$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa File: dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa (raw, json) Hash identifier: 30vk0O1D2F0dcjkc5SmKuFQ1DlZ+Jk07DaQKluNTcqM= Subject key identifier: 40:38:B1:95:69:7B:E0:D9:92:2A:BA:B8:8D:FD:40:FE:33:B9:32:D3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACF710D0E89C4550FA4029300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:0d:0e:89:c4:55:0f:a4:02:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=9bd315af-8c07-483b-86e6-e73b181d4ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f9:6c:1a:d0:0d:9d:f1:55:54:a6:01:87:a9: ee:a9:80:45:3f:c6:6a:da:b4:45:3c:db:77:c7:59: be:a4:f6:a6:c0:ac:79:70:55:0e:2e:f2:72:49:99: 93:6b:17:44:3d:f5:35:4e:d8:ab:83:e9:40:f8:de: 24:2a:1f:e9:60:c3:ef:e7:6a:78:ac:79:fd:7f:e6: 74:9e:5c:26:60:20:10:6d:b1:0d:bb:24:a8:ff:06: b5:42:85:bf:b1:34:37:81:6f:f3:de:bf:be:cf:e0: 09:ab:b1:69:b0:a2:19:2f:18:18:b8:71:2b:2c:53: bf:d0:9a:c1:46:ba:30:11:a0:7f:da:d9:b3:a5:26: 2e:28:4e:dd:f9:c4:a2:30:3f:ac:1d:66:0b:ad:aa: 33:a3:91:3e:25:94:9d:28:23:f8:5a:f2:ab:c2:a1: a7:9f:27:17:79:03:2e:7b:82:08:2b:da:4f:68:a0: 10:be:6f:88:94:ba:08:c5:1b:6a:f9:4f:0e:b5:51: c9:4a:f2:34:b5:e9:e4:81:0e:bd:5f:5f:3f:7f:4c: 63:6e:98:ec:57:7b:54:a8:49:68:b6:5c:0b:e0:42: 00:23:1c:15:60:05:fb:47:2f:d1:16:e7:42:e6:65: 85:0f:1f:95:68:20:b3:68:53:95:33:8a:a7:33:c6: a7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:38:B1:95:69:7B:E0:D9:92:2A:BA:B8:8D:FD:40:FE:33:B9:32:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a2:75:27:de:0b:f0:40:da:8f:d8:f4:c6:73:ab:ee:72:3f: a9:38:47:32:ea:8e:56:63:27:1f:09:4a:4d:e5:a2:c3:72:33: e1:d4:e1:46:c3:63:5f:8f:e1:89:9e:41:b2:55:1d:fe:de:15: 0d:32:68:d0:92:84:6d:1f:56:20:62:fd:bb:57:7e:53:71:be: 5b:6b:ee:31:72:0e:cd:38:84:a3:f0:0e:50:ac:2a:f4:5d:39: 54:16:c6:7b:f2:00:b5:3e:a0:f8:8f:c6:2a:f9:2a:d6:89:64: 7a:11:4a:71:48:88:99:a7:46:ec:0c:c2:82:a2:da:bd:2a:ed: 0d:60:fb:03:84:c3:e2:6b:0c:21:5a:00:17:e0:7f:5d:44:5b: 89:e4:4a:16:9e:86:ce:e1:c4:6a:8b:c1:66:2c:50:24:a2:02: ad:0e:9f:aa:fb:2b:62:a4:0f:35:51:0c:ff:57:d6:af:e7:76: 9f:de:88:38:e0:8c:7b:70:62:34:a5:63:8a:c0:30:06:89:9e: 2e:cb:05:fb:30:97:8b:e3:63:2c:d5:a7:97:82:aa:77:b3:3a: 55:0b:94:8d:56:25:12:21:9f:e0:09:70:46:b0:66:5b:da:08: ab:ac:5d:ab:d2:fa:38:a1:50:81:2e:0d:bc:f9:14:4e:10:b1: 5c:40:1f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQ0OicRVD6QCkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk OWJkMzE1YWYtOGMwNy00ODNiLTg2ZTYtZTczYjE4MWQ0ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvlsGtANnfFVVKYBh6nuqYBFP8Zq2rRFPNt3 x1m+pPamwKx5cFUOLvJySZmTaxdEPfU1Ttirg+lA+N4kKh/pYMPv52p4rHn9f+Z0 nlwmYCAQbbENuySo/wa1QoW/sTQ3gW/z3r++z+AJq7FpsKIZLxgYuHErLFO/0JrB RrowEaB/2tmzpSYuKE7d+cSiMD+sHWYLraozo5E+JZSdKCP4WvKrwqGnnycXeQMu e4IIK9pPaKAQvm+IlLoIxRtq+U8OtVHJSvI0tenkgQ69X18/f0xjbpjsV3tUqElo tlwL4EIAIxwVYAX7Ry/RFudC5mWFDx+VaCCzaFOVM4qnM8an9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA4sZVpe+DZkiq6uI39QP4zuTLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGZiYThlNWEtMDI0OC0z M2NiLWJjN2YtZjNkZDEyYWYyNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6idSfeC/BA2o/Y9MZzq+5yP6k4RzLqjlZjJx8JSk3losNyM+HU4UbD Y1+P4YmeQbJVHf7eFQ0yaNCShG0fViBi/btXflNxvltr7jFyDs04hKPwDlCsKvRd OVQWxnvyALU+oPiPxir5KtaJZHoRSnFIiJmnRuwMwoKi2r0q7Q1g+wOEw+JrDCFa ABfgf11EW4nkShaehs7hxGqLwWYsUCSiAq0On6r7K2KkDzVRDP9X1q/ndp/eiDjg jHtwYjSlY4rAMAaJni7LBfswl4vjYyzVp5eCqnezOlULlI1WJRIhn+AJcEawZlva CKusXavS+jihUIEuDbz5FE4QsVxAH1Y= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:41 2025 by rpki-client