$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9d9ce3-2664-30da-8611-f3adf046b24c.roa File: cb9d9ce3-2664-30da-8611-f3adf046b24c.roa (raw, json) Hash identifier: 8qdcCGu3Njq+x2uArfaxJnyaLWqETU7xer3dwbrVIq0= Subject key identifier: 32:31:F3:4C:E8:9F:0F:4E:4E:35:E3:E2:80:51:6B:1C:28:DD:4C:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D6504FCE198BC34E486D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9d9ce3-2664-30da-8611-f3adf046b24c.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:50:4f:ce:19:8b:c3:4e:48:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=663553f2-717d-4921-9f8c-ba08cf121f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:de:15:99:1e:99:20:89:33:fc:de:ab:f6: 56:04:02:42:ac:2d:44:d5:00:37:ad:8e:ce:ab:b3: f4:23:e7:e3:77:65:3a:f8:6d:c3:ac:03:2d:88:f5: 63:c5:29:99:2c:94:e9:1f:4a:2b:70:b8:1a:68:c8: 15:2d:fd:77:35:74:85:c2:46:51:ca:a0:6a:72:76: 42:e1:5f:17:64:92:53:18:a0:26:63:6a:ca:b3:63: a4:80:16:e7:d8:76:86:3a:78:69:5d:4e:e8:f2:e0: b9:a6:4e:d9:c1:c0:15:b3:1f:ea:29:c3:e1:bf:2b: 49:1d:b8:23:6f:11:f0:db:e9:b6:53:4d:26:d4:00: 73:51:19:09:e5:2c:1b:ce:e7:04:52:62:e5:f3:0b: e1:ef:41:e5:5c:5d:bb:03:a7:89:6a:8a:77:28:04: 49:d6:59:b6:d0:80:35:12:3d:cb:c2:3b:d6:99:2d: ad:ff:b2:59:68:57:70:5d:40:3b:3c:d6:86:7f:b1: da:50:91:d1:d1:97:ce:27:d4:d4:ee:44:06:6e:75: f4:6a:c4:14:9b:33:6e:b5:33:98:10:36:fc:ac:f7: f7:71:3b:0c:75:11:1f:c0:5a:43:cf:85:83:5f:38: a9:e5:76:f5:35:70:ff:ce:fb:73:14:b2:29:f6:76: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:31:F3:4C:E8:9F:0F:4E:4E:35:E3:E2:80:51:6B:1C:28:DD:4C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb9d9ce3-2664-30da-8611-f3adf046b24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:72:5f:78:ee:eb:95:81:1d:07:20:9f:bc:c8:4f:a2:95:d1: 4a:5a:77:ac:65:6c:1e:f1:b0:8b:14:c8:60:3a:e3:e9:25:ae: e0:ee:74:29:3e:85:cf:d4:0e:8d:68:fa:f6:a2:3a:f7:4f:ef: 8b:ab:f5:02:af:0a:20:84:2f:6e:35:c1:e7:05:c7:15:03:ad: 69:48:c5:9f:40:a0:49:8f:b9:ef:6e:ee:32:96:0b:46:6c:f5: d3:f1:a4:9b:75:83:b0:a1:d8:ee:06:b7:ee:7e:93:f3:11:9c: 09:7d:1c:5f:a1:84:5f:9c:32:14:8c:cf:1f:02:71:1a:19:a2: 33:01:fc:2c:bb:93:37:eb:e2:c4:8b:c4:cd:86:79:12:55:cd: 6c:fe:c9:2c:87:22:a3:34:79:50:e8:8a:d4:db:57:27:1d:a3: 9f:1e:aa:a2:08:23:8c:59:dd:6a:b0:63:e3:06:6a:3f:b2:76: 74:6a:8e:95:65:56:7f:2f:67:b9:98:4d:f2:da:9f:e5:32:bd: ca:00:6b:c5:e0:fa:26:d6:72:7d:c2:61:ad:0d:9d:40:7a:78: 35:e2:41:3b:3d:78:b8:72:a0:1b:96:fb:a5:eb:50:d6:14:62: 3a:27:d4:f9:91:fb:3c:e3:61:3c:9c:3a:97:95:23:cc:72:0c: 97:6d:54:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lBPzhmLw05IbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NjYzNTUzZjItNzE3ZC00OTIxLTlmOGMtYmEwOGNmMTIxZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdDeFZkemSCJM/zeq/ZWBAJCrC1E1QA3rY7O q7P0I+fjd2U6+G3DrAMtiPVjxSmZLJTpH0orcLgaaMgVLf13NXSFwkZRyqBqcnZC 4V8XZJJTGKAmY2rKs2OkgBbn2HaGOnhpXU7o8uC5pk7ZwcAVsx/qKcPhvytJHbgj bxHw2+m2U00m1ABzURkJ5SwbzucEUmLl8wvh70HlXF27A6eJaop3KARJ1lm20IA1 Ej3LwjvWmS2t/7JZaFdwXUA7PNaGf7HaUJHR0ZfOJ9TU7kQGbnX0asQUmzNutTOY EDb8rPf3cTsMdREfwFpDz4WDXzip5Xb1NXD/zvtzFLIp9nbmUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIx80zonw9OTjXj4oBRaxwo3UwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2I5ZDljZTMtMjY2NC0z MGRhLTg2MTEtZjNhZGYwNDZiMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlyX3ju65WBHQcgn7zIT6KV0Upad6xlbB7xsIsUyGA64+klruDudCk+ hc/UDo1o+vaiOvdP74ur9QKvCiCEL241wecFxxUDrWlIxZ9AoEmPue9u7jKWC0Zs 9dPxpJt1g7Ch2O4Gt+5+k/MRnAl9HF+hhF+cMhSMzx8CcRoZojMB/Cy7kzfr4sSL xM2GeRJVzWz+ySyHIqM0eVDoitTbVycdo58eqqIII4xZ3WqwY+MGaj+ydnRqjpVl Vn8vZ7mYTfLan+UyvcoAa8Xg+ibWcn3CYa0NnUB6eDXiQTs9eLhyoBuW+6XrUNYU Yjon1PmR+zzjYTycOpeVI8xyDJdtVEc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:28 2025 by rpki-client