$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa File: c9346992-f358-3044-b41e-e5b433a129f8.roa (raw, json) Hash identifier: ptPJeKf5lCW8DEJ1tOgOKvfuQMJFpITgKtweBKCpono= Subject key identifier: F4:72:65:8E:24:66:5D:4C:D7:8C:7F:87:0B:E1:42:39:E0:0D:26:FD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC710FFDBFD32B7AB70D42CE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.71.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:ff:db:fd:32:b7:ab:70:d4:2c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=4b44c671-975d-4fe2-81eb-dbc2bc9a369b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cc:59:08:87:cb:03:a8:8e:58:b5:69:e2:90: 1f:8c:1d:60:e1:ac:fb:ed:b6:8b:45:9d:c3:38:e0: f6:ba:54:e4:ad:76:4c:85:1d:b1:ef:6d:42:a4:cf: 14:80:92:c8:90:8f:ca:8d:d5:c4:16:b8:f0:17:bb: b3:fe:2f:47:60:e7:5e:58:11:b4:b6:ce:30:59:58: b7:c0:63:81:2e:b1:6f:01:04:da:13:7f:cc:6c:28: 04:a2:20:5c:f6:ed:77:33:c7:64:36:28:2e:f3:cf: ea:0d:df:8b:83:89:53:fe:0d:d0:e2:71:90:9a:e0: 0a:88:20:0e:0b:8e:ce:eb:55:9b:17:61:4f:0b:7c: 2b:56:6f:f0:75:f3:8c:4a:5c:1d:8c:78:a9:b6:8e: 64:7f:a5:16:b8:87:2d:32:be:8b:29:63:e1:9f:5e: 38:eb:5f:86:3d:4a:8c:07:c4:61:64:aa:07:ee:65: 53:9f:dc:48:c9:64:9f:90:9b:f4:02:16:c8:8d:ee: 55:4b:ba:f2:57:bd:78:34:47:23:76:26:9c:95:90: 5e:3f:e2:1d:a6:a2:c4:c5:ea:32:0e:d4:c8:60:ce: c1:e5:87:ba:87:0c:f3:56:22:c5:c1:c6:0b:2e:d3: c8:76:04:f6:df:55:85:76:1e:c2:de:75:d1:b3:c5: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:65:8E:24:66:5D:4C:D7:8C:7F:87:0B:E1:42:39:E0:0D:26:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c9346992-f358-3044-b41e-e5b433a129f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:df:46:ff:13:28:39:eb:15:e3:fd:9d:e5:c1:30:03:16:9d: e3:00:a9:f3:54:25:4d:02:c1:64:3a:7e:c7:a0:00:28:d1:18: 17:f5:9b:b1:75:5a:bd:6f:30:ae:b6:6d:c8:ee:58:68:60:3c: 1e:66:db:dc:88:3b:c3:2b:57:e9:1b:d5:9d:13:15:3b:de:71: ea:fe:12:e0:98:ed:5b:d5:1e:34:c1:83:18:5f:43:70:33:b7: d0:71:a2:24:06:9c:85:1c:42:2d:d4:16:64:f0:cb:1e:7e:e2: e4:f9:4c:48:a3:a5:71:5d:b8:57:58:c7:24:cd:7c:c8:80:5a: 01:38:8d:b8:ac:8a:ab:b6:60:8e:7d:83:50:19:d8:ff:b5:6c: 14:72:cc:42:b0:ea:eb:01:99:ac:0e:3d:22:43:60:d4:df:85: 4f:af:81:b2:2e:31:dd:f8:22:95:89:ff:f0:c5:8c:35:af:d3: a1:5e:64:45:a6:d6:4d:e6:39:88:c3:18:65:09:ff:1f:3e:98: c6:d0:e1:ff:f6:26:16:c0:0c:d3:77:18:5b:23:e3:d3:ab:13: 41:e6:d9:84:63:32:92:5b:18:da:ce:d3:23:c8:7b:62:82:88: 20:fa:5f:a2:17:c8:b6:ce:91:e8:ff:55:cc:fa:f0:f7:ff:a1: c0:e6:1a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEP/b/TK3q3DULOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NGI0NGM2NzEtOTc1ZC00ZmUyLTgxZWItZGJjMmJjOWEzNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsxZCIfLA6iOWLVp4pAfjB1g4az77baLRZ3D OOD2ulTkrXZMhR2x721CpM8UgJLIkI/KjdXEFrjwF7uz/i9HYOdeWBG0ts4wWVi3 wGOBLrFvAQTaE3/MbCgEoiBc9u13M8dkNigu88/qDd+Lg4lT/g3Q4nGQmuAKiCAO C47O61WbF2FPC3wrVm/wdfOMSlwdjHipto5kf6UWuIctMr6LKWPhn14461+GPUqM B8RhZKoH7mVTn9xIyWSfkJv0AhbIje5VS7ryV714NEcjdiaclZBeP+IdpqLExeoy DtTIYM7B5Ye6hwzzViLFwcYLLtPIdgT231WFdh7C3nXRs8WgRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRyZY4kZl1M14x/hwvhQjngDSb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzkzNDY5OTItZjM1OC0z MDQ0LWI0MWUtZTViNDMzYTEyOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzfRv8TKDnrFeP9neXBMAMWneMAqfNUJU0CwWQ6fsegACjRGBf1m7F1 Wr1vMK62bcjuWGhgPB5m29yIO8MrV+kb1Z0TFTvecer+EuCY7VvVHjTBgxhfQ3Az t9BxoiQGnIUcQi3UFmTwyx5+4uT5TEijpXFduFdYxyTNfMiAWgE4jbisiqu2YI59 g1AZ2P+1bBRyzEKw6usBmawOPSJDYNTfhU+vgbIuMd34IpWJ//DFjDWv06FeZEWm 1k3mOYjDGGUJ/x8+mMbQ4f/2JhbADNN3GFsj49OrE0Hm2YRjMpJbGNrO0yPIe2KC iCD6X6IXyLbOkej/Vcz68Pf/ocDmGu4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:13 2025 by rpki-client