$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e998b096-5c78-3320-92d7-e0141a3efa3e.roa File: e998b096-5c78-3320-92d7-e0141a3efa3e.roa (raw, json) Hash identifier: +uTBolmkh9UehsE+SGIbQ9IehxY00nJShTpsz62+Nio= Subject key identifier: C0:25:F7:83:3E:11:70:9E:41:7D:42:65:D0:5F:26:A5:3B:FA:E1:A1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC5ABA09C2A210EDBCE1F2480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e998b096-5c78-3320-92d7-e0141a3efa3e.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.71.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:a0:9c:2a:21:0e:db:ce:1f:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=d0b73cc8-d9b7-4924-a7af-669e22d66a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:ec:88:c5:c6:78:a6:82:12:b0:f7:f7:a2: 50:83:57:49:0b:29:5e:3d:b5:3f:bd:cc:bf:8b:08: 30:3a:f7:4d:4e:56:90:19:93:8e:2b:15:00:30:27: 1c:e0:f5:9c:09:be:e1:b7:7b:aa:93:ef:a5:e4:b0: 3f:90:4b:18:98:b3:7a:6b:ce:dd:d1:89:2e:65:f5: 84:41:2c:75:52:0d:dd:ae:f1:2d:d3:b4:68:02:63: c2:15:8c:4d:83:17:18:a4:b1:e4:bd:51:6f:08:20: ba:a9:7f:d6:89:28:f2:8a:94:57:ad:26:9a:82:a5: b2:c2:39:10:45:52:a4:dc:77:b7:cc:1c:d2:4b:ea: d0:8e:45:0c:c6:46:ed:28:33:a6:66:19:55:85:74: 98:e4:f4:eb:43:ed:e2:0d:6f:e9:7b:bb:64:6d:96: 21:b4:27:fe:f9:e3:97:47:2a:55:ca:43:8f:24:14: 09:ff:cf:db:bd:b6:a3:6f:5d:f4:9b:bc:9d:53:81: f5:da:91:55:ba:36:89:05:ab:80:1f:ca:74:0c:f3: bb:07:c7:f0:cb:0d:47:79:7f:b7:40:76:c2:02:fd: a4:a9:9d:89:ea:31:a2:49:13:e4:6d:e5:58:64:bb: c6:cc:d4:6a:93:60:18:d9:29:1f:a4:65:f9:53:dc: 11:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:25:F7:83:3E:11:70:9E:41:7D:42:65:D0:5F:26:A5:3B:FA:E1:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e998b096-5c78-3320-92d7-e0141a3efa3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:e2:97:c1:dc:59:fe:75:ad:b2:d6:68:ea:38:2d:60:38:78: dc:98:df:ee:9f:26:73:04:2a:96:b2:6c:12:94:1a:24:f7:94: ba:a3:3f:ab:db:22:7d:ac:78:61:ef:d5:81:e3:fb:5e:93:fc: 01:13:9b:91:0e:0a:63:fe:ff:8c:71:c2:38:e0:15:ee:d5:7f: 1c:e4:bb:cf:f0:2e:5b:4c:f1:ba:59:15:b7:89:e9:e9:1a:d0: a1:66:0b:93:f0:ed:28:f7:42:04:5f:e1:5a:fd:1c:3a:40:0b: e0:27:55:5d:5f:0c:30:ad:f1:fd:53:9c:72:95:05:4f:ed:91: 37:6a:6d:64:9c:ca:30:27:63:63:e6:d0:3d:22:aa:32:7c:2a: e4:b1:b8:44:af:79:06:9b:2b:f5:91:e2:88:02:67:e9:48:33: 85:ee:e1:1d:f0:54:79:d9:55:5a:76:4b:03:2e:01:98:e7:14: 9b:23:01:66:68:51:b1:8d:03:fb:c6:d9:89:fd:e0:68:8d:a4: 0e:86:57:e7:6a:25:17:4e:b9:0d:3d:90:b1:b7:fd:96:73:81: 60:6c:59:f8:6e:41:46:23:d0:4d:34:04:00:f5:76:dc:3c:58: cd:39:0f:d6:0a:65:b0:c7:c7:86:5d:7c:b8:b9:bc:ef:73:5e: 64:cd:56:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6CcKiEO284fJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDBiNzNjYzgtZDliNy00OTI0LWE3YWYtNjY5ZTIyZDY2YTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+vsiMXGeKaCErD396JQg1dJCylePbU/vcy/ iwgwOvdNTlaQGZOOKxUAMCcc4PWcCb7ht3uqk++l5LA/kEsYmLN6a87d0YkuZfWE QSx1Ug3drvEt07RoAmPCFYxNgxcYpLHkvVFvCCC6qX/WiSjyipRXrSaagqWywjkQ RVKk3He3zBzSS+rQjkUMxkbtKDOmZhlVhXSY5PTrQ+3iDW/pe7tkbZYhtCf++eOX RypVykOPJBQJ/8/bvbajb130m7ydU4H12pFVujaJBauAH8p0DPO7B8fwyw1HeX+3 QHbCAv2kqZ2J6jGiSRPkbeVYZLvGzNRqk2AY2SkfpGX5U9wRIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAl94M+EXCeQX1CZdBfJqU7+uGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTk5OGIwOTYtNWM3OC0z MzIwLTkyZDctZTAxNDFhM2VmYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7il8HcWf51rbLWaOo4LWA4eNyY3+6fJnMEKpaybBKUGiT3lLqjP6vb In2seGHv1YHj+16T/AETm5EOCmP+/4xxwjjgFe7Vfxzku8/wLltM8bpZFbeJ6eka 0KFmC5Pw7Sj3QgRf4Vr9HDpAC+AnVV1fDDCt8f1TnHKVBU/tkTdqbWScyjAnY2Pm 0D0iqjJ8KuSxuESveQabK/WR4ogCZ+lIM4Xu4R3wVHnZVVp2SwMuAZjnFJsjAWZo UbGNA/vG2Yn94GiNpA6GV+dqJRdOuQ09kLG3/ZZzgWBsWfhuQUYj0E00BAD1dtw8 WM05D9YKZbDHx4ZdfLi5vO9zXmTNVgM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:58 2025 by rpki-client