$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3777d93-39f5-3743-b23b-1a2a92b00a7f.roa File: e3777d93-39f5-3743-b23b-1a2a92b00a7f.roa (raw, json) Hash identifier: 2d1FeLOHSJmauHEI0tuRw4YSgAqZmXWEUybukjpizkc= Subject key identifier: E8:CB:53:03:CE:FC:F7:C0:77:44:C8:E9:EA:7C:63:69:51:8A:DB:7B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD7D1380FA6F55918E89C1B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3777d93-39f5-3743-b23b-1a2a92b00a7f.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 132892 IP address blocks: 172.70.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:38:0f:a6:f5:59:18:e8:9c:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=0410a3a2-3b6a-4727-aa58-77e2479d3f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:91:a2:19:28:fe:d9:6d:9f:46:76:63:0b: e0:11:a3:3f:94:e7:04:97:ed:78:ec:6b:1c:bc:c5: f7:dc:87:1b:8f:d8:25:76:d4:db:42:c5:81:92:11: f1:2f:28:66:d8:d1:e1:86:82:c0:31:79:9a:c5:4a: c4:a9:56:c9:aa:31:14:37:38:02:d3:15:e3:21:72: 2a:f7:1c:c3:fe:94:e7:71:a6:c0:97:95:7b:07:16: ab:00:60:a2:5c:20:8c:9f:12:96:50:90:a0:b1:f7: 4e:32:11:16:fe:3c:01:5f:97:aa:bb:40:2a:0b:f1: 33:ef:93:7a:a8:a1:6d:40:8b:49:92:92:cb:e0:52: 50:32:3f:b4:9d:8d:8a:b7:b4:c2:75:4f:19:70:19: bc:f0:4a:7a:02:b9:ae:5e:29:52:73:a6:ed:64:97: fa:c5:b6:00:36:7b:ac:63:c3:81:8d:b9:e1:ba:2f: a0:5e:3d:49:11:b2:f1:fa:74:33:9d:ce:94:83:2d: c5:15:3e:f2:6a:b8:83:0f:58:af:99:e6:66:6d:af: 8a:58:d7:a2:4c:fc:56:3b:37:25:9b:d5:d0:ae:13: 30:48:b4:a4:83:ae:07:f4:35:6d:5b:da:80:d5:48: 9e:d3:4b:23:91:8d:f9:08:05:9f:ef:aa:6a:79:28: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CB:53:03:CE:FC:F7:C0:77:44:C8:E9:EA:7C:63:69:51:8A:DB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3777d93-39f5-3743-b23b-1a2a92b00a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f7:ee:3a:60:84:7f:72:b8:09:a0:5b:c8:8f:88:83:3c:a7: b2:f7:27:b8:78:c1:3b:e1:04:74:d3:d9:ff:2a:2a:b6:e4:bc: b9:47:f9:ec:1b:ae:3b:ac:11:87:23:af:f9:82:1c:8a:54:e0: 8d:65:98:1b:94:33:9b:e5:10:6a:bf:e9:61:62:ad:01:43:b8: 06:bd:5d:38:82:ca:92:5b:70:98:29:51:18:0d:47:fc:d5:ab: 9a:82:47:20:9e:70:39:79:03:e7:60:ef:64:4a:3f:45:6d:3e: f0:14:60:f7:be:d4:fc:86:8b:9d:61:bd:89:9e:e5:7c:46:38: 59:80:48:d2:91:a7:20:a8:56:52:ae:10:4a:02:02:cf:52:55: b1:e9:58:61:6f:3c:bf:83:80:57:a7:ed:37:b8:cd:22:09:de: cf:1f:c2:fb:e6:44:f2:02:83:90:ae:03:2b:24:1a:c3:10:c1: 08:c6:db:c5:fd:80:3c:10:b2:dd:ce:a4:86:f5:ab:db:26:b4: 77:ca:b4:7f:b5:07:87:09:0c:c6:ce:06:6e:59:a4:6c:21:5e: a7:6c:e2:82:59:ce:98:82:1e:4f:cb:98:c7:79:60:2a:70:34: e2:ac:e2:c6:16:8c:87:29:d2:6f:f4:53:9e:47:75:e9:19:b4: 46:87:09:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0TgPpvVZGOicGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MDQxMGEzYTItM2I2YS00NzI3LWFhNTgtNzdlMjQ3OWQzZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/KRohko/tltn0Z2YwvgEaM/lOcEl+147Gsc vMX33Icbj9gldtTbQsWBkhHxLyhm2NHhhoLAMXmaxUrEqVbJqjEUNzgC0xXjIXIq 9xzD/pTncabAl5V7BxarAGCiXCCMnxKWUJCgsfdOMhEW/jwBX5equ0AqC/Ez75N6 qKFtQItJkpLL4FJQMj+0nY2Kt7TCdU8ZcBm88Ep6ArmuXilSc6btZJf6xbYANnus Y8OBjbnhui+gXj1JEbLx+nQznc6Ugy3FFT7yariDD1ivmeZmba+KWNeiTPxWOzcl m9XQrhMwSLSkg64H9DVtW9qA1Uie00sjkY35CAWf76pqeSiHcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjLUwPO/PfAd0TI6ep8Y2lRitt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTM3NzdkOTMtMzlmNS0z NzQzLWIyM2ItMWEyYTkyYjAwYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrEZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn37jpghH9yuAmgW8iPiIM8p7L3J7h4wTvhBHTT2f8qKrbkvLlH+ewb rjusEYcjr/mCHIpU4I1lmBuUM5vlEGq/6WFirQFDuAa9XTiCypJbcJgpURgNR/zV q5qCRyCecDl5A+dg72RKP0VtPvAUYPe+1PyGi51hvYme5XxGOFmASNKRpyCoVlKu EEoCAs9SVbHpWGFvPL+DgFen7Te4zSIJ3s8fwvvmRPICg5CuAyskGsMQwQjG28X9 gDwQst3OpIb1q9smtHfKtH+1B4cJDMbOBm5ZpGwhXqds4oJZzpiCHk/LmMd5YCpw NOKs4sYWjIcp0m/0U55HdekZtEaHCV8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:21 2025 by rpki-client