$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa File: c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa (raw, json) Hash identifier: gGP3J1Fkq/2sIswtylOfFNEYl9DjiJ6VbDcBiMZwx90= Subject key identifier: 2B:73:98:1F:C7:D0:DD:16:71:84:40:AD:2F:39:26:B3:80:DB:38:F7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65D9E597B12BD86953E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5d:9e:59:7b:12:bd:86:95:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=81e7c3e6-c8ed-4aef-9494-bc454fb0dadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:79:91:49:19:63:26:15:cf:4e:67:4a:f4: 37:61:37:01:14:96:ca:81:44:a0:e4:87:4f:9a:cb: 7d:51:2e:a3:55:d6:fc:10:38:cc:24:eb:4b:31:c4: 4b:70:b7:9a:64:c0:18:03:41:7e:47:6d:a0:b9:73: f7:29:35:86:b8:cc:1d:5c:ab:94:46:67:67:8a:79: 49:33:46:3a:3b:6e:95:da:19:f8:e6:fe:e2:89:44: 2b:82:67:d1:d3:3e:45:b2:01:21:be:4e:76:f5:86: 64:38:dd:a4:27:dd:80:b6:99:af:f4:98:91:54:cc: 4c:d1:20:cc:c8:34:8b:01:1e:af:e0:cc:ad:77:df: 84:7a:9d:97:c2:5a:6c:68:dc:0a:81:7d:1b:94:df: 83:6c:08:6c:be:48:64:4b:d6:eb:a0:d1:53:10:14: f8:81:80:89:45:19:a3:d3:94:a9:94:66:a6:e7:5a: 96:5c:33:0e:26:fb:8a:ce:4d:93:3d:f3:ab:bc:5b: a1:da:c6:aa:77:0c:82:05:67:ec:46:71:ec:a4:c2: 1e:a8:46:cf:52:2e:4c:5c:19:6c:6c:c5:11:98:bd: f0:c1:55:93:b7:1a:35:74:fb:71:f9:52:f8:d8:71: f9:c7:96:a2:f3:22:ba:13:be:d1:72:80:8b:af:4d: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:73:98:1F:C7:D0:DD:16:71:84:40:AD:2F:39:26:B3:80:DB:38:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:64:5d:cf:44:0a:36:4d:31:b6:0d:b0:d9:b4:cd:27:60:47: 14:e6:70:5d:b7:22:84:7d:37:32:c1:85:99:e3:b7:da:77:76: 93:b8:e5:b5:2c:48:ae:2b:8d:77:00:e1:ec:c6:1f:7f:b2:c6: 50:ea:7b:0b:98:c2:02:d7:1c:84:8b:e3:61:a2:32:f2:a6:6a: b0:17:66:15:bd:e4:54:a8:e3:cb:4a:07:f6:8a:28:a3:c4:06: 78:1d:c6:04:38:d2:2c:b1:21:83:09:fb:c0:d9:bb:39:88:e2: 25:ed:6d:6c:84:ca:d7:d9:9b:5c:3e:4f:29:96:03:83:6b:1b: c9:ff:4d:19:3e:07:90:a7:9b:90:1e:76:cb:d8:44:85:c8:5d: 6b:ca:96:8a:64:49:31:7c:de:16:36:67:58:6a:52:9f:ec:e5: 48:b1:91:38:a1:fa:aa:0c:89:2d:95:1a:da:02:0c:48:a7:28: 21:20:cf:48:d3:fb:2f:ba:e5:16:db:ad:ab:3e:72:34:ca:70: e7:b8:8b:0d:55:70:d8:68:76:ce:03:02:5d:40:2e:f3:9b:28: de:f0:e7:ce:7d:23:e7:f8:49:5c:46:10:1c:cf:b7:14:9e:20: 19:3c:f6:80:da:22:aa:ea:d3:0b:fc:83:59:6a:59:de:e5:c1: cd:df:4a:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1l2eWXsSvYaVPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ODFlN2MzZTYtYzhlZC00YWVmLTk0OTQtYmM0NTRmYjBkYWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+15kUkZYyYVz05nSvQ3YTcBFJbKgUSg5IdP mst9US6jVdb8EDjMJOtLMcRLcLeaZMAYA0F+R22guXP3KTWGuMwdXKuURmdninlJ M0Y6O26V2hn45v7iiUQrgmfR0z5FsgEhvk529YZkON2kJ92Atpmv9JiRVMxM0SDM yDSLAR6v4Mytd9+Eep2XwlpsaNwKgX0blN+DbAhsvkhkS9broNFTEBT4gYCJRRmj 05SplGam51qWXDMOJvuKzk2TPfOrvFuh2saqdwyCBWfsRnHspMIeqEbPUi5MXBls bMURmL3wwVWTtxo1dPtx+VL42HH5x5ai8yK6E77RcoCLr00cuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtzmB/H0N0WcYRArS85JrOA2zj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNiNDhmYmItMGEzMi0z NGJhLTlkOTEtYjJlYjczMzczNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdkXc9ECjZNMbYNsNm0zSdgRxTmcF23IoR9NzLBhZnjt9p3dpO45bUs SK4rjXcA4ezGH3+yxlDqewuYwgLXHISL42GiMvKmarAXZhW95FSo48tKB/aKKKPE BngdxgQ40iyxIYMJ+8DZuzmI4iXtbWyEytfZm1w+TymWA4NrG8n/TRk+B5Cnm5Ae dsvYRIXIXWvKlopkSTF83hY2Z1hqUp/s5UixkTih+qoMiS2VGtoCDEinKCEgz0jT +y+65Rbbras+cjTKcOe4iw1VcNhods4DAl1ALvObKN7w5859I+f4SVxGEBzPtxSe IBk89oDaIqrq0wv8g1lqWd7lwc3fSrs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:16:40 2025 by rpki-client