$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3f089f5-5c10-3467-a622-c6ea09b985d8.roa File: b3f089f5-5c10-3467-a622-c6ea09b985d8.roa (raw, json) Hash identifier: kAw0+oOYHv7M8aHjHwQOUBX3Pf2vQOMkXrm0T8HI0g0= Subject key identifier: C0:35:3C:10:DE:78:BC:2C:17:03:01:3C:D3:49:BB:8A:8F:24:93:DB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D661C1A3E913F945DAC480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3f089f5-5c10-3467-a622-c6ea09b985d8.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:61:c1:a3:e9:13:f9:45:da:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=15e87e2d-ce29-4e6e-bcac-03050802092f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:b2:0c:1d:bf:df:3c:fb:79:1f:1c:ea:f2: 75:07:46:5e:1e:20:49:75:e9:60:9c:0c:5b:e6:c5: 88:14:54:f3:37:44:f5:a7:dd:79:51:58:28:7c:f9: 35:c9:3e:53:cc:a7:c7:0e:10:b6:d9:24:37:8c:77: d6:a7:63:e9:92:2e:41:09:a4:a0:90:d8:6c:89:1e: 6f:b3:39:23:43:3d:9b:b4:6f:89:f6:94:76:86:a0: d3:60:8a:9f:7e:1a:e1:e9:59:8f:77:28:f7:8a:0b: cd:1a:76:b7:af:72:8e:19:f4:d2:c6:ab:76:4d:f3: b2:ae:00:2b:7e:6c:c7:ee:2c:ac:17:be:70:3a:e7: fd:97:f6:21:3e:a6:f0:0a:c7:e5:6e:53:ed:04:44: 2d:71:d5:7b:de:33:5a:e9:48:38:89:34:55:53:62: cb:bf:05:26:5c:90:43:87:0c:86:e0:e9:95:7c:87: 43:a5:2d:56:d2:75:d9:96:b6:43:e6:85:bd:be:08: 58:a2:23:e0:20:11:1a:6a:c5:f7:ab:47:4d:dc:3b: 87:66:b9:25:a4:10:58:92:14:ce:a0:30:18:33:cd: 0c:c0:f9:0a:a6:29:6e:47:1a:72:5b:c4:40:92:cb: 33:26:84:dd:83:b9:b5:af:da:71:13:ff:12:ca:86: 2b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:35:3C:10:DE:78:BC:2C:17:03:01:3C:D3:49:BB:8A:8F:24:93:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3f089f5-5c10-3467-a622-c6ea09b985d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:92:5a:85:f2:d7:5b:9b:50:a4:ef:e6:82:99:4e:eb:b9:8c: 7d:9d:1b:1a:5a:0a:98:50:ea:d4:ca:b0:b9:ba:64:28:d9:eb: 0b:fa:e9:bb:7d:6e:ea:f3:78:17:71:2f:5a:5f:11:02:3b:10: d0:8b:8d:54:f4:9e:27:35:2c:e6:62:1c:d8:c0:e7:63:f6:34: bf:a2:cc:0c:f5:ef:a9:59:5d:93:00:01:77:68:fc:c5:f3:62: 0c:23:37:be:e5:60:7e:53:9b:d2:59:0e:1b:25:b8:f8:14:c2: f0:c4:ae:a1:80:28:21:6a:e2:87:f4:e4:8b:01:a7:cb:da:7f: f6:64:50:06:3a:e4:2a:00:08:0a:14:77:12:59:bd:83:1e:3e: 32:78:05:0a:c6:2a:ed:50:68:e4:4d:1f:a4:36:2d:44:af:20: 0c:f5:a6:2a:8a:62:d1:31:e4:57:24:a7:f0:23:9d:bf:6f:f7: 08:c7:76:74:eb:33:a9:06:c3:08:19:4f:a3:b1:ea:4d:5b:6b: 0d:e8:a1:4d:cc:5b:97:50:43:74:f9:22:fc:37:ed:81:2a:b2: 57:fc:99:b8:d2:50:8a:f7:2d:d9:86:f8:c9:4b:95:30:69:5b: f6:bc:af:16:19:a5:8a:61:c3:44:00:3f:05:fb:65:5b:82:3b: 76:b8:37:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mHBo+kT+UXaxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MTVlODdlMmQtY2UyOS00ZTZlLWJjYWMtMDMwNTA4MDIwOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXayDB2/3zz7eR8c6vJ1B0ZeHiBJdelgnAxb 5sWIFFTzN0T1p915UVgofPk1yT5TzKfHDhC22SQ3jHfWp2Ppki5BCaSgkNhsiR5v szkjQz2btG+J9pR2hqDTYIqffhrh6VmPdyj3igvNGna3r3KOGfTSxqt2TfOyrgAr fmzH7iysF75wOuf9l/YhPqbwCsflblPtBEQtcdV73jNa6Ug4iTRVU2LLvwUmXJBD hwyG4OmVfIdDpS1W0nXZlrZD5oW9vghYoiPgIBEaasX3q0dN3DuHZrklpBBYkhTO oDAYM80MwPkKpiluRxpyW8RAksszJoTdg7m1r9pxE/8SyoYrwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA1PBDeeLwsFwMBPNNJu4qPJJPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjNmMDg5ZjUtNWMxMC0z NDY3LWE2MjItYzZlYTA5Yjk4NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2SWoXy11ubUKTv5oKZTuu5jH2dGxpaCphQ6tTKsLm6ZCjZ6wv66bt9 burzeBdxL1pfEQI7ENCLjVT0nic1LOZiHNjA52P2NL+izAz176lZXZMAAXdo/MXz YgwjN77lYH5Tm9JZDhsluPgUwvDErqGAKCFq4of05IsBp8vaf/ZkUAY65CoACAoU dxJZvYMePjJ4BQrGKu1QaORNH6Q2LUSvIAz1piqKYtEx5Fckp/Ajnb9v9wjHdnTr M6kGwwgZT6Ox6k1baw3ooU3MW5dQQ3T5Ivw37YEqslf8mbjSUIr3LdmG+MlLlTBp W/a8rxYZpYphw0QAPwX7ZVuCO3a4N2s= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:48 2025 by rpki-client