$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e923a59b-6920-3f8b-b15a-7bfeac94a5ea.roa File: e923a59b-6920-3f8b-b15a-7bfeac94a5ea.roa (raw, json) Hash identifier: r6JqPMxhDFo+rSfK8Se3a0eJpcosKUE90L8DlWHfAYo= Subject key identifier: D2:E0:30:1B:FD:A2:23:23:C0:D5:6F:7B:99:3B:BC:78:73:2C:95:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC711003EACC9BE829C523F40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e923a59b-6920-3f8b-b15a-7bfeac94a5ea.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 172.71.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:00:3e:ac:c9:be:82:9c:52:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=b240f6fe-42d5-4efb-911c-0b6b2007b49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:46:44:1c:df:b4:d2:16:47:d5:e9:b3:2c:76: 36:22:d6:b1:50:44:35:6b:f6:5d:a6:df:23:68:bd: cf:d3:c5:00:2d:59:cc:aa:e1:10:31:ab:91:03:36: e8:b7:9b:92:0d:a8:0b:90:58:40:7e:d0:94:99:02: f9:94:80:87:c3:14:4f:4a:a9:bf:57:27:7e:f2:bd: d1:b2:9e:8f:4c:80:88:11:8d:07:82:fe:09:ef:82: bc:cb:68:fb:10:0d:2c:99:7d:1c:0b:6a:b1:a4:b9: d6:ba:b1:59:af:d7:40:08:84:af:b5:5c:78:01:3f: 70:e0:e7:ca:7e:73:cd:ae:cc:8a:b9:17:95:96:03: 1b:98:43:03:45:90:0b:a2:d7:c0:24:e7:4c:26:b8: 2f:39:c9:7a:97:e9:00:c6:87:15:50:f2:df:5c:f2: e6:1c:1e:f5:a5:2a:ee:cc:fb:db:34:0f:5d:82:8c: 75:55:00:d5:00:2a:b5:d2:18:89:c2:2c:72:37:af: c8:76:1a:fa:9e:da:1b:83:c1:61:bb:29:cd:38:f6: 47:bd:3f:fc:0d:8f:1e:8c:c7:49:dc:a0:b7:22:b6: d6:a5:8e:5f:82:65:74:f6:80:df:66:98:eb:b8:62: f2:cb:37:67:52:c2:ce:ed:1d:cb:c8:74:23:04:9c: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E0:30:1B:FD:A2:23:23:C0:D5:6F:7B:99:3B:BC:78:73:2C:95:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e923a59b-6920-3f8b-b15a-7bfeac94a5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:32:48:f6:61:64:bd:d7:e0:fe:3f:06:e6:23:32:31:80:dc: bf:c5:3e:45:18:82:04:4d:71:99:17:d8:aa:f9:62:cd:18:2d: 91:5c:40:9e:7c:6b:79:6a:15:2d:1c:a5:fc:b5:c3:21:87:f1: f0:5d:f2:ff:1d:09:35:02:69:23:27:10:e3:23:69:9f:19:48: 26:54:ac:c2:83:84:da:0a:7f:ae:8e:3d:b9:bd:35:69:22:9c: ee:3b:6a:63:d7:46:f1:89:c2:99:65:34:2c:67:de:5c:7b:cc: 60:d7:99:88:ab:50:e3:1a:de:d2:97:d6:96:4d:cc:35:2b:8e: 7f:7e:05:3b:1c:08:dc:bd:82:c3:f8:d1:a6:54:26:13:f8:35: 4f:85:0b:b1:97:aa:b7:61:c1:ad:35:52:a2:3c:81:7c:65:89: c8:a4:eb:a9:77:f3:9b:c4:e6:75:b5:80:9d:c9:cd:cc:a9:b0: f0:4d:5f:f7:a0:2e:46:f0:5a:1b:8c:7d:c9:b2:ee:0c:7b:74: 57:67:d3:7a:b8:d4:fd:a2:db:4f:b0:f2:b8:99:dc:38:d6:08: fd:80:df:98:c7:c1:9c:af:26:54:ad:db:f3:1b:e9:12:ec:b8: f9:84:1f:b3:5e:5d:40:14:62:c7:5c:2b:e8:d2:e3:8b:5c:2d: b2:43:b3:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQA+rMm+gpxSP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YjI0MGY2ZmUtNDJkNS00ZWZiLTkxMWMtMGI2YjIwMDdiNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUZEHN+00hZH1emzLHY2ItaxUEQ1a/Zdpt8j aL3P08UALVnMquEQMauRAzbot5uSDagLkFhAftCUmQL5lICHwxRPSqm/Vyd+8r3R sp6PTICIEY0Hgv4J74K8y2j7EA0smX0cC2qxpLnWurFZr9dACISvtVx4AT9w4OfK fnPNrsyKuReVlgMbmEMDRZALotfAJOdMJrgvOcl6l+kAxocVUPLfXPLmHB71pSru zPvbNA9dgox1VQDVACq10hiJwixyN6/Idhr6ntobg8FhuynNOPZHvT/8DY8ejMdJ 3KC3IrbWpY5fgmV09oDfZpjruGLyyzdnUsLO7R3LyHQjBJycVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLgMBv9oiMjwNVve5k7vHhzLJUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTkyM2E1OWItNjkyMC0z ZjhiLWIxNWEtN2JmZWFjOTRhNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYySPZhZL3X4P4/BuYjMjGA3L/FPkUYggRNcZkX2Kr5Ys0YLZFcQJ58 a3lqFS0cpfy1wyGH8fBd8v8dCTUCaSMnEOMjaZ8ZSCZUrMKDhNoKf66OPbm9NWki nO47amPXRvGJwpllNCxn3lx7zGDXmYirUOMa3tKX1pZNzDUrjn9+BTscCNy9gsP4 0aZUJhP4NU+FC7GXqrdhwa01UqI8gXxlicik66l385vE5nW1gJ3JzcypsPBNX/eg LkbwWhuMfcmy7gx7dFdn03q41P2i20+w8riZ3DjWCP2A35jHwZyvJlSt2/Mb6RLs uPmEH7NeXUAUYsdcK+jS44tcLbJDs90= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:35 2025 by rpki-client