$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa File: cec2e359-1c23-30f6-8a83-2be8581e0783.roa (raw, json) Hash identifier: gWJe8qrfP4lREXFUfgeqmNe74aOG7FlBtrY1gztKA74= Subject key identifier: 90:46:27:98:DF:B2:9A:AC:70:4A:B0:12:3A:D9:80:93:2E:D4:5A:AB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D652EFFF5EE472AC1A5700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:52:ef:ff:5e:e4:72:ac:1a:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=b6651605-61ee-4b93-8161-3ef9603f4fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:82:a2:cb:6e:70:94:64:d0:96:aa:3f:6c:b5: 1c:99:a0:12:ac:29:cd:cb:b9:47:2f:86:b3:c7:bb: eb:a8:53:cb:d5:6e:1d:ba:45:73:10:6b:0f:69:ed: d3:d6:08:ec:fb:c7:ba:d0:47:d4:eb:29:d2:59:91: 07:16:08:ca:12:5a:7c:70:e6:c2:70:e7:40:90:44: 30:da:e3:ba:b7:86:c5:1f:8d:51:1a:bb:75:8f:e8: c1:62:a4:0a:5e:c0:a7:92:83:02:ce:c2:6e:04:5a: 6e:ba:2a:5f:f1:05:b1:56:fa:0c:b2:ea:46:0c:5a: ea:65:2e:5e:6a:34:22:ec:c1:2b:13:94:27:43:54: 1c:9a:5f:de:f1:a7:85:33:88:6b:b8:3d:f6:cd:f4: e7:a0:ab:aa:d0:5f:b9:ce:d0:0f:e2:a0:48:a2:d5: 58:c1:1a:8a:04:65:15:48:84:48:18:10:4b:d3:6e: dc:2a:b8:a5:ea:c8:00:61:b7:81:18:90:8b:90:a6: f3:96:5e:18:2e:eb:2d:6e:91:b9:48:18:9f:75:2d: a1:8b:5f:9d:f2:81:5d:34:5d:1c:b4:41:0f:53:84: bf:69:93:cb:30:c0:7f:c6:2a:95:f1:53:16:09:4e: 4b:a6:ad:54:26:58:29:7c:9f:ad:4e:ec:4f:c8:62: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:46:27:98:DF:B2:9A:AC:70:4A:B0:12:3A:D9:80:93:2E:D4:5A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b2:bc:38:ff:77:7a:e5:f2:59:6c:cb:65:a5:e8:a9:a6:39: e3:ba:ae:d3:49:fb:f9:fc:5e:9a:f7:76:e2:06:44:e6:ed:25: 23:01:53:90:09:f5:f7:3b:2b:a4:be:63:ee:87:39:d5:eb:3a: 3b:d1:1a:ad:6b:d4:90:0e:4b:e0:b6:a2:d2:ca:b9:0f:17:b5: ba:ac:b3:88:1a:4c:3b:6c:4d:10:d0:50:07:00:5c:9e:a9:6e: a7:56:25:36:4f:36:bb:ca:60:33:76:de:af:78:3f:7f:3a:30: 41:b0:6d:10:36:68:98:06:a3:63:36:b6:fa:30:e7:9d:38:ed: 5e:72:2c:db:36:2f:d9:3d:75:f3:af:88:e4:41:9e:0c:56:f3: db:f0:72:38:d7:81:f7:4f:85:fb:a4:bf:1c:a4:0c:dc:d6:20: 09:13:3e:2c:36:95:6b:0c:73:2a:be:a5:b6:05:ae:81:83:66: ed:34:3c:de:81:24:4e:a5:2e:73:60:2d:20:9b:87:db:80:e0: 02:e2:2e:d7:d1:4c:9f:50:29:e2:e2:33:bf:ea:3a:a8:79:6e: d5:38:2f:36:9e:fd:31:b0:3f:5b:6e:05:b7:6d:3a:fb:64:2d: a6:37:29:5b:7b:94:d6:43:f1:92:3e:f7:91:c0:39:cb:da:24: 66:b2:41:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lLv/17kcqwaVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YjY2NTE2MDUtNjFlZS00YjkzLTgxNjEtM2VmOTYwM2Y0ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIKiy25wlGTQlqo/bLUcmaASrCnNy7lHL4az x7vrqFPL1W4dukVzEGsPae3T1gjs+8e60EfU6ynSWZEHFgjKElp8cObCcOdAkEQw 2uO6t4bFH41RGrt1j+jBYqQKXsCnkoMCzsJuBFpuuipf8QWxVvoMsupGDFrqZS5e ajQi7MErE5QnQ1Qcml/e8aeFM4hruD32zfTnoKuq0F+5ztAP4qBIotVYwRqKBGUV SIRIGBBL027cKril6sgAYbeBGJCLkKbzll4YLustbpG5SBifdS2hi1+d8oFdNF0c tEEPU4S/aZPLMMB/xiqV8VMWCU5Lpq1UJlgpfJ+tTuxPyGLUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBGJ5jfspqscEqwEjrZgJMu1FqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2VjMmUzNTktMWMyMy0z MGY2LThhODMtMmJlODU4MWUwNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKyvDj/d3rl8llsy2Wl6KmmOeO6rtNJ+/n8Xpr3duIGRObtJSMBU5AJ 9fc7K6S+Y+6HOdXrOjvRGq1r1JAOS+C2otLKuQ8Xtbqss4gaTDtsTRDQUAcAXJ6p bqdWJTZPNrvKYDN23q94P386MEGwbRA2aJgGo2M2tvow55047V5yLNs2L9k9dfOv iORBngxW89vwcjjXgfdPhfukvxykDNzWIAkTPiw2lWsMcyq+pbYFroGDZu00PN6B JE6lLnNgLSCbh9uA4ALiLtfRTJ9QKeLiM7/qOqh5btU4Lzae/TGwP1tuBbdtOvtk LaY3KVt7lNZD8ZI+95HAOcvaJGayQUA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:01 2025 by rpki-client