$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b997906d-924a-3bad-a804-7757cca61c5d.roa File: b997906d-924a-3bad-a804-7757cca61c5d.roa (raw, json) Hash identifier: m1IY3ZLMWjLIGN0SC7rVzcvEHkn/yqJ+Ce7OTXDD2iE= Subject key identifier: ED:1B:64:DF:82:12:A6:EC:D9:99:12:AD:15:2B:3D:7A:2D:72:0F:41 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64A0171F10C863959B600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b997906d-924a-3bad-a804-7757cca61c5d.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4a:01:71:f1:0c:86:39:59:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=f11ddaaa-07d0-4319-b4ca-88de2a704f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:12:3f:55:b6:ce:66:66:20:2b:14:02:c4:0f: 06:82:93:92:ef:6e:53:d7:c3:aa:ff:43:33:7a:8b: cc:6b:cc:0d:10:b2:16:9c:81:29:7f:47:da:17:c2: d5:d0:f8:57:b6:4f:78:63:4c:fe:7e:72:f0:2c:7d: 64:64:06:cd:27:52:d9:5a:a9:0d:ef:cf:18:c8:ac: d2:50:ca:4d:5a:46:c8:9e:c9:15:68:0f:39:a2:ac: b4:c6:31:5c:af:03:6c:83:19:d7:4f:93:25:13:8b: 53:73:50:18:9d:70:5d:bb:36:71:33:67:ad:16:96: 73:ab:4a:d7:5c:6d:e6:53:71:18:5d:d8:2b:05:f8: 41:7c:be:bc:a8:45:3e:48:23:2d:21:85:25:55:20: 2d:47:54:7e:83:98:10:2c:7e:f9:b0:dd:98:e0:06: ab:8d:7e:92:47:04:b8:40:3b:d4:f7:b2:ed:41:46: 5c:49:47:f4:28:27:d6:0e:ed:a6:4e:a4:fe:93:13: 0f:8e:6e:b2:9e:42:62:8b:76:93:19:26:54:df:ee: 44:27:b1:ed:f9:bd:a9:e8:ed:01:dc:af:8e:16:f4: c1:46:14:05:ae:e5:52:61:7e:fe:0c:98:eb:f7:0e: 77:0d:35:21:f7:3f:cb:32:af:7d:a9:bd:9f:54:cc: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1B:64:DF:82:12:A6:EC:D9:99:12:AD:15:2B:3D:7A:2D:72:0F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b997906d-924a-3bad-a804-7757cca61c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8c:16:9e:33:b9:6a:c6:79:95:92:c8:2c:d2:08:46:6a:40: df:50:b8:86:85:6a:9d:83:49:49:95:87:a6:73:03:e4:3f:06: 65:fb:78:b1:e2:b6:82:87:88:67:7f:c7:08:3b:7c:50:9e:db: a8:4d:1b:f7:7b:95:07:80:8d:24:ec:b6:9b:78:4d:91:37:86: f7:08:23:00:2b:7e:9e:5d:9e:58:57:d5:ee:18:dc:4d:c7:c3: 2c:1f:ef:97:b7:fc:66:37:f5:c9:7c:f5:f6:05:ac:5b:59:e6: 0a:cd:84:1e:8f:89:c6:a5:ec:08:a2:4b:f6:81:80:5f:13:4b: 71:f9:97:e2:31:b0:9b:94:b3:5a:3f:8d:f0:43:fb:43:cd:4e: 6f:0b:a3:44:e4:ed:ff:04:b9:72:b3:e1:9b:a1:a6:da:d0:cf: 6f:15:4e:1e:34:3c:84:a5:eb:7d:4b:c4:e4:39:30:c5:80:56: 95:0c:22:31:4d:af:9a:aa:c7:7a:e7:4f:58:3c:96:2c:31:e3: e2:d9:15:dc:8a:9e:07:94:4b:ae:a9:df:c9:87:18:46:f0:94: f2:2b:e2:eb:1e:81:cf:4b:04:b8:32:57:f4:e4:4e:24:ed:bc: 03:22:59:7e:51:25:b7:a7:98:37:2f:59:22:5c:07:67:92:dc: fa:bb:79:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1koBcfEMhjlZtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZjExZGRhYWEtMDdkMC00MzE5LWI0Y2EtODhkZTJhNzA0ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xI/VbbOZmYgKxQCxA8GgpOS725T18Oq/0Mz eovMa8wNELIWnIEpf0faF8LV0PhXtk94Y0z+fnLwLH1kZAbNJ1LZWqkN788YyKzS UMpNWkbInskVaA85oqy0xjFcrwNsgxnXT5MlE4tTc1AYnXBduzZxM2etFpZzq0rX XG3mU3EYXdgrBfhBfL68qEU+SCMtIYUlVSAtR1R+g5gQLH75sN2Y4AarjX6SRwS4 QDvU97LtQUZcSUf0KCfWDu2mTqT+kxMPjm6ynkJii3aTGSZU3+5EJ7Ht+b2p6O0B 3K+OFvTBRhQFruVSYX7+DJjr9w53DTUh9z/LMq99qb2fVMyO+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0bZN+CEqbs2ZkSrRUrPXotcg9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjk5NzkwNmQtOTI0YS0z YmFkLWE4MDQtNzc1N2NjYTYxYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyMFp4zuWrGeZWSyCzSCEZqQN9QuIaFap2DSUmVh6ZzA+Q/BmX7eLHi toKHiGd/xwg7fFCe26hNG/d7lQeAjSTstpt4TZE3hvcIIwArfp5dnlhX1e4Y3E3H wywf75e3/GY39cl89fYFrFtZ5grNhB6Pical7AiiS/aBgF8TS3H5l+IxsJuUs1o/ jfBD+0PNTm8Lo0Tk7f8EuXKz4ZuhptrQz28VTh40PISl631LxOQ5MMWAVpUMIjFN r5qqx3rnT1g8liwx4+LZFdyKngeUS66p38mHGEbwlPIr4usegc9LBLgyV/TkTiTt vAMiWX5RJbenmDcvWSJcB2eS3Pq7eWw= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:27 2025 by rpki-client