$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cab9fa92-3d96-386a-992f-f364a09af8b3.roa File: cab9fa92-3d96-386a-992f-f364a09af8b3.roa (raw, json) Hash identifier: bQe54k8BTgOR927Vi/BD78swUP5Zj7Yk/UNzABOqxtw= Subject key identifier: 8F:10:59:FE:55:08:2D:4E:D0:9D:C6:D7:1F:86:53:20:3C:CA:6B:EC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64952E356A93623C46100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cab9fa92-3d96-386a-992f-f364a09af8b3.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:49:52:e3:56:a9:36:23:c4:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=5b73db09-b593-4dad-b13e-35b38e42c2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:85:28:59:57:30:fa:1e:c7:e9:fa:c7:77: e1:06:7a:6b:05:64:33:33:ae:a1:c0:35:3d:aa:c7: a8:26:95:42:04:28:a2:c0:ab:83:39:28:06:de:53: e2:7a:ff:4c:62:07:f4:7e:0a:91:c5:f8:ea:68:89: 25:2c:94:23:98:dd:d0:80:ef:46:b2:1c:d3:ad:e7: c7:42:c2:3c:2c:d0:ed:3b:0e:0d:f6:15:22:19:28: 10:0f:5b:58:38:9f:d3:c7:fa:79:b6:1c:9b:e9:da: 7d:5c:a6:3c:c0:5d:4a:e9:9a:8a:27:4f:0c:37:35: 31:eb:a1:cf:89:3c:fb:1c:2c:c7:0a:90:24:cc:c2: af:c8:ad:06:02:b2:ac:0a:47:52:91:c3:88:d7:1e: d2:ae:c4:72:32:c1:d2:25:6e:32:c3:c4:96:e7:0c: 01:bb:91:10:e9:41:4c:e2:48:0e:ca:4a:96:e7:26: 47:64:ee:1b:8e:6a:11:47:83:e1:44:da:eb:58:c3: 43:c7:25:b9:e7:f4:11:5d:6a:fd:e9:d9:5b:bf:ec: 83:f3:e1:68:f3:b2:73:8a:b5:a6:f7:92:a7:fb:ea: 24:30:54:60:bf:78:24:0c:8c:2f:58:bc:b1:b3:76: ed:4d:88:95:07:80:08:77:25:0a:01:b0:a3:54:fc: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:10:59:FE:55:08:2D:4E:D0:9D:C6:D7:1F:86:53:20:3C:CA:6B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cab9fa92-3d96-386a-992f-f364a09af8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:16:06:92:72:37:e9:0b:bd:6e:bf:91:66:7d:66:8b:6f:cf: 61:b1:4d:e8:ad:cd:e0:b9:d7:d5:52:f1:68:d4:7d:f6:74:ea: 29:6b:7f:02:fe:cc:8c:ad:35:5d:d2:0e:2b:20:3c:31:d3:e9: 54:0e:f8:22:0f:db:03:e2:31:8d:27:46:2a:7f:68:d8:6f:73: 67:75:82:72:73:2f:26:8e:05:ef:cc:de:be:54:f9:d7:41:99: 8e:8f:72:77:a6:9c:41:d5:67:e3:44:af:6c:d9:90:f0:5b:bc: 5f:97:04:4d:45:38:8f:1c:62:52:23:d3:b2:2f:2f:83:64:fa: a5:8b:49:c6:e2:90:a4:da:35:e4:05:42:93:33:97:b0:83:c4: 05:39:c3:3c:12:1a:eb:d3:92:21:5d:e4:bc:80:5d:0a:f9:eb: 45:1f:a1:94:83:a3:3b:48:7c:73:b9:74:dd:ae:aa:3f:b0:15: 39:56:9e:07:b9:fb:f5:77:ab:6c:c1:13:51:81:77:ad:e3:0e: c5:12:51:e3:82:8f:67:21:70:67:d7:a9:3e:3d:80:69:8f:c1: 3e:fc:53:c8:93:c5:c0:9e:ad:9a:57:88:d3:06:b4:cb:2c:e2: 86:e8:f1:6a:67:b0:4b:01:b2:7c:d1:9a:c1:f2:dd:65:07:66: 2f:21:e8:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1klS41apNiPEYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NWI3M2RiMDktYjU5My00ZGFkLWIxM2UtMzViMzhlNDJjMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6qFKFlXMPoex+n6x3fhBnprBWQzM66hwDU9 qseoJpVCBCiiwKuDOSgG3lPiev9MYgf0fgqRxfjqaIklLJQjmN3QgO9GshzTrefH QsI8LNDtOw4N9hUiGSgQD1tYOJ/Tx/p5thyb6dp9XKY8wF1K6ZqKJ08MNzUx66HP iTz7HCzHCpAkzMKvyK0GArKsCkdSkcOI1x7SrsRyMsHSJW4yw8SW5wwBu5EQ6UFM 4kgOykqW5yZHZO4bjmoRR4PhRNrrWMNDxyW55/QRXWr96dlbv+yD8+Fo87JzirWm 95Kn++okMFRgv3gkDIwvWLyxs3btTYiVB4AIdyUKAbCjVPwD0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8QWf5VCC1O0J3G1x+GUyA8ymvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FiOWZhOTItM2Q5Ni0z ODZhLTk5MmYtZjM2NGEwOWFmOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4WBpJyN+kLvW6/kWZ9Zotvz2GxTeitzeC519VS8WjUffZ06ilrfwL+ zIytNV3SDisgPDHT6VQO+CIP2wPiMY0nRip/aNhvc2d1gnJzLyaOBe/M3r5U+ddB mY6PcnemnEHVZ+NEr2zZkPBbvF+XBE1FOI8cYlIj07IvL4Nk+qWLScbikKTaNeQF QpMzl7CDxAU5wzwSGuvTkiFd5LyAXQr560UfoZSDoztIfHO5dN2uqj+wFTlWnge5 +/V3q2zBE1GBd63jDsUSUeOCj2chcGfXqT49gGmPwT78U8iTxcCerZpXiNMGtMss 4obo8WpnsEsBsnzRmsHy3WUHZi8h6LE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:53 2025 by rpki-client