$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c411adeb-7dc7-3c74-ba66-74a28916c12b.roa File: c411adeb-7dc7-3c74-ba66-74a28916c12b.roa (raw, json) Hash identifier: iuYzRgRARq4KOVrSOdQK/xK5zzk1rMLm2oy7qX9C6MU= Subject key identifier: 6D:2C:6B:A5:83:A4:B1:AA:DA:DC:14:6E:A3:99:E2:DE:A7:87:3C:99 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64B7BD495982DE2C5A900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c411adeb-7dc7-3c74-ba66-74a28916c12b.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4b:7b:d4:95:98:2d:e2:c5:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=7e89074e-e5bf-49a6-a465-84bbcf775334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:54:28:c1:f9:64:b7:91:6c:c8:6f:87:67: a9:9b:0f:20:c3:8c:5f:20:c0:5e:e6:f5:61:af:98: 0f:f2:a3:35:85:9e:60:38:60:a9:7a:bf:2d:6a:db: 2d:aa:7b:62:8d:23:97:70:00:36:1e:31:9e:d2:60: 57:54:fa:e3:08:2e:bf:55:f9:19:51:46:e7:f5:e0: 65:e8:ad:3c:cb:89:28:89:20:da:dc:21:b4:dd:b4: 95:ed:f0:31:59:d3:be:ec:7c:3f:90:b6:a6:d8:91: 96:47:a4:21:59:02:74:1c:50:34:03:a7:bf:4c:40: 12:1e:69:09:2c:18:b5:03:f4:93:ad:29:2b:0c:97: 41:a5:ee:84:88:ea:6b:5a:c0:3d:19:de:45:1a:43: c1:b6:14:8f:b2:1d:a7:66:64:a2:d8:ca:2a:f1:d6: 9f:ca:de:3c:eb:0c:8e:10:a4:ec:d5:48:9e:c5:e5: d9:c5:3b:49:89:37:7f:57:9c:f7:66:f3:24:bf:e1: 69:2f:06:db:87:fd:73:31:61:79:63:2f:66:af:b4: 95:4c:af:9d:26:5f:43:bf:50:b1:4f:7a:77:e6:01: 6a:31:af:62:29:b2:04:a0:45:36:a7:3d:b6:5c:79: e4:36:43:bf:e6:2c:16:df:84:5b:e9:aa:e8:4f:ed: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2C:6B:A5:83:A4:B1:AA:DA:DC:14:6E:A3:99:E2:DE:A7:87:3C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c411adeb-7dc7-3c74-ba66-74a28916c12b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:08:78:c4:d3:78:ea:cc:ee:cc:9e:88:6d:1f:9e:db:8b:df: c5:4e:01:ef:9f:39:81:6d:32:cd:a0:e4:8c:8e:3a:07:25:20: f6:2b:b6:0c:21:5e:59:af:fa:b5:d6:d4:c0:22:3c:51:8d:b4: 2f:4c:7f:85:74:4f:4a:48:02:98:b5:7b:71:64:5b:57:d9:46: 58:c3:6b:a8:50:26:c2:91:84:28:ca:11:fb:24:ac:ce:1d:a4: 51:53:7b:75:c4:c6:f4:d1:f5:61:92:fa:3b:64:8f:5f:d0:64: 2f:59:f1:26:92:b7:7f:3a:34:32:d8:ea:ca:e4:3b:61:27:df: df:b4:ae:43:81:c7:71:7b:18:55:ef:33:38:a9:45:1f:2e:3d: af:c3:b8:d6:df:0f:b4:c0:42:88:b0:1b:a2:a1:b3:51:b3:c7: 23:45:63:07:b2:52:53:4c:69:fd:c0:97:8c:02:f5:b2:8c:1c: 00:3a:31:d8:b5:db:7c:5b:80:e0:cf:7e:50:85:80:c4:43:ff: 54:34:1b:fd:43:99:a0:04:d4:30:71:e7:f9:59:52:a0:1b:a3: 0b:50:8c:99:c4:da:35:c7:0c:a2:1f:dc:2c:fd:d0:09:95:8a: d1:7f:18:89:e8:c7:60:19:bd:35:fd:49:6b:9e:86:49:71:bb: 71:2f:f0:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kt71JWYLeLFqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk N2U4OTA3NGUtZTViZi00OWE2LWE0NjUtODRiYmNmNzc1MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVhUKMH5ZLeRbMhvh2epmw8gw4xfIMBe5vVh r5gP8qM1hZ5gOGCper8tatstqntijSOXcAA2HjGe0mBXVPrjCC6/VfkZUUbn9eBl 6K08y4koiSDa3CG03bSV7fAxWdO+7Hw/kLam2JGWR6QhWQJ0HFA0A6e/TEASHmkJ LBi1A/STrSkrDJdBpe6EiOprWsA9Gd5FGkPBthSPsh2nZmSi2Moq8dafyt486wyO EKTs1UiexeXZxTtJiTd/V5z3ZvMkv+FpLwbbh/1zMWF5Yy9mr7SVTK+dJl9Dv1Cx T3p35gFqMa9iKbIEoEU2pz22XHnkNkO/5iwW34Rb6aroT+1FvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0sa6WDpLGq2twUbqOZ4t6nhzyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzQxMWFkZWItN2RjNy0z Yzc0LWJhNjYtNzRhMjg5MTZjMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcIeMTTeOrM7syeiG0fntuL38VOAe+fOYFtMs2g5IyOOgclIPYrtgwh Xlmv+rXW1MAiPFGNtC9Mf4V0T0pIApi1e3FkW1fZRljDa6hQJsKRhCjKEfskrM4d pFFTe3XExvTR9WGS+jtkj1/QZC9Z8SaSt386NDLY6srkO2En39+0rkOBx3F7GFXv MzipRR8uPa/DuNbfD7TAQoiwG6Khs1GzxyNFYweyUlNMaf3Al4wC9bKMHAA6Mdi1 23xbgODPflCFgMRD/1Q0G/1DmaAE1DBx5/lZUqAbowtQjJnE2jXHDKIf3Cz90AmV itF/GInox2AZvTX9SWuehklxu3Ev8Ho= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:01 2025 by rpki-client