$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bba62409-0d30-3c99-91d2-8eb89a254279.roa File: bba62409-0d30-3c99-91d2-8eb89a254279.roa (raw, json) Hash identifier: 5YYoQOzc4ItGjxpkSAJdcxg28AJSphT6scp5aW4Jk3Q= Subject key identifier: 30:FC:4F:AD:E1:8A:D7:F0:C9:C5:2A:35:08:F7:3A:DC:92:09:0B:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65D54A3B474941A541200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bba62409-0d30-3c99-91d2-8eb89a254279.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5d:54:a3:b4:74:94:1a:54:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=5ac4702a-3795-4445-9ff5-f8dab8248c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:a3:80:75:f9:d8:ac:ed:d5:da:b1:85:1b: 8d:37:92:ff:d2:af:23:7b:c4:ae:b9:b8:98:b7:ad: 22:53:37:12:75:db:91:ee:aa:af:8c:bd:e0:af:b1: 1e:99:63:73:84:af:eb:51:70:9e:ef:47:ee:86:8d: e9:39:5b:12:27:4f:b4:a2:d6:dc:5a:39:a1:8c:0e: af:77:14:a6:05:ec:5e:e3:bf:d2:ec:db:43:f0:55: ec:1b:fd:a2:85:fe:d3:53:de:6a:61:a0:0c:95:22: 71:0f:bf:d9:c2:b6:86:41:fc:66:a2:28:59:9a:9f: cf:d6:51:86:42:88:dd:90:ae:94:56:01:99:e4:79: 81:23:8d:a7:e1:e2:cb:9c:75:b3:1d:5e:c7:25:ad: 4e:1c:c5:23:8d:77:2b:8c:65:1f:6f:0d:23:83:ac: 2b:4a:9f:83:c4:47:f7:80:74:e5:de:95:47:5a:a7: e8:3f:d8:4d:5e:b9:13:56:7a:fe:1e:b0:46:dc:c2: dc:ec:6c:7c:aa:56:f7:70:de:e3:da:b7:29:25:f1: d6:58:bc:53:d8:77:72:6a:fc:ea:43:e4:93:df:5d: 47:6b:b5:ab:48:1c:24:5d:66:09:7b:aa:d9:6e:3d: 9d:09:62:6e:f4:c1:e1:ea:37:26:0b:58:fe:75:19: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FC:4F:AD:E1:8A:D7:F0:C9:C5:2A:35:08:F7:3A:DC:92:09:0B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bba62409-0d30-3c99-91d2-8eb89a254279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f8:d1:90:df:83:3d:5b:f8:ce:95:c1:c6:f2:3c:5e:af:70: fa:d4:f6:70:ea:32:79:79:60:30:b3:e0:45:9d:48:97:53:94: 8a:6e:eb:ba:98:d3:f9:70:4d:bc:a0:34:20:31:31:18:9b:21: d3:09:24:3b:2e:86:fb:6c:69:c1:a3:92:2f:5b:46:36:a2:34: 0b:4c:68:3c:ab:df:ad:1f:4a:6f:02:7a:d9:71:74:60:88:45: 7f:21:a0:56:25:e8:bf:b0:ba:a1:a8:f9:3b:18:00:23:23:77: 9b:dd:c9:18:2f:5f:82:0a:e3:06:a4:b9:9d:b5:c8:20:6f:df: 27:c0:9e:62:29:9d:ae:e9:86:50:40:13:53:10:83:77:90:46: 89:b4:57:38:72:18:92:87:3d:b3:a3:c4:71:56:4d:01:1d:f7: 9c:97:46:fb:ac:15:ea:73:fe:68:cf:d0:f1:af:ae:22:1b:85: 72:46:11:23:34:b2:f9:14:4b:45:57:1e:79:b8:fd:10:28:cc: 38:38:5b:0b:91:bf:e2:b2:4f:73:c4:56:bf:2a:d3:7a:59:c5: 96:e2:47:b6:96:77:7c:0d:df:67:9c:d0:05:c5:8b:e9:54:bd: a0:54:e8:fe:9b:fd:91:b8:a5:fe:c8:dd:f7:54:ed:69:f0:0f: 3c:71:d2:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1l1Uo7R0lBpUEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NWFjNDcwMmEtMzc5NS00NDQ1LTlmZjUtZjhkYWI4MjQ4YzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus6jgHX52Kzt1dqxhRuNN5L/0q8je8SuubiY t60iUzcSdduR7qqvjL3gr7EemWNzhK/rUXCe70fuho3pOVsSJ0+0otbcWjmhjA6v dxSmBexe47/S7NtD8FXsG/2ihf7TU95qYaAMlSJxD7/ZwraGQfxmoihZmp/P1lGG QojdkK6UVgGZ5HmBI42n4eLLnHWzHV7HJa1OHMUjjXcrjGUfbw0jg6wrSp+DxEf3 gHTl3pVHWqfoP9hNXrkTVnr+HrBG3MLc7Gx8qlb3cN7j2rcpJfHWWLxT2Hdyavzq Q+ST311Ha7WrSBwkXWYJe6rZbj2dCWJu9MHh6jcmC1j+dRngSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD8T63hitfwycUqNQj3OtySCQuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmJhNjI0MDktMGQzMC0z Yzk5LTkxZDItOGViODlhMjU0Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn40ZDfgz1b+M6VwcbyPF6vcPrU9nDqMnl5YDCz4EWdSJdTlIpu67qY 0/lwTbygNCAxMRibIdMJJDsuhvtsacGjki9bRjaiNAtMaDyr360fSm8CetlxdGCI RX8hoFYl6L+wuqGo+TsYACMjd5vdyRgvX4IK4wakuZ21yCBv3yfAnmIpna7phlBA E1MQg3eQRom0VzhyGJKHPbOjxHFWTQEd95yXRvusFepz/mjP0PGvriIbhXJGESM0 svkUS0VXHnm4/RAozDg4WwuRv+KyT3PEVr8q03pZxZbiR7aWd3wN32ec0AXFi+lU vaBU6P6b/ZG4pf7I3fdU7WnwDzxx0ms= -----END CERTIFICATE-----Generated at Sat Aug 23 18:10:29 2025 by rpki-client