$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2f6bf98-fb87-3327-b0de-18d2fb350190.roa File: c2f6bf98-fb87-3327-b0de-18d2fb350190.roa (raw, json) Hash identifier: vfLc+stxaZTMM+nXwOrJGMZS5sXTzlrIVMfLZZjhhfQ= Subject key identifier: C0:2F:4F:C9:48:11:17:82:73:4B:33:0B:A2:55:3A:87:BD:CB:91:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA1EBBC8F311618F04DC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2f6bf98-fb87-3327-b0de-18d2fb350190.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.71.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a1:eb:bc:8f:31:16:18:f0:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=14235473-4b18-4170-8a14-1b113513a0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:fe:45:92:c4:f3:c7:94:a8:41:6e:dc:d5: e2:67:2f:ff:90:d6:e7:f3:83:ce:c4:7b:d3:1b:a7: bd:ad:cb:61:67:a9:e9:23:ee:55:74:89:c5:74:a2: e8:1b:15:e2:d9:c1:50:da:27:2d:4f:0c:b8:02:20: 79:47:67:00:d1:22:b4:19:a4:d0:1f:79:c5:d4:99: 2e:b9:6e:9f:a9:69:0d:a9:80:38:dc:92:65:21:22: 07:1b:31:08:c8:f5:1d:96:9e:cf:5d:88:f3:cc:50: b5:16:10:f5:51:f9:c2:d9:2e:b3:d7:c5:12:2f:48: 88:af:91:67:08:c2:8a:cb:b2:91:73:11:d0:3a:a3: 02:71:7a:1e:ae:30:a0:9d:6c:9d:27:af:d0:de:ed: 4e:dc:48:29:94:e9:4f:fa:60:b5:c9:cc:67:30:b9: 43:fb:d0:fb:b8:58:61:dd:e1:6e:f1:a1:92:b7:3d: 38:6d:d5:f5:bf:4c:e3:4c:52:d6:0f:05:0f:b8:7d: 0d:23:dd:1f:03:0d:96:f9:0e:7f:1c:4e:77:db:9b: ac:e2:0e:53:88:3d:56:63:55:9c:e5:58:2d:21:a2: 35:e6:74:a6:1b:da:23:cc:a6:e6:60:a2:17:3d:10: 54:d6:6a:6c:33:72:05:24:32:96:63:fb:57:9c:c3: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2F:4F:C9:48:11:17:82:73:4B:33:0B:A2:55:3A:87:BD:CB:91:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2f6bf98-fb87-3327-b0de-18d2fb350190.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fb:bb:da:e1:95:d5:c8:aa:24:78:50:1d:72:28:9d:b0:1a: 8b:0b:46:0f:28:98:c7:ce:4f:b5:d9:a1:54:bc:77:32:72:76: 16:f9:e9:9d:be:42:66:ea:e9:13:40:81:b1:c7:62:de:25:44: 1c:54:d9:f0:61:63:6a:4f:de:32:55:c0:e5:ec:22:1b:1d:3f: 75:5c:20:b7:68:1f:bc:9c:61:82:c3:a6:27:c7:e2:a5:ac:6f: 18:c9:d1:29:e3:da:bc:39:8f:e8:c5:e2:5b:8a:71:3f:f8:f9: 4d:f2:c4:c7:de:3c:e0:f2:ef:6a:c5:03:ca:58:14:e9:75:f4: e5:9e:3d:8c:cc:9f:d6:4d:47:4e:f9:3c:b2:51:9d:20:38:66: 9d:7a:86:e1:a2:7d:ae:fb:e3:82:5f:40:da:55:82:d6:32:ff: fd:07:13:a4:ab:94:34:18:34:8e:d2:bd:90:11:24:4a:dc:bf: af:9e:17:b0:e8:33:ea:69:7f:04:22:f1:7a:05:f4:6e:6b:52: 11:69:90:e4:0c:81:6e:0a:84:43:c2:0b:ca:48:64:4a:ab:79: ff:8c:d6:cc:46:79:34:55:b9:e4:7e:93:16:94:14:a9:3e:0e: 70:75:e5:e0:f2:8e:6a:b4:9a:68:d8:57:6f:c8:d0:d6:a5:95: 46:4e:4d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6HrvI8xFhjwTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MTQyMzU0NzMtNGIxOC00MTcwLThhMTQtMWIxMTM1MTNhMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+7+RZLE88eUqEFu3NXiZy//kNbn84POxHvT G6e9rcthZ6npI+5VdInFdKLoGxXi2cFQ2ictTwy4AiB5R2cA0SK0GaTQH3nF1Jku uW6fqWkNqYA43JJlISIHGzEIyPUdlp7PXYjzzFC1FhD1UfnC2S6z18USL0iIr5Fn CMKKy7KRcxHQOqMCcXoerjCgnWydJ6/Q3u1O3EgplOlP+mC1ycxnMLlD+9D7uFhh 3eFu8aGStz04bdX1v0zjTFLWDwUPuH0NI90fAw2W+Q5/HE5325us4g5TiD1WY1Wc 5VgtIaI15nSmG9ojzKbmYKIXPRBU1mpsM3IFJDKWY/tXnMMTywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAvT8lIEReCc0szC6JVOoe9y5EiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzJmNmJmOTgtZmI4Ny0z MzI3LWIwZGUtMThkMmZiMzUwMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEetMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE77u9rhldXIqiR4UB1yKJ2wGosLRg8omMfOT7XZoVS8dzJydhb56Z2+ Qmbq6RNAgbHHYt4lRBxU2fBhY2pP3jJVwOXsIhsdP3VcILdoH7ycYYLDpifH4qWs bxjJ0Snj2rw5j+jF4luKcT/4+U3yxMfePODy72rFA8pYFOl19OWePYzMn9ZNR075 PLJRnSA4Zp16huGifa7744JfQNpVgtYy//0HE6SrlDQYNI7SvZARJErcv6+eF7Do M+ppfwQi8XoF9G5rUhFpkOQMgW4KhEPCC8pIZEqref+M1sxGeTRVueR+kxaUFKk+ DnB15eDyjmq0mmjYV2/I0NallUZOTdA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:25 2025 by rpki-client