$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e12b1e62-3444-35ae-96c5-9be155fe3860.roa File: e12b1e62-3444-35ae-96c5-9be155fe3860.roa (raw, json) Hash identifier: IEba3G6d7H+4kAaaRiNL98IBKnyhkgoVd/DmNnmJXYY= Subject key identifier: 40:77:2B:26:97:99:A3:BF:1B:67:18:47:6F:BB:3E:11:EA:64:E9:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA1C6D95A8F3B588DEB9C Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e12b1e62-3444-35ae-96c5-9be155fe3860.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.71.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a1:c6:d9:5a:8f:3b:58:8d:eb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=75473661-445a-4cfe-bec1-bd5541e94c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:46:3e:cb:dd:67:8c:1b:bb:af:56:93:5f: da:1b:54:09:53:18:66:24:d0:f0:a9:1c:4c:e4:73: e5:15:46:0c:73:06:83:69:ae:8a:bb:fe:bf:38:d7: 58:d6:66:5f:0f:f0:50:87:e6:98:66:14:c2:98:b8: 5f:fe:5d:79:3c:c1:0b:9f:b8:5f:26:be:92:5d:6f: 8b:a7:42:50:07:ef:b3:b4:d6:40:88:1b:c0:e5:c0: c0:88:7f:29:cc:07:65:c3:a5:cb:6a:9b:a9:5d:2d: 89:a4:b0:2b:7e:1b:39:a1:57:11:ed:82:28:a4:eb: 6e:39:98:bf:98:9f:19:90:09:43:aa:04:1f:67:72: 8c:ee:75:09:d7:3b:01:2b:56:eb:bb:c9:bf:20:f1: 7a:77:4a:eb:bf:dc:54:c4:16:e2:40:44:a8:3f:f2: 69:c8:0e:f0:a8:0d:c7:4f:be:8e:af:54:dd:7e:76: 6d:4d:a3:cc:12:39:23:c4:95:bc:02:01:93:35:f3: 32:07:e1:ce:0b:b8:6f:00:2b:b5:ef:a7:37:69:0d: 20:d4:61:6f:9f:76:ac:9b:44:c6:a4:b5:9f:c9:8f: dc:43:38:0d:da:60:3f:23:50:f6:9e:63:ea:4b:be: 83:f9:8d:0d:b5:5f:9d:f6:c6:dc:4b:85:ec:5a:a8: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:77:2B:26:97:99:A3:BF:1B:67:18:47:6F:BB:3E:11:EA:64:E9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e12b1e62-3444-35ae-96c5-9be155fe3860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:db:60:e6:16:d4:c7:35:69:26:f6:d5:dc:44:d5:8b:b5:3d: 81:30:03:58:92:de:cd:a5:92:e6:cd:20:3f:4c:a5:1a:9c:c0: b8:6a:3f:a0:5a:6e:55:ff:eb:7a:b5:d1:55:f1:40:8d:02:e7: 19:6a:59:e7:6f:59:dd:4d:29:a8:d1:2e:3a:c1:a2:81:da:9a: 41:f1:a8:7a:c5:e7:d8:44:b8:c8:14:a3:1a:3b:6a:0d:44:73: dd:67:53:e1:6d:0c:25:a5:89:18:78:7a:50:35:1f:de:e1:7f: 45:c4:e1:a2:db:0d:e9:a1:a5:3d:71:e9:69:13:fc:b3:bb:f7: 33:5a:73:8a:fa:e9:45:92:f9:9d:94:cd:ff:27:30:45:b4:b3: 44:23:4d:2d:11:b3:c9:7a:7b:89:64:9a:8c:be:d7:dd:63:5c: 24:cc:02:00:03:9a:60:4a:a9:eb:87:38:2e:c0:6b:94:6c:28: 8e:c9:5f:50:57:1e:1d:88:5a:ae:96:86:22:8b:dc:18:78:de: bc:78:c9:e5:5d:2c:3b:58:6c:4e:7a:8c:cd:a8:1b:24:05:e2: 45:10:af:c3:d8:69:a7:42:f9:f6:4d:dc:69:00:b6:36:47:de: dc:59:44:b9:ab:67:6e:1f:2a:6c:d5:84:da:e0:d3:19:cc:aa: 31:9f:b9:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6HG2VqPO1iN65wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk NzU0NzM2NjEtNDQ1YS00Y2ZlLWJlYzEtYmQ1NTQxZTk0Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS5GPsvdZ4wbu69Wk1/aG1QJUxhmJNDwqRxM 5HPlFUYMcwaDaa6Ku/6/ONdY1mZfD/BQh+aYZhTCmLhf/l15PMELn7hfJr6SXW+L p0JQB++ztNZAiBvA5cDAiH8pzAdlw6XLapupXS2JpLArfhs5oVcR7YIopOtuOZi/ mJ8ZkAlDqgQfZ3KM7nUJ1zsBK1bru8m/IPF6d0rrv9xUxBbiQESoP/JpyA7wqA3H T76Or1TdfnZtTaPMEjkjxJW8AgGTNfMyB+HOC7hvACu176c3aQ0g1GFvn3asm0TG pLWfyY/cQzgN2mA/I1D2nmPqS76D+Y0NtV+d9sbcS4XsWqjtcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB3KyaXmaO/G2cYR2+7PhHqZOl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTEyYjFlNjItMzQ0NC0z NWFlLTk2YzUtOWJlMTU1ZmUzODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvbYOYW1Mc1aSb21dxE1Yu1PYEwA1iS3s2lkubNID9MpRqcwLhqP6Ba blX/63q10VXxQI0C5xlqWedvWd1NKajRLjrBooHamkHxqHrF59hEuMgUoxo7ag1E c91nU+FtDCWliRh4elA1H97hf0XE4aLbDemhpT1x6WkT/LO79zNac4r66UWS+Z2U zf8nMEW0s0QjTS0Rs8l6e4lkmoy+191jXCTMAgADmmBKqeuHOC7Aa5RsKI7JX1BX Hh2IWq6WhiKL3Bh43rx4yeVdLDtYbE56jM2oGyQF4kUQr8PYaadC+fZN3GkAtjZH 3txZRLmrZ24fKmzVhNrg0xnMqjGfuU4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:22 2025 by rpki-client