$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aafb9f44-97f7-373c-a608-7201b7934395.roa File: aafb9f44-97f7-373c-a608-7201b7934395.roa (raw, json) Hash identifier: aL05ak8MR5K/9uOB820cUD1SlbThVQAnSjicRHkUd/A= Subject key identifier: 8A:EC:F9:43:89:33:07:AB:1E:31:60:22:08:DC:75:E4:B7:E1:F3:3E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACF710D25522196DBBA9E6780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aafb9f44-97f7-373c-a608-7201b7934395.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.71.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:0d:25:52:21:96:db:ba:9e:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=d1133ef5-3c7f-44eb-b192-0b8147787aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e3:47:d2:e0:f1:95:38:a3:2d:92:cb:80:33: 03:21:92:10:53:6a:21:6c:82:5e:53:f5:66:7d:4c: 37:1f:35:39:03:7e:1c:18:14:a5:d7:bd:7c:56:45: aa:e5:06:69:b6:79:1b:d3:bc:63:f3:ec:5f:d7:97: 2e:c8:6f:cf:ca:e3:43:2f:a7:e4:c2:c2:02:27:85: c2:b0:ad:12:01:79:09:5c:66:4a:58:32:0e:4d:2b: 18:86:0a:b6:0f:bb:45:d9:ac:50:7e:47:d3:9d:e0: 26:26:e8:2c:b3:6a:c2:f6:58:c5:1d:83:da:e6:14: 06:64:a6:82:4a:1d:d8:f8:85:62:c4:9b:b5:3d:f4: 2a:71:e6:38:43:0b:25:62:36:80:96:32:42:60:b8: ad:9d:86:a1:d6:fc:f5:6b:97:2d:41:fe:e0:32:53: 24:2b:ad:0e:32:a6:63:bb:3c:09:21:af:a7:3b:f5: 59:e0:47:39:58:18:ea:99:a7:ef:4e:0f:70:86:19: dd:60:0b:ab:38:1d:a7:a8:a5:5c:ce:2c:7e:14:a3: c5:ee:d2:05:d0:6c:0a:7a:00:cf:70:6e:64:f0:89: 24:9a:de:33:15:4c:15:90:1b:3c:98:f0:2d:df:87: c7:8a:b5:a5:14:1e:36:42:fd:c0:29:c5:2d:1c:96: 10:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EC:F9:43:89:33:07:AB:1E:31:60:22:08:DC:75:E4:B7:E1:F3:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aafb9f44-97f7-373c-a608-7201b7934395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:98:cd:00:2b:de:b9:0d:70:04:3c:0d:47:5a:18:4e:44:7a: c0:eb:3d:47:01:8e:70:36:03:d2:e7:e4:f7:50:96:e2:20:3b: 95:14:0b:7d:f1:6c:16:4e:6c:58:39:ac:34:93:f9:89:e7:66: ee:93:0d:e8:24:41:dd:1c:07:c0:f7:70:ed:30:1e:fd:6a:24: 90:51:91:cb:dd:79:40:0a:e2:b4:77:7c:45:67:7c:39:ac:11: 9c:e2:2e:a3:99:62:ee:c7:c9:93:55:5c:99:80:21:6a:a5:22: 97:bc:a5:cf:ff:8e:a0:26:01:76:5b:c2:1b:1e:5d:b5:4c:9f: 01:49:56:3c:b9:0d:fa:07:57:90:24:29:fd:21:cd:8b:b4:50: d9:1b:9a:72:83:55:93:e5:74:63:31:c4:f7:ba:50:81:98:d4: 08:9b:ff:76:82:52:73:8b:e3:e0:ca:46:b4:ea:ab:60:c1:71: 2a:68:28:2c:15:d0:d4:7a:69:3b:4c:34:64:5e:27:61:5a:dc: 74:95:4d:4e:ce:60:21:73:49:8c:7a:1d:21:2c:63:a0:ff:f6: 5b:5e:e5:c2:d3:0a:c8:7c:c4:c1:0f:a8:48:8a:7b:e4:6f:75: 5e:7d:ec:c2:b6:af:ba:8e:23:79:8a:05:30:0c:95:33:6b:44: a6:96:bd:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQ0lUiGW27qeZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZDExMzNlZjUtM2M3Zi00NGViLWIxOTItMGI4MTQ3Nzg3YWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgONH0uDxlTijLZLLgDMDIZIQU2ohbIJeU/Vm fUw3HzU5A34cGBSl1718VkWq5QZptnkb07xj8+xf15cuyG/PyuNDL6fkwsICJ4XC sK0SAXkJXGZKWDIOTSsYhgq2D7tF2axQfkfTneAmJugss2rC9ljFHYPa5hQGZKaC Sh3Y+IVixJu1PfQqceY4QwslYjaAljJCYLitnYah1vz1a5ctQf7gMlMkK60OMqZj uzwJIa+nO/VZ4Ec5WBjqmafvTg9whhndYAurOB2nqKVczix+FKPF7tIF0GwKegDP cG5k8Ikkmt4zFUwVkBs8mPAt34fHirWlFB42Qv3AKcUtHJYQxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrs+UOJMwerHjFgIgjcdeS34fM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFmYjlmNDQtOTdmNy0z NzNjLWE2MDgtNzIwMWI3OTM0Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCYzQAr3rkNcAQ8DUdaGE5EesDrPUcBjnA2A9Ln5PdQluIgO5UUC33x bBZObFg5rDST+YnnZu6TDegkQd0cB8D3cO0wHv1qJJBRkcvdeUAK4rR3fEVnfDms EZziLqOZYu7HyZNVXJmAIWqlIpe8pc//jqAmAXZbwhseXbVMnwFJVjy5DfoHV5Ak Kf0hzYu0UNkbmnKDVZPldGMxxPe6UIGY1Aib/3aCUnOL4+DKRrTqq2DBcSpoKCwV 0NR6aTtMNGReJ2Fa3HSVTU7OYCFzSYx6HSEsY6D/9lte5cLTCsh8xMEPqEiKe+Rv dV597MK2r7qOI3mKBTAMlTNrRKaWvf4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:37:25 2025 by rpki-client