$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad82e11-bd65-357b-97b0-8c531326d16c.roa File: cad82e11-bd65-357b-97b0-8c531326d16c.roa (raw, json) Hash identifier: DDD7jJ5Spm/kxL5UvnTYPTamhWMcYwzn5sBPI0MM2Fo= Subject key identifier: B3:AF:CB:05:B9:7D:59:DD:35:D0:0C:95:93:4D:16:EF:C3:EF:A9:8A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65A983B89878797C18FC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad82e11-bd65-357b-97b0-8c531326d16c.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5a:98:3b:89:87:87:97:c1:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=86f7c7b2-4d24-4b27-b634-abf2ede4e51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:20:a7:45:30:23:3c:e4:16:8a:02:23:9c:12: 90:c9:5d:08:26:f7:64:d7:d3:27:0a:a6:bd:c5:8f: 9b:f4:5a:1f:a3:61:98:43:93:22:b2:4c:34:c9:33: 0c:02:e8:6b:02:7e:de:03:66:e4:b1:1f:3a:3d:3a: c4:3b:41:c2:82:54:4a:ed:b4:6f:38:ea:7f:8b:ba: 31:a8:34:4d:9b:e9:fb:aa:72:41:0e:20:30:2e:15: 96:2d:45:8c:d9:cd:db:6b:04:88:9d:a1:35:cf:b5: 89:00:47:45:64:8e:2d:2f:5f:2e:01:32:39:a2:ad: a1:88:4d:ca:4b:04:33:60:ce:82:35:80:35:81:84: e3:16:02:b1:8c:7b:e8:a4:e8:aa:d1:e1:77:08:2c: d4:6f:01:1a:b1:5c:f1:05:17:f5:19:9a:4d:49:a5: f7:9a:5c:6b:cf:06:0a:05:85:e2:a0:30:99:91:40: 22:a2:34:71:96:9b:d0:dd:7b:fc:cb:28:c0:13:19: 5f:b1:54:3f:df:ac:01:e7:79:3a:77:93:a1:ee:e8: a2:b9:a2:0e:32:b3:4a:a7:4c:44:c8:bc:51:59:6d: 68:8c:6b:1f:a6:6b:cd:6d:4e:43:3d:cf:76:30:97: c2:d3:45:bc:77:b3:4f:e0:ad:8a:ed:ae:50:98:8b: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AF:CB:05:B9:7D:59:DD:35:D0:0C:95:93:4D:16:EF:C3:EF:A9:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad82e11-bd65-357b-97b0-8c531326d16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:81:b2:78:58:9c:61:a7:47:60:20:89:9a:19:68:58:00:12: 23:0f:e9:bf:cf:e0:7c:ec:8c:0b:59:f3:42:8f:a4:6c:9c:36: 0f:48:95:2b:af:8a:85:de:09:a1:2e:58:40:92:7c:d7:8f:a2: 8d:d2:26:6d:13:04:c7:47:0e:a4:c9:5a:3d:37:c7:9e:ff:33: e0:9f:ee:e4:0b:78:64:0c:c8:5f:45:00:27:52:75:b5:39:69: 17:7d:07:e5:50:64:15:28:de:66:25:04:73:dc:73:bf:ac:d6: 9c:38:df:6b:c9:2d:5b:fa:a7:29:8e:d9:4a:7d:c2:f2:06:09: 6e:7d:0c:ec:c5:89:31:25:3f:ec:2f:fb:b2:2c:98:8c:d9:e5: 8a:b4:bd:ab:9b:5e:82:2a:68:ff:1f:48:ed:46:e1:e1:57:dc: de:96:ce:da:49:c5:96:08:cb:da:f4:1b:d5:a9:2a:c2:3a:d6: ba:55:4e:5f:fe:b1:d4:7f:a1:76:f2:18:d7:14:3d:26:d6:f6: 73:1c:5f:e6:ef:33:25:6c:ae:f5:62:ec:03:85:2f:03:6d:6e: a1:1b:43:f2:f7:7d:78:8c:fb:71:9f:08:f1:74:16:37:47:7d: d5:64:7b:f7:b5:b2:24:37:8d:91:a6:dc:96:4b:ee:ff:0a:8e: 1d:62:ab:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lqYO4mHh5fBj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ODZmN2M3YjItNGQyNC00YjI3LWI2MzQtYWJmMmVkZTRlNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SCnRTAjPOQWigIjnBKQyV0IJvdk19MnCqa9 xY+b9Fofo2GYQ5Miskw0yTMMAuhrAn7eA2bksR86PTrEO0HCglRK7bRvOOp/i7ox qDRNm+n7qnJBDiAwLhWWLUWM2c3bawSInaE1z7WJAEdFZI4tL18uATI5oq2hiE3K SwQzYM6CNYA1gYTjFgKxjHvopOiq0eF3CCzUbwEasVzxBRf1GZpNSaX3mlxrzwYK BYXioDCZkUAiojRxlpvQ3Xv8yyjAExlfsVQ/36wB53k6d5Oh7uiiuaIOMrNKp0xE yLxRWW1ojGsfpmvNbU5DPc92MJfC00W8d7NP4K2K7a5QmIv+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOvywW5fVndNdAMlZNNFu/D76mKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FkODJlMTEtYmQ2NS0z NTdiLTk3YjAtOGM1MzEzMjZkMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOBsnhYnGGnR2AgiZoZaFgAEiMP6b/P4HzsjAtZ80KPpGycNg9IlSuv ioXeCaEuWECSfNePoo3SJm0TBMdHDqTJWj03x57/M+Cf7uQLeGQMyF9FACdSdbU5 aRd9B+VQZBUo3mYlBHPcc7+s1pw432vJLVv6pymO2Up9wvIGCW59DOzFiTElP+wv +7IsmIzZ5Yq0vaubXoIqaP8fSO1G4eFX3N6WztpJxZYIy9r0G9WpKsI61rpVTl/+ sdR/oXbyGNcUPSbW9nMcX+bvMyVsrvVi7AOFLwNtbqEbQ/L3fXiM+3GfCPF0FjdH fdVke/e1siQ3jZGm3JZL7v8Kjh1iqyk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:05:52 2025 by rpki-client