$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa File: de441c87-afcb-3e53-98c5-4a828c903001.roa (raw, json) Hash identifier: XbfOOF0nI4XLKMaHNkLFcC8nJ8x184K49zGVc7JK1Fw= Subject key identifier: A7:1B:F6:1F:03:1B:86:EC:56:6D:F7:88:10:47:FF:D1:D2:7B:91:72 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64F20385168606CAC9AC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4f:20:38:51:68:60:6c:ac:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=32e36673-5aae-455e-967c-c1509087c864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:b3:ee:d5:a4:ef:9a:a9:40:12:c0:c7:2a: bf:64:34:dc:32:fd:b1:cd:dc:3d:66:54:ea:4b:97: e3:16:b5:6b:ef:08:d7:29:b5:62:3c:ba:79:ad:50: 3a:ba:15:c1:cf:54:53:66:a1:03:da:5f:41:ea:65: 58:7f:1b:12:27:cd:8e:b3:29:5a:d1:a5:d5:60:de: de:03:4a:47:70:51:46:ed:79:19:40:a9:41:e8:9a: 00:6f:27:fe:38:33:74:ce:62:02:58:e7:b5:2a:b2: 5e:76:74:62:5f:68:f3:7b:12:1a:09:3e:c5:e2:b7: 2d:54:59:4a:32:3e:02:1a:f5:53:5f:70:bd:83:33: b1:a3:83:c6:7c:81:82:d2:b4:f2:52:bb:aa:94:ea: 78:c5:d1:fa:57:68:71:82:6e:15:94:2c:27:39:42: f8:64:b3:ac:bf:d1:23:77:2c:25:c1:e5:59:ac:72: 0e:e1:e5:3d:3e:9b:08:45:51:64:d8:b7:ac:b8:b2: d0:3b:5e:85:9c:f6:77:ef:46:b1:7d:d0:ae:ae:5c: 76:ad:13:1e:cd:59:e8:85:cb:ed:04:47:48:07:9b: 28:1d:92:e8:fc:09:cb:a9:a1:75:8f:7d:7f:5d:91: ce:fe:07:70:e1:0f:66:b5:51:13:a5:c5:75:c2:88: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1B:F6:1F:03:1B:86:EC:56:6D:F7:88:10:47:FF:D1:D2:7B:91:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c1:bc:5b:c1:6a:20:72:b4:a1:4d:34:02:1f:57:01:9c:3c: b4:cd:d6:9b:3e:21:08:64:e5:b1:0e:c5:69:94:ed:d0:ec:46: 6b:d6:8a:ae:1f:cb:08:21:60:66:67:0d:0e:96:f6:2d:eb:cb: 13:7f:8e:80:2d:78:d5:e8:64:84:64:10:83:40:5b:ce:91:f4: bc:10:32:2a:14:a8:4e:d7:5e:95:5f:ad:ff:27:60:34:ca:ad: f6:99:d6:27:96:a7:57:28:b7:8d:87:bc:8d:78:49:62:c8:27: a0:55:96:2a:39:16:ef:b5:fe:e7:a1:f5:c7:f5:39:16:1e:73: a7:36:f1:16:49:94:c9:0e:89:6e:f4:77:04:9f:2f:1d:94:25: eb:1c:cc:18:e7:73:95:3e:1d:4e:d0:b0:c4:79:8a:f0:9b:52: e0:14:fe:93:4f:25:24:e9:86:71:44:4a:cf:93:ad:66:cb:02: 58:23:64:d8:99:11:34:fc:28:d4:07:b9:89:11:5a:59:41:74: fe:08:7a:04:53:f9:d6:a8:04:7e:a0:f4:2e:a1:6f:4e:28:43: a6:8a:e4:eb:a3:4a:8c:73:82:da:c1:91:44:8a:c7:14:07:a8: bb:2a:8a:29:ae:3f:25:3a:07:c3:c8:0e:80:46:17:e3:3b:d2: 6b:7a:5a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1k8gOFFoYGysmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk MzJlMzY2NzMtNWFhZS00NTVlLTk2N2MtYzE1MDkwODdjODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZOz7tWk75qpQBLAxyq/ZDTcMv2xzdw9ZlTq S5fjFrVr7wjXKbViPLp5rVA6uhXBz1RTZqED2l9B6mVYfxsSJ82Osyla0aXVYN7e A0pHcFFG7XkZQKlB6JoAbyf+ODN0zmICWOe1KrJednRiX2jzexIaCT7F4rctVFlK Mj4CGvVTX3C9gzOxo4PGfIGC0rTyUruqlOp4xdH6V2hxgm4VlCwnOUL4ZLOsv9Ej dywlweVZrHIO4eU9PpsIRVFk2LesuLLQO16FnPZ370axfdCurlx2rRMezVnohcvt BEdIB5soHZLo/AnLqaF1j31/XZHO/gdw4Q9mtVETpcV1wohwLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcb9h8DG4bsVm33iBBH/9HSe5FyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU0NDFjODctYWZjYi0z ZTUzLTk4YzUtNGE4MjhjOTAzMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbBvFvBaiBytKFNNAIfVwGcPLTN1ps+IQhk5bEOxWmU7dDsRmvWiq4f ywghYGZnDQ6W9i3ryxN/joAteNXoZIRkEINAW86R9LwQMioUqE7XXpVfrf8nYDTK rfaZ1ieWp1cot42HvI14SWLIJ6BVlio5Fu+1/ueh9cf1ORYec6c28RZJlMkOiW70 dwSfLx2UJesczBjnc5U+HU7QsMR5ivCbUuAU/pNPJSTphnFESs+TrWbLAlgjZNiZ ETT8KNQHuYkRWllBdP4IegRT+daoBH6g9C6hb04oQ6aK5OujSoxzgtrBkUSKxxQH qLsqiimuPyU6B8PIDoBGF+M70mt6Wv8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:19:35 2025 by rpki-client