$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca28aa9e-775a-3b39-9835-e7ca3bef815c.roa File: ca28aa9e-775a-3b39-9835-e7ca3bef815c.roa (raw, json) Hash identifier: +jf34Qg3YyrUHACpi6MzNu7wp6y28Lhyy4PbHxe5gjs= Subject key identifier: 78:C8:4F:05:D3:46:43:03:02:51:A5:DD:21:7E:60:9C:54:E7:DE:F4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64927823E8D2D0CE5DB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca28aa9e-775a-3b39-9835-e7ca3bef815c.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:49:27:82:3e:8d:2d:0c:e5:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=c2f3e87a-df89-4919-8fe0-7e98b75d5261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:65:42:22:a6:62:63:3d:d2:93:89:a6:d0:64: c4:32:60:65:25:15:1a:73:a7:24:07:32:db:d4:4e: 90:7d:17:0e:e8:93:a6:d4:f5:34:2c:e6:5e:5d:c1: f3:be:7c:32:14:ec:44:3a:e2:15:74:85:3a:78:33: 47:13:c9:76:25:ec:0b:53:53:ed:39:2a:fd:cd:9a: 18:00:3b:6b:5b:60:0d:cd:05:25:16:98:ff:cb:37: 5d:18:7f:21:9d:16:7f:0b:3b:53:d7:57:ba:a6:be: 25:f5:42:0d:3b:22:92:31:fa:4a:77:39:b1:9c:cd: c3:fd:96:03:23:d9:39:62:67:ba:cd:0f:f4:bf:30: eb:b9:97:bc:91:4b:8d:64:6e:73:8f:ee:70:96:30: 35:84:a6:72:ee:f5:2a:7f:1d:93:37:35:bd:bb:c0: 87:06:d2:97:f2:bc:73:59:4e:74:51:8d:31:44:42: db:dd:b7:c5:1d:ba:cd:f7:ca:7e:46:da:e2:81:f2: a1:a3:40:48:a9:ff:1b:da:11:63:4c:20:95:8c:72: 34:55:fa:dc:71:1a:9b:8b:59:b3:84:3b:41:24:e6: 3e:c4:6e:b2:b5:9b:10:e5:64:7d:22:1a:ee:bd:65: 43:e8:9a:72:24:12:2f:a3:a9:b2:f4:0b:4e:36:cb: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C8:4F:05:D3:46:43:03:02:51:A5:DD:21:7E:60:9C:54:E7:DE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca28aa9e-775a-3b39-9835-e7ca3bef815c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:74:de:11:e1:fc:21:36:41:83:68:21:e7:e8:a4:ca:1e:cf: 8e:78:7e:c8:85:cb:23:5a:16:3b:5d:92:2f:90:2b:fd:51:8f: 05:ed:56:69:a8:36:4f:aa:a4:22:5f:f7:ca:d2:52:c4:6e:d1: cd:bf:8a:19:38:b9:c2:3b:46:89:bb:f8:36:15:b0:e4:a6:9a: 69:2b:99:c8:4d:ab:64:32:8b:a2:7f:82:d7:73:9d:0d:4e:fa: a7:d4:57:a0:b4:13:da:ba:5d:db:bc:8a:ae:29:c2:d6:8e:6d: 45:81:6b:ff:70:56:b8:23:de:d6:e3:bf:37:6b:54:72:5e:72: 4c:f8:fc:63:4e:49:a3:d9:d7:29:5e:a8:eb:dc:1f:f9:cb:fa: 86:3b:93:d7:ce:c0:dd:5e:17:57:6a:34:bf:2e:65:c6:3e:0f: 9d:7f:ca:9a:2d:fd:bb:ea:f0:3d:97:1b:9f:a7:e7:ab:38:9a: b1:79:89:a2:af:f8:32:26:dc:bb:df:34:8c:79:23:ec:1a:32: 0e:53:5c:1f:c1:fe:0b:20:2f:43:3b:21:83:bd:83:16:ec:7f: 32:ee:4f:39:79:b7:c8:f9:d6:ff:09:68:fd:f8:a7:8a:8b:ff: eb:29:ea:68:4b:b2:31:28:a2:b6:c0:22:43:04:ec:16:d6:71: a9:3b:4c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kkngj6NLQzl24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YzJmM2U4N2EtZGY4OS00OTE5LThmZTAtN2U5OGI3NWQ1MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWVCIqZiYz3Sk4mm0GTEMmBlJRUac6ckBzLb 1E6QfRcO6JOm1PU0LOZeXcHzvnwyFOxEOuIVdIU6eDNHE8l2JewLU1PtOSr9zZoY ADtrW2ANzQUlFpj/yzddGH8hnRZ/CztT11e6pr4l9UINOyKSMfpKdzmxnM3D/ZYD I9k5Yme6zQ/0vzDruZe8kUuNZG5zj+5wljA1hKZy7vUqfx2TNzW9u8CHBtKX8rxz WU50UY0xRELb3bfFHbrN98p+RtrigfKho0BIqf8b2hFjTCCVjHI0VfrccRqbi1mz hDtBJOY+xG6ytZsQ5WR9IhruvWVD6JpyJBIvo6my9AtONssOKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjITwXTRkMDAlGl3SF+YJxU5970MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2EyOGFhOWUtNzc1YS0z YjM5LTk4MzUtZTdjYTNiZWY4MTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALp03hHh/CE2QYNoIefopMoez454fsiFyyNaFjtdki+QK/1RjwXtVmmo Nk+qpCJf98rSUsRu0c2/ihk4ucI7Rom7+DYVsOSmmmkrmchNq2Qyi6J/gtdznQ1O +qfUV6C0E9q6Xdu8iq4pwtaObUWBa/9wVrgj3tbjvzdrVHJeckz4/GNOSaPZ1yle qOvcH/nL+oY7k9fOwN1eF1dqNL8uZcY+D51/ypot/bvq8D2XG5+n56s4mrF5iaKv +DIm3LvfNIx5I+waMg5TXB/B/gsgL0M7IYO9gxbsfzLuTzl5t8j51v8JaP34p4qL /+sp6mhLsjEoorbAIkME7BbWcak7TN0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:36 2025 by rpki-client