$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa File: b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa (raw, json) Hash identifier: cHIyKHbJYsh+Vc6yFlanelspRRM+la+z8mPAYvmcU5I= Subject key identifier: 4A:1D:D7:14:2E:98:04:D0:35:7B:CF:BB:D8:F7:72:CC:B1:7C:D7:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC711186440CA24E0FADD6980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.70.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:18:64:40:ca:24:e0:fa:dd:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=3cbe6a24-f1da-4fe4-873b-5a31f2dd9d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0f:05:81:40:4a:3a:37:f8:32:91:ad:a9:39: 99:6a:94:4d:66:f3:5e:38:3a:ec:8f:0d:87:79:60: eb:a5:c4:12:16:7f:2d:62:72:d3:7b:40:a1:07:0c: 66:26:e1:9f:91:ce:58:5a:78:bd:07:b4:0d:b6:77: 15:d0:e2:37:6d:10:37:ce:56:c8:02:22:98:3f:ec: 25:e4:df:b4:11:d7:ef:9e:0f:16:d8:17:1a:25:7d: af:d4:21:08:24:f3:3b:e2:db:81:a8:e4:37:ec:57: e1:b7:a8:6d:62:ec:2e:f4:84:a0:6c:c9:78:c3:db: fc:b8:c2:20:e7:21:ea:4d:48:9a:87:bc:6a:c3:ea: 67:5a:49:3d:fe:2a:ac:f1:20:f5:40:c5:a1:62:88: 76:a4:65:d3:99:b4:f1:ce:ee:c8:17:a6:29:05:75: ed:9f:b0:e0:4f:99:28:63:2d:11:ba:8f:d0:c9:2b: 77:07:83:d7:53:8f:bf:62:5c:94:b9:55:2d:24:55: 50:ae:05:54:7b:3a:e9:39:20:12:ee:f4:46:12:04: 87:cf:52:de:e0:2f:95:7a:13:5d:dc:0c:02:13:df: d1:58:de:b3:a7:be:70:b0:71:19:03:d2:01:65:34: d6:99:ba:a2:ae:77:c6:2e:8b:34:61:72:c8:88:db: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1D:D7:14:2E:98:04:D0:35:7B:CF:BB:D8:F7:72:CC:B1:7C:D7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b1957526-2582-3d7c-ad26-2a5bd0b93c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:63:27:8c:b5:84:61:18:55:cf:09:46:d7:82:1a:18:e8:43: 3c:90:87:40:58:27:21:ee:0b:fc:52:be:b4:1c:da:6a:92:d0: b1:37:d8:a8:a6:a0:5d:10:af:9d:76:06:65:65:c0:83:a4:3b: 89:19:d3:c1:27:84:62:57:ba:58:c6:b2:e9:e5:ff:1d:0d:ff: b0:b6:04:be:72:8b:8e:97:4d:d3:31:a3:73:17:9f:66:8d:29: 0e:b8:ca:fd:51:86:50:a7:09:6e:6c:6d:1d:e7:3f:54:8d:8c: dc:77:00:3b:16:b9:0e:ca:d1:d7:e5:38:b6:a1:15:e0:1c:ae: 5b:a8:b5:8f:5a:d0:0c:21:5d:6e:87:85:18:99:cb:c5:39:eb: a9:14:a3:14:88:b3:a5:25:a2:b1:77:d5:54:f7:4e:6e:3e:bd: 84:36:0b:6d:a8:ed:f9:84:99:79:ec:d0:5b:c8:79:90:95:50: e3:ab:e9:22:a8:57:ad:6e:3a:85:01:9b:a4:f9:ce:a1:63:26: 0f:3d:f7:94:bf:05:e1:42:95:2b:9b:4a:d3:6a:e6:4f:72:91: 14:69:40:46:44:d5:18:65:f1:75:4e:d4:c9:98:21:1a:ae:ea: 7f:17:13:96:d2:ac:d6:c0:a0:25:51:a1:46:51:ed:a4:00:75: 4d:84:9d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERhkQMok4PrdaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk M2NiZTZhMjQtZjFkYS00ZmU0LTg3M2ItNWEzMWYyZGQ5ZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg8FgUBKOjf4MpGtqTmZapRNZvNeODrsjw2H eWDrpcQSFn8tYnLTe0ChBwxmJuGfkc5YWni9B7QNtncV0OI3bRA3zlbIAiKYP+wl 5N+0Edfvng8W2BcaJX2v1CEIJPM74tuBqOQ37Ffht6htYuwu9ISgbMl4w9v8uMIg 5yHqTUiah7xqw+pnWkk9/iqs8SD1QMWhYoh2pGXTmbTxzu7IF6YpBXXtn7DgT5ko Yy0Ruo/QySt3B4PXU4+/YlyUuVUtJFVQrgVUezrpOSAS7vRGEgSHz1Le4C+VehNd 3AwCE9/RWN6zp75wsHEZA9IBZTTWmbqirnfGLos0YXLIiNsJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEod1xQumATQNXvPu9j3csyxfNexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjE5NTc1MjYtMjU4Mi0z ZDdjLWFkMjYtMmE1YmQwYjkzYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9jJ4y1hGEYVc8JRteCGhjoQzyQh0BYJyHuC/xSvrQc2mqS0LE32Kim oF0Qr512BmVlwIOkO4kZ08EnhGJXuljGsunl/x0N/7C2BL5yi46XTdMxo3MXn2aN KQ64yv1RhlCnCW5sbR3nP1SNjNx3ADsWuQ7K0dflOLahFeAcrluotY9a0AwhXW6H hRiZy8U566kUoxSIs6UlorF31VT3Tm4+vYQ2C22o7fmEmXns0FvIeZCVUOOr6SKo V61uOoUBm6T5zqFjJg8995S/BeFClSubStNq5k9ykRRpQEZE1Rhl8XVO1MmYIRqu 6n8XE5bSrNbAoCVRoUZR7aQAdU2EnV8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:44 2025 by rpki-client