$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e4ceeb-98f9-3e72-b588-703473930bef.roa File: c3e4ceeb-98f9-3e72-b588-703473930bef.roa (raw, json) Hash identifier: gM99yurIi1kbjBb4zfmygZN0AnhfpZ0p6XK8tPxGuHU= Subject key identifier: 2B:3D:6A:81:98:6D:58:75:27:7C:A3:22:38:70:EE:B0:32:E1:C1:56 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D652428773FA47A3694BC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e4ceeb-98f9-3e72-b588-703473930bef.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:52:42:87:73:fa:47:a3:69:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=da635bc0-cf18-4ea1-ae5a-d62edb46b35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:09:92:3c:dc:93:9b:7c:9a:9b:12:ed:a9: a2:97:da:f4:bf:5b:ee:49:b9:21:20:03:3f:2c:99: e2:b2:dd:46:4b:2a:d8:20:fd:f0:14:df:7b:82:85: 3f:a2:97:63:3d:2d:65:70:6c:b3:35:9f:ad:9e:cd: ee:69:65:9b:1f:fb:8c:92:a8:66:62:b2:57:a8:19: 4e:fa:45:68:72:54:a7:57:33:ea:66:b9:c1:99:bd: 7f:c0:84:78:0d:bf:57:3c:8f:80:cf:bc:01:20:82: 8e:21:60:c6:b6:18:89:3f:13:f2:47:33:17:f3:d6: 73:7d:ed:dd:97:a4:69:38:e8:77:5a:84:1f:fc:35: 77:e1:4e:2f:16:cc:ec:72:39:d6:4c:a2:20:45:d3: 68:2b:e1:63:b5:72:c6:c5:4c:b7:5a:44:91:0b:ce: d4:86:4d:a0:fb:ca:e5:d7:98:05:08:b3:0d:f6:0c: a3:65:12:28:ba:40:d8:5e:42:cc:aa:db:85:2f:2f: 65:a4:23:86:81:7d:71:eb:80:e2:08:a7:59:1e:80: 18:2b:7b:22:f5:7f:56:98:72:33:93:cc:ac:41:a0: 50:5f:0a:33:71:72:cf:55:a6:16:ae:68:12:7e:d7: 3b:9d:83:fb:3b:0d:8b:c4:21:4e:62:4d:d7:ed:7d: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3D:6A:81:98:6D:58:75:27:7C:A3:22:38:70:EE:B0:32:E1:C1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e4ceeb-98f9-3e72-b588-703473930bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:c1:7e:82:95:4b:ca:7c:cf:e6:2d:67:37:62:14:de:1d:f9: 35:54:51:3e:50:94:5c:92:95:f2:57:68:1e:be:dd:73:58:1b: 0e:a3:54:36:2b:c2:8c:af:a0:98:90:86:a3:bc:b5:8b:47:25: 98:7a:5e:7d:ea:f4:03:60:0f:1a:ab:92:0f:04:eb:77:33:ca: 78:da:91:fb:fc:af:5a:75:d8:30:3a:a4:8a:12:37:2c:4c:ef: be:c1:14:43:42:6e:c2:37:f8:30:cd:ef:b5:13:ec:d3:0b:ab: 21:fe:bf:d8:60:a3:e3:97:10:41:c9:97:ac:c9:a3:00:1b:05: 26:0d:72:47:67:41:ae:73:31:f0:cf:62:d4:80:08:d1:16:ba: 69:f1:ed:19:64:db:7a:37:a8:f3:33:34:49:5f:18:ba:0a:ff: 81:e0:0c:48:a7:da:33:76:8f:98:98:e3:20:40:96:66:17:76: 06:c1:5b:2e:36:84:20:4c:e3:07:3b:82:36:06:7d:31:ae:01: ce:0a:0a:2d:c3:9b:73:2d:cf:c3:fc:98:97:7b:8a:dc:ce:35: 8e:50:95:ba:86:a8:de:f0:d8:1e:0a:0b:2b:8e:86:c8:e0:9e: 1d:32:ef:7e:ac:a9:da:83:75:f4:fc:f5:ea:f1:68:5d:72:7f: 23:34:8c:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lJCh3P6R6NpS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZGE2MzViYzAtY2YxOC00ZWExLWFlNWEtZDYyZWRiNDZiMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2cJkjzck5t8mpsS7amil9r0v1vuSbkhIAM/ LJnist1GSyrYIP3wFN97goU/opdjPS1lcGyzNZ+tns3uaWWbH/uMkqhmYrJXqBlO +kVoclSnVzPqZrnBmb1/wIR4Db9XPI+Az7wBIIKOIWDGthiJPxPyRzMX89Zzfe3d l6RpOOh3WoQf/DV34U4vFszscjnWTKIgRdNoK+FjtXLGxUy3WkSRC87Uhk2g+8rl 15gFCLMN9gyjZRIoukDYXkLMqtuFLy9lpCOGgX1x64DiCKdZHoAYK3si9X9WmHIz k8ysQaBQXwozcXLPVaYWrmgSftc7nYP7Ow2LxCFOYk3X7X3o4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs9aoGYbVh1J3yjIjhw7rAy4cFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNlNGNlZWItOThmOS0z ZTcyLWI1ODgtNzAzNDczOTMwYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPBfoKVS8p8z+YtZzdiFN4d+TVUUT5QlFySlfJXaB6+3XNYGw6jVDYr woyvoJiQhqO8tYtHJZh6Xn3q9ANgDxqrkg8E63czynjakfv8r1p12DA6pIoSNyxM 777BFENCbsI3+DDN77UT7NMLqyH+v9hgo+OXEEHJl6zJowAbBSYNckdnQa5zMfDP YtSACNEWumnx7Rlk23o3qPMzNElfGLoK/4HgDEin2jN2j5iY4yBAlmYXdgbBWy42 hCBM4wc7gjYGfTGuAc4KCi3Dm3Mtz8P8mJd7itzONY5QlbqGqN7w2B4KCyuOhsjg nh0y736sqdqDdfT89erxaF1yfyM0jGg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:16 2025 by rpki-client