$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e91d9374-fd3a-33c2-a7f0-a937a3fa33cc.roa File: e91d9374-fd3a-33c2-a7f0-a937a3fa33cc.roa (raw, json) Hash identifier: nFpfltkCBEMy3N/zLfqlph8rri9dbgl4miaHyDVOCB8= Subject key identifier: FD:B4:2B:A2:0B:A0:3A:69:8A:E4:4F:80:06:4C:51:29:29:C0:16:76 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71108EB1A310BDF6102D230 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e91d9374-fd3a-33c2-a7f0-a937a3fa33cc.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.70.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:08:eb:1a:31:0b:df:61:02:d2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=c9e842b8-30af-40c8-ae9d-6a57c0317913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:85:b5:a8:4f:0c:77:64:37:ea:b8:ca:6e: 6c:67:a1:8c:23:60:88:d2:ec:e6:b2:ae:48:58:9e: f9:71:b9:5b:92:a8:03:d4:ae:58:e9:50:31:36:93: 98:ed:ea:92:30:e2:e5:ac:f8:6f:19:8a:b0:69:d4: 53:20:32:34:a6:77:f4:84:45:cb:20:72:47:50:59: 77:e9:e2:a1:c3:78:59:d4:19:8f:47:e8:1b:5d:25: 99:6a:8e:d1:09:5f:7e:85:d6:8b:30:bf:86:b6:7e: 06:5e:a4:6a:fe:de:d5:54:19:92:1a:65:45:af:17: e9:e9:12:67:67:40:75:ba:2d:d6:6b:49:23:db:1a: 83:ab:0b:cb:a4:14:17:f3:82:64:31:a0:1d:7b:8c: 29:56:46:e5:f7:26:07:98:2e:e0:a3:33:d2:ea:73: 0b:0b:58:0e:39:af:12:99:2c:8a:e2:e1:23:36:59: d9:50:55:a6:e6:e8:00:21:fe:2a:34:f9:4e:89:14: f5:44:c3:63:c2:47:86:76:48:50:56:87:a1:8d:f3: 3b:bc:17:71:70:6a:3c:80:77:ad:6d:d5:46:c8:33: cb:7e:1a:0e:77:67:12:eb:28:bb:96:e2:25:6c:e0: 3f:bb:7f:2c:4f:7c:8c:2b:c9:62:b4:9f:1b:22:bc: ab:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B4:2B:A2:0B:A0:3A:69:8A:E4:4F:80:06:4C:51:29:29:C0:16:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e91d9374-fd3a-33c2-a7f0-a937a3fa33cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:92:43:88:14:34:2f:0b:3c:e9:e8:35:41:7a:e1:1d:34:bb: df:04:76:8f:1a:14:a1:42:86:53:62:79:e7:d8:1e:80:ee:66: 46:31:52:2d:79:7f:25:d2:b9:43:a5:d4:39:c6:e0:16:85:72: 86:61:10:f1:a2:29:00:9b:24:d7:70:c9:f6:09:74:5a:7a:f2: 5c:64:3b:cf:c7:11:01:d1:51:32:74:05:b5:48:90:5b:97:53: 63:db:1a:05:d3:7e:3d:6e:48:e0:28:0b:91:8a:f9:00:e8:b7: d8:6f:14:c8:26:85:90:ad:22:01:7c:0e:c9:01:4b:b5:cc:59: 31:49:84:51:1b:d2:8e:63:bd:e8:54:28:0b:42:a0:1b:28:94: 39:44:eb:e1:b7:c0:49:1f:15:46:62:f4:95:2e:8b:d9:ef:d1: 74:0c:e1:af:ba:c6:6f:42:e4:3a:19:41:46:0c:ff:22:af:bd: eb:dc:e8:c0:cc:62:6c:15:49:3d:41:8d:0a:62:37:fb:5a:46: 6e:6c:6f:ab:05:ec:af:3f:40:d7:5f:15:ed:28:8c:60:c1:89: 6b:47:0d:e9:38:ad:37:3c:42:0f:8e:94:77:0e:ad:a0:a6:69: 2a:18:26:e2:1b:59:0c:5a:c1:2a:0d:aa:b8:16:6e:69:64:e2: 53:9b:9a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQjrGjEL32EC0jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YzllODQyYjgtMzBhZi00MGM4LWFlOWQtNmE1N2MwMzE3OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh82FtahPDHdkN+q4ym5sZ6GMI2CI0uzmsq5I WJ75cblbkqgD1K5Y6VAxNpOY7eqSMOLlrPhvGYqwadRTIDI0pnf0hEXLIHJHUFl3 6eKhw3hZ1BmPR+gbXSWZao7RCV9+hdaLML+Gtn4GXqRq/t7VVBmSGmVFrxfp6RJn Z0B1ui3Wa0kj2xqDqwvLpBQX84JkMaAde4wpVkbl9yYHmC7gozPS6nMLC1gOOa8S mSyK4uEjNlnZUFWm5ugAIf4qNPlOiRT1RMNjwkeGdkhQVoehjfM7vBdxcGo8gHet bdVGyDPLfhoOd2cS6yi7luIlbOA/u38sT3yMK8litJ8bIryrTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP20K6ILoDppiuRPgAZMUSkpwBZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTkxZDkzNzQtZmQzYS0z M2MyLWE3ZjAtYTkzN2EzZmEzM2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiSQ4gUNC8LPOnoNUF64R00u98Edo8aFKFChlNieefYHoDuZkYxUi15 fyXSuUOl1DnG4BaFcoZhEPGiKQCbJNdwyfYJdFp68lxkO8/HEQHRUTJ0BbVIkFuX U2PbGgXTfj1uSOAoC5GK+QDot9hvFMgmhZCtIgF8DskBS7XMWTFJhFEb0o5jvehU KAtCoBsolDlE6+G3wEkfFUZi9JUui9nv0XQM4a+6xm9C5DoZQUYM/yKvvevc6MDM YmwVST1BjQpiN/taRm5sb6sF7K8/QNdfFe0ojGDBiWtHDek4rTc8Qg+OlHcOraCm aSoYJuIbWQxawSoNqrgWbmlk4lObmiU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:50 2025 by rpki-client