$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa File: d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa (raw, json) Hash identifier: xGrIE0C/P+eJdSxqedi5onh4xk3MYQo0bmESn2OpfyI= Subject key identifier: E9:23:18:DE:E4:F1:1F:61:00:C2:DC:A3:08:9D:8A:83:03:86:D3:A6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACF710768C1BD2E22D48C5E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.70.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:07:68:c1:bd:2e:22:d4:8c:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=44979abe-670f-43fe-bfe8-4b305c88c1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:88:93:b0:31:d9:8b:5c:7f:0a:a1:4e:eb: 81:a5:77:40:16:e2:76:6e:0f:6c:b0:a2:ed:3d:ea: 9d:d8:1c:ad:d5:05:67:d5:39:fa:e0:70:2c:d4:77: 8c:0d:63:20:6a:b4:1c:56:21:a4:2f:98:e8:3f:c5: 66:ce:06:a1:7f:1e:ec:8a:be:bf:e7:cc:fb:04:9a: b0:84:e7:52:a0:d6:06:3e:b3:75:ff:e2:8b:d7:8f: cd:5c:8e:ba:d7:b7:bf:46:41:0f:6a:48:e4:10:f3: 9a:a9:ae:92:ea:8d:f6:db:1c:36:bb:c1:4c:a5:00: 28:e9:21:4a:ec:71:8f:28:7a:e9:72:01:df:f3:c2: 3e:93:71:b2:2b:d5:10:40:81:45:1d:0d:3c:b6:dc: 66:93:70:3b:86:e5:44:dd:f2:19:23:fd:c7:0a:a3: af:e4:75:a8:ba:db:cb:7a:50:6d:44:50:bf:ee:68: 10:0b:cc:98:db:08:17:cf:2a:9f:15:53:70:0e:dd: 7b:64:31:69:5e:10:b7:d8:67:a8:22:ca:55:83:bd: 27:60:63:e8:a7:c3:8b:e5:33:59:83:8e:84:e8:1f: aa:c3:ad:2c:9a:77:3f:01:95:ad:40:e4:26:57:83: be:58:51:68:8c:47:14:98:9b:26:13:86:ac:83:3f: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:23:18:DE:E4:F1:1F:61:00:C2:DC:A3:08:9D:8A:83:03:86:D3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2d:2b:48:69:73:ef:f4:99:54:c1:c3:99:7a:f3:7f:5e:6e: ce:8d:c5:d0:c9:42:12:3c:fd:66:28:dc:6f:e2:4e:ba:42:87: 19:e0:cd:bc:91:06:06:97:fa:8c:e1:cd:76:be:08:be:08:b3: 5d:5e:c4:56:9c:1d:bd:d6:be:dd:8a:79:66:c4:c5:4e:a1:e5: e2:c0:3b:06:2e:b9:4a:52:8b:60:2a:60:8f:46:50:25:b6:dc: 03:4e:0a:0d:d4:76:4b:b5:5f:5b:dd:6d:97:50:6f:51:65:ac: 9a:14:9f:97:fb:1e:55:b3:45:d6:c6:79:58:45:54:a1:51:be: 11:e8:47:44:ab:92:81:b9:6a:e4:eb:8f:af:cb:02:45:76:a1: 03:47:70:43:da:30:fa:0e:4d:a8:37:8a:2f:92:f8:0e:89:e6: d0:9f:12:6b:9f:85:0d:31:cc:2b:0a:9a:de:09:f7:5c:82:76: 09:88:0c:fc:58:b2:c5:6f:91:01:c2:e9:0c:a8:91:9b:55:43: 0d:38:1e:9a:0b:f7:63:29:db:85:36:d9:ba:0d:73:12:83:2b: 16:73:fe:ba:01:b5:70:4b:00:33:99:0e:b6:f1:2d:96:98:fe: 7d:81:b2:fc:39:88:7f:70:9b:73:d6:d2:1c:b7:2e:d3:79:4f: df:5f:d6:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQdowb0uItSMXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NDQ5NzlhYmUtNjcwZi00M2ZlLWJmZTgtNGIzMDVjODhjMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooeIk7Ax2YtcfwqhTuuBpXdAFuJ2bg9ssKLt Peqd2Byt1QVn1Tn64HAs1HeMDWMgarQcViGkL5joP8Vmzgahfx7sir6/58z7BJqw hOdSoNYGPrN1/+KL14/NXI6617e/RkEPakjkEPOaqa6S6o322xw2u8FMpQAo6SFK 7HGPKHrpcgHf88I+k3GyK9UQQIFFHQ08ttxmk3A7huVE3fIZI/3HCqOv5HWoutvL elBtRFC/7mgQC8yY2wgXzyqfFVNwDt17ZDFpXhC32GeoIspVg70nYGPop8OL5TNZ g46E6B+qw60smnc/AZWtQOQmV4O+WFFojEcUmJsmE4asgz/KIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkjGN7k8R9hAMLcowidioMDhtOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDVlOGRjOGMtNTE0OS0z YTQ5LTllZjMtZDg5MjQwMzBkNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACotK0hpc+/0mVTBw5l6839ebs6NxdDJQhI8/WYo3G/iTrpChxngzbyR BgaX+ozhzXa+CL4Is11exFacHb3Wvt2KeWbExU6h5eLAOwYuuUpSi2AqYI9GUCW2 3ANOCg3Udku1X1vdbZdQb1FlrJoUn5f7HlWzRdbGeVhFVKFRvhHoR0SrkoG5auTr j6/LAkV2oQNHcEPaMPoOTag3ii+S+A6J5tCfEmufhQ0xzCsKmt4J91yCdgmIDPxY ssVvkQHC6QyokZtVQw04HpoL92Mp24U22boNcxKDKxZz/roBtXBLADOZDrbxLZaY /n2Bsvw5iH9wm3PW0hy3LtN5T99f1qg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:06:42 2025 by rpki-client