:EC:8E:58:16:F5:91:73:69:10:9D:0D:30:48:47:9E:FE:16 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65CC6A09A990B2E9CB080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5c:c6:a0:9a:99:0b:2e:9c:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=1d778bbb-0a1b-4102-bc2c-4af9fb298f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:54:06:79:4e:b2:40:94:96:d4:f3:3a:45: 32:bc:52:29:db:32:fe:2b:8e:22:f6:4f:25:ef:e4: b0:a8:1e:25:a0:f8:d5:e9:7f:bd:a0:91:2f:a1:06: 8f:34:58:0f:b2:7e:6c:17:60:d1:63:66:a1:f5:8f: 57:5d:6b:81:a6:1d:65:d3:72:5f:9b:30:40:2b:75: 37:9a:df:eb:d6:83:e0:66:78:07:f9:78:9c:ac:ff: ac:1d:6d:e3:04:aa:7b:12:08:55:eb:88:be:b0:48: c7:72:a8:6c:d1:42:aa:b4:2a:56:a2:ed:0b:d0:79: 2f:5a:17:4f:23:8e:66:68:ce:a9:7e:7f:8b:8b:a5: 64:8d:7d:35:4d:cc:82:29:7d:05:8a:97:c7:be:c6: b0:76:4f:a6:43:c2:8f:23:7d:1e:80:e6:f3:ca:60: 5e:c3:2d:c9:93:16:91:88:13:9d:45:88:b9:df:9a: eb:9c:d3:32:71:9b:54:d8:97:d5:93:96:24:92:5f: 54:80:8d:e5:5f:0f:dc:95:34:7f:6e:9f:20:21:79: fe:3a:c8:b1:13:e0:80:5d:7f:2a:7c:dd:6f:b5:79: 49:76:a8:f7:c3:c8:fc:f7:72:c8:77:c3:ed:8a:1c: f6:18:04:16:48:2d:c3:a2:72:f0:a0:00:60:14:46: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B0:5C:EC:8E:58:16:F5:91:73:69:10:9D:0D:30:48:47:9E:FE:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f2:d9:72:38:37:00:3f:b5:eb:77:cc:41:da:35:4e:7c:71: b6:ab:b4:fd:75:2f:e5:54:f1:f6:b9:d1:27:28:da:47:d0:2c: bf:02:f3:a6:fd:c2:ec:8f:22:87:b3:59:df:27:49:ec:28:d8: 84:87:60:c5:19:ec:1d:d4:58:b2:78:d8:41:b0:f9:49:63:10: 32:d8:8f:1e:3c:a2:68:4c:51:29:52:b6:81:19:84:b2:80:99: c1:54:44:28:82:53:b4:c9:14:b8:70:bc:e3:95:0b:9f:73:1e: 3d:2c:ed:0e:31:44:1f:7d:0b:bb:cf:77:8c:80:d2:b2:81:4a: 25:1e:de:42:90:af:1a:fd:75:fa:26:3e:5b:e9:1f:e1:65:d8: 42:c7:0a:e3:d7:4f:8c:d3:28:c2:fa:71:6a:c3:3b:9c:a7:5c: 85:8f:19:a5:a5:68:32:cf:a0:a6:1f:55:8b:ff:e9:5e:ec:fc: 25:9c:b2:7f:ec:d0:66:ac:fa:97:ba:e1:3d:a4:03:8b:f9:9e: e2:10:97:b3:62:ac:fa:2b:91:32:2e:ed:42:c3:d5:a5:ce:12: 85:ec:06:85:fd:4e:3b:27:99:ab:fd:9b:3d:d8:cd:3e:51:7b: 16:37:f6:c9:11:e6:0e:2f:06:00:ed:39:bf:bc:89:3e:e5:c8: 7c:86:04:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lzGoJqZCy6csIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MWQ3NzhiYmItMGExYi00MTAyLWJjMmMtNGFmOWZiMjk4Zjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUBUBnlOskCUltTzOkUyvFIp2zL+K44i9k8l 7+SwqB4loPjV6X+9oJEvoQaPNFgPsn5sF2DRY2ah9Y9XXWuBph1l03JfmzBAK3U3 mt/r1oPgZngH+XicrP+sHW3jBKp7EghV64i+sEjHcqhs0UKqtCpWou0L0HkvWhdP I45maM6pfn+Li6VkjX01TcyCKX0FipfHvsawdk+mQ8KPI30egObzymBewy3JkxaR iBOdRYi535rrnNMycZtU2JfVk5Ykkl9UgI3lXw/clTR/bp8gIXn+OsixE+CAXX8q fN1vtXlJdqj3w8j893LId8Ptihz2GAQWSC3DonLwoABgFEZnZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSwXOyOWBb1kXNpEJ0NMEhHnv4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg4MTI4ZjctNzI5YS0z NTI3LWE2NmUtMGY4ZGViNmU2OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDy2XI4NwA/tet3zEHaNU58cbartP11L+VU8fa50Sco2kfQLL8C86b9 wuyPIoezWd8nSewo2ISHYMUZ7B3UWLJ42EGw+UljEDLYjx48omhMUSlStoEZhLKA mcFURCiCU7TJFLhwvOOVC59zHj0s7Q4xRB99C7vPd4yA0rKBSiUe3kKQrxr9dfom PlvpH+Fl2ELHCuPXT4zTKML6cWrDO5ynXIWPGaWlaDLPoKYfVYv/6V7s/CWcsn/s 0Gas+pe64T2kA4v5nuIQl7NirPorkTIu7ULD1aXOEoXsBoX9Tjsnmav9mz3YzT5R exY39skR5g4vBgDtOb+8iT7lyHyGBGo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:08 2025 by rpki-client