$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec0cfaf1-9dff-3bf0-b85f-e0db0d6771e0.roa File: ec0cfaf1-9dff-3bf0-b85f-e0db0d6771e0.roa (raw, json) Hash identifier: uvqDi3dg5mJ1+nbeYReGIyVHJzsTlkFNRpqvzeckdB8= Subject key identifier: 09:4B:9F:A0:03:D9:78:F1:AE:DC:DA:14:34:91:CA:30:9D:2A:4C:C3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D6608B070C03F7D522AD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec0cfaf1-9dff-3bf0-b85f-e0db0d6771e0.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.71.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:60:8b:07:0c:03:f7:d5:22:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=87f1e570-bcf4-4d88-8830-273503413abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:41:72:09:89:b7:dc:bf:2c:ac:d1:76:10:38: 3c:aa:fe:5b:ef:52:e9:66:1b:8a:f5:36:db:01:6f: 7c:30:b7:ec:3a:60:a5:9c:cc:84:21:97:c4:7e:88: 34:d6:d9:90:60:58:d9:b6:b8:c8:52:09:3e:07:bd: 38:b3:d2:a3:3f:87:31:0f:9a:53:17:d2:9e:fd:ed: 6b:ae:21:80:5e:35:11:b5:7a:9f:f9:a7:ad:b8:42: 9f:12:95:3f:ea:67:66:07:09:f4:89:93:54:e2:2c: 70:03:63:1a:9e:eb:5a:e3:d6:33:54:c1:ea:8a:e7: 4b:b3:00:0c:8d:da:48:45:13:f9:9c:85:db:4b:8b: a7:0f:79:6e:7e:03:a4:ac:55:b2:0b:ad:95:86:8c: 82:39:44:bf:b6:37:cb:89:02:d5:50:2c:2a:ac:40: 46:23:3c:77:6e:4d:ef:88:cd:b0:63:2e:7c:04:e8: c6:79:8c:6e:69:c4:e0:e4:a9:e0:dd:88:e4:98:42: 1b:cd:5f:6f:40:89:aa:49:61:be:b6:52:ab:87:2f: 11:8a:cf:bb:af:88:26:93:f0:59:8f:27:2e:3b:47: 21:34:c1:e5:32:bf:99:ee:2f:d1:b4:ba:06:d8:4d: 0c:a2:4a:6c:ed:69:51:2e:af:69:12:29:92:a4:9e: 8f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4B:9F:A0:03:D9:78:F1:AE:DC:DA:14:34:91:CA:30:9D:2A:4C:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ec0cfaf1-9dff-3bf0-b85f-e0db0d6771e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:23:4a:1f:a0:78:14:68:22:3f:ca:ba:d6:54:87:7b:3b:65: f6:5e:25:44:27:3b:6b:24:f0:71:1a:34:cc:64:41:e8:af:9a: 3f:00:b3:60:78:30:0b:48:63:be:64:34:06:c8:04:4e:2a:17: eb:db:9f:ca:69:77:3b:66:76:2f:f3:37:88:ce:d3:c9:37:b8: de:1f:a6:2d:2c:9a:62:21:8e:87:5a:ca:a2:3e:08:4c:af:37: 72:00:eb:90:c5:67:78:c8:69:ff:e6:d9:dc:bf:d8:a0:6a:8d: 40:22:4a:9e:18:17:42:19:85:03:f3:cf:79:84:52:a1:64:1a: fa:3e:28:92:29:ad:28:a6:63:0e:ff:1e:d0:e5:3d:08:d8:fa: ca:57:c5:4f:97:93:44:f5:53:75:a7:65:47:c5:b3:d1:eb:87: d4:cf:ee:d9:a1:f2:df:6f:33:b4:80:d4:7d:d2:da:e9:5f:64: 80:88:b4:0f:b7:66:b3:c8:cf:49:80:30:d3:64:74:f8:fe:16: 37:24:a1:0b:c6:38:45:f0:58:5b:59:95:1f:a0:41:64:e4:e8: a3:a6:37:c6:bf:21:bc:14:39:52:9a:cf:fa:02:69:d6:89:c3: d6:f9:58:76:e2:45:24:bb:8e:83:64:67:35:0a:dc:57:68:ff: 93:ac:f4:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mCLBwwD99UirQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ODdmMWU1NzAtYmNmNC00ZDg4LTg4MzAtMjczNTAzNDEzYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUFyCYm33L8srNF2EDg8qv5b71LpZhuK9Tbb AW98MLfsOmClnMyEIZfEfog01tmQYFjZtrjIUgk+B704s9KjP4cxD5pTF9Ke/e1r riGAXjURtXqf+aetuEKfEpU/6mdmBwn0iZNU4ixwA2Manuta49YzVMHqiudLswAM jdpIRRP5nIXbS4unD3lufgOkrFWyC62VhoyCOUS/tjfLiQLVUCwqrEBGIzx3bk3v iM2wYy58BOjGeYxuacTg5Kng3YjkmEIbzV9vQImqSWG+tlKrhy8Ris+7r4gmk/BZ jycuO0chNMHlMr+Z7i/RtLoG2E0Mokps7WlRLq9pEimSpJ6PYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlLn6AD2XjxrtzaFDSRyjCdKkzDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWMwY2ZhZjEtOWRmZi0z YmYwLWI4NWYtZTBkYjBkNjc3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgjSh+geBRoIj/KutZUh3s7ZfZeJUQnO2sk8HEaNMxkQeivmj8As2B4 MAtIY75kNAbIBE4qF+vbn8ppdztmdi/zN4jO08k3uN4fpi0smmIhjodayqI+CEyv N3IA65DFZ3jIaf/m2dy/2KBqjUAiSp4YF0IZhQPzz3mEUqFkGvo+KJIprSimYw7/ HtDlPQjY+spXxU+Xk0T1U3WnZUfFs9Hrh9TP7tmh8t9vM7SA1H3S2ulfZICItA+3 ZrPIz0mAMNNkdPj+FjckoQvGOEXwWFtZlR+gQWTk6KOmN8a/IbwUOVKaz/oCadaJ w9b5WHbiRSS7joNkZzUK3Fdo/5Os9L0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:19 2025 by rpki-client