$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2baaa42-f7aa-3e66-a527-f7a41a923145.roa File: d2baaa42-f7aa-3e66-a527-f7a41a923145.roa (raw, json) Hash identifier: xDD0riBIiiKVfGW0A1Dve1ys3a5p+ARDlikO56ZRNQ8= Subject key identifier: 84:CB:F2:BB:51:E4:02:9F:A3:75:0C:AE:3A:AA:37:49:A6:96:31:9B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D65A6A2546BF44AC67E280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2baaa42-f7aa-3e66-a527-f7a41a923145.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:5a:6a:25:46:bf:44:ac:67:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=609b45d1-deb6-4bb0-b474-a4b09e193db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:62:39:4d:e2:3d:1a:59:d0:64:11:b4:30: ad:34:1a:74:22:0f:e3:76:54:e3:6d:22:a1:58:59: 20:7e:d0:7e:5f:c1:ab:15:0c:e1:5d:7c:f9:c0:be: 18:7f:29:4d:83:13:ad:fd:48:5c:7f:1f:59:18:45: 7a:c9:dc:8e:c5:8e:af:61:e8:bd:c1:52:00:67:1a: 2d:7e:af:86:c8:30:b7:de:be:92:20:a0:64:b0:fb: 1f:73:51:bf:17:34:4d:1f:74:cf:c9:b5:1f:ee:45: eb:44:b4:37:46:74:03:58:ab:fa:98:23:e7:df:c3: f3:49:d7:92:f6:dc:1d:c5:a9:f7:6d:f9:ac:bd:ee: 06:81:07:ed:c8:05:aa:65:71:0f:40:9e:93:d5:7c: 1c:6c:c4:1e:65:c8:8f:08:3e:62:24:98:ec:e0:1b: b5:79:fd:ba:5c:09:59:ff:1b:fe:48:20:8e:9a:95: 4f:89:7d:75:61:cb:7b:a6:f9:43:e4:a3:df:b5:1a: af:9f:f1:f1:bd:0c:9a:8d:83:fd:0f:f1:7f:45:6f: 70:02:ef:69:6c:52:c9:c3:c6:13:21:b4:3f:29:d4: f2:59:32:c2:c9:de:ee:e1:d5:54:19:26:f6:5a:35: d4:b0:4b:c8:1a:a5:1a:a7:b8:d7:60:3f:9b:f7:c3: 5d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CB:F2:BB:51:E4:02:9F:A3:75:0C:AE:3A:AA:37:49:A6:96:31:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2baaa42-f7aa-3e66-a527-f7a41a923145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:fa:c4:8f:c1:04:84:6e:0d:cb:11:17:b1:04:c6:ed:33:88: 70:50:bf:0a:58:5a:20:8e:63:ba:74:8e:0d:59:9f:3c:da:3f: 91:04:75:92:92:c9:33:49:6f:6d:21:aa:9e:09:45:f8:b3:7a: 97:62:ec:3c:78:74:99:63:36:df:cf:bb:90:3f:26:e2:f0:71: ab:2b:5e:63:66:e3:d3:c0:69:f3:ab:de:3d:50:20:ae:79:9e: b2:74:ac:51:ef:4c:d6:82:82:be:5f:cf:38:0e:80:a3:81:35: f2:96:70:1f:77:d9:94:44:e4:70:e7:34:b7:50:13:f3:e5:60: cb:a1:1c:6f:f5:0d:d7:97:d1:08:74:27:45:dc:2b:10:da:8a: d6:96:ee:fa:41:ab:84:39:7a:f6:4b:08:da:a5:ed:47:a6:4c: 53:46:4f:63:c2:a4:db:6e:a7:7c:ad:34:0f:72:09:a0:76:95: 5e:26:cd:96:4f:b7:af:b9:4e:0e:9b:5d:f2:2e:78:7c:b0:70: c8:a3:a1:73:ac:e3:bf:b8:a7:48:88:d2:2b:75:e3:a4:57:87: 9b:90:59:46:d4:8e:3a:01:98:2f:16:07:9c:8c:55:8e:23:ec: 07:6f:c9:9b:cb:b6:8f:93:eb:b1:4c:56:f7:32:29:9a:fd:5b: bc:8b:26:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lpqJUa/RKxn4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NjA5YjQ1ZDEtZGViNi00YmIwLWI0NzQtYTRiMDllMTkzZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldFiOU3iPRpZ0GQRtDCtNBp0Ig/jdlTjbSKh WFkgftB+X8GrFQzhXXz5wL4YfylNgxOt/Uhcfx9ZGEV6ydyOxY6vYei9wVIAZxot fq+GyDC33r6SIKBksPsfc1G/FzRNH3TPybUf7kXrRLQ3RnQDWKv6mCPn38PzSdeS 9twdxan3bfmsve4GgQftyAWqZXEPQJ6T1XwcbMQeZciPCD5iJJjs4Bu1ef26XAlZ /xv+SCCOmpVPiX11Yct7pvlD5KPftRqvn/HxvQyajYP9D/F/RW9wAu9pbFLJw8YT IbQ/KdTyWTLCyd7u4dVUGSb2WjXUsEvIGqUap7jXYD+b98NdeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITL8rtR5AKfo3UMrjqqN0mmljGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDJiYWFhNDItZjdhYS0z ZTY2LWE1MjctZjdhNDFhOTIzMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj6xI/BBIRuDcsRF7EExu0ziHBQvwpYWiCOY7p0jg1ZnzzaP5EEdZKS yTNJb20hqp4JRfizepdi7Dx4dJljNt/Pu5A/JuLwcasrXmNm49PAafOr3j1QIK55 nrJ0rFHvTNaCgr5fzzgOgKOBNfKWcB932ZRE5HDnNLdQE/PlYMuhHG/1DdeX0Qh0 J0XcKxDaitaW7vpBq4Q5evZLCNql7UemTFNGT2PCpNtup3ytNA9yCaB2lV4mzZZP t6+5Tg6bXfIueHywcMijoXOs47+4p0iI0it146RXh5uQWUbUjjoBmC8WB5yMVY4j 7AdvyZvLto+T67FMVvcyKZr9W7yLJv8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:12 2025 by rpki-client