$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f63d7787-fffd-3d30-9344-e3bddc802a79.roa File: f63d7787-fffd-3d30-9344-e3bddc802a79.roa (raw, json) Hash identifier: lLw2TgpYczjTrSDhAvGFB2RmomRrpFNMpxVrFDzCceg= Subject key identifier: E3:D2:A7:A7:E6:EA:A3:D0:68:08:27:71:4D:E8:14:23:B9:EF:2D:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584ACF710817D891B153F4EDF8C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f63d7787-fffd-3d30-9344-e3bddc802a79.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 13335 IP address blocks: 172.70.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:08:17:d8:91:b1:53:f4:ed:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=207a38a5-4245-4b6b-a6cb-2c134feff4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:db:38:03:63:6b:c1:75:7b:10:9f:f4:6b: e4:65:ab:c1:3d:8c:8e:dc:c1:a4:38:37:67:64:a9: 7d:42:95:56:9e:9a:2a:e7:b8:c9:96:f8:03:86:82: 5b:a5:2f:1f:f5:19:b9:55:69:84:bf:b2:9e:fc:d0: 6b:cf:33:9f:b7:79:e8:e5:7c:d0:0f:df:49:7b:22: c5:ed:8a:2f:7a:1f:6c:b3:c5:ea:4c:0e:42:ec:fb: 98:e8:1f:32:f0:e4:85:b2:02:c6:bf:22:69:9c:f4: 13:a2:a6:46:fe:aa:19:62:86:30:e8:11:52:ab:65: 8a:bb:36:e1:76:2f:ad:dd:b2:dd:c4:32:d3:e6:5d: bf:96:2a:79:2c:d0:42:70:cf:5c:79:9b:8b:be:6e: 5d:5b:8b:41:56:ba:03:64:e5:ae:ce:68:75:fd:04: 69:c1:9a:5e:0d:d7:d0:65:49:70:b0:f8:c7:69:e4: 53:62:8d:e1:d5:ac:5c:49:3f:c5:ae:69:ec:c3:0f: 15:a8:05:c7:36:bd:d4:de:89:69:ed:02:df:a3:52: ab:4e:8d:75:fe:59:df:2e:b8:b5:65:02:7c:56:65: 88:ac:da:6c:b2:29:68:cf:a1:31:73:03:e0:e3:6b: 4d:e1:02:e8:fc:b7:cb:6e:12:4d:e4:81:e3:71:b1: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D2:A7:A7:E6:EA:A3:D0:68:08:27:71:4D:E8:14:23:B9:EF:2D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f63d7787-fffd-3d30-9344-e3bddc802a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4f:c3:16:dd:ee:80:56:ca:d8:cf:04:8e:a0:fb:cf:40:c9: 3a:4f:e8:3f:10:71:17:37:5f:a9:58:89:7d:76:6d:8d:af:7f: 3a:1b:c2:74:79:ac:c0:1c:d2:5e:3a:7d:25:20:94:59:2d:fe: 68:e9:4b:e2:3f:fd:c0:81:6b:57:08:d4:9d:d5:73:f5:26:de: 44:a8:d1:56:d9:5c:ba:3e:6a:1e:3d:33:34:0a:db:62:13:7a: cf:81:80:96:86:ff:5b:5b:0e:37:9e:3d:51:8d:d6:a7:c2:68: 77:d2:cb:b0:94:fe:0d:da:5d:48:b8:fb:9a:91:94:2b:46:74: ad:ba:ac:b9:95:76:ec:65:f8:33:e5:c8:f9:aa:c4:1d:bb:32: 88:db:85:68:d0:9f:a9:98:bf:6f:5f:e9:29:7a:36:02:39:26: 1b:68:06:57:80:a0:28:db:94:26:b4:07:44:6c:d9:f2:1a:d3: a0:f1:59:6e:ff:cb:e3:d4:1a:f2:78:12:af:bb:84:39:50:5c: 87:f5:0d:bd:8a:82:a0:c0:a0:d4:8a:50:cc:c4:27:2f:75:fa: 00:5a:45:35:e2:88:fd:74:5f:e7:7d:d0:d9:e5:72:e2:85:d9: 90:d8:16:3a:9f:5b:32:98:9a:71:af:00:0f:2a:77:97:77:c5: 65:a3:05:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQgX2JGxU/Tt+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MjA3YTM4YTUtNDI0NS00YjZiLWE2Y2ItMmMxMzRmZWZmNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/fbOANja8F1exCf9GvkZavBPYyO3MGkODdn ZKl9QpVWnpoq57jJlvgDhoJbpS8f9Rm5VWmEv7Ke/NBrzzOft3no5XzQD99JeyLF 7Yoveh9ss8XqTA5C7PuY6B8y8OSFsgLGvyJpnPQToqZG/qoZYoYw6BFSq2WKuzbh di+t3bLdxDLT5l2/lip5LNBCcM9ceZuLvm5dW4tBVroDZOWuzmh1/QRpwZpeDdfQ ZUlwsPjHaeRTYo3h1axcST/Frmnsww8VqAXHNr3U3olp7QLfo1KrTo11/lnfLri1 ZQJ8VmWIrNpssiloz6ExcwPg42tN4QLo/LfLbhJN5IHjcbFKswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPSp6fm6qPQaAgncU3oFCO57y3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjYzZDc3ODctZmZmZC0z ZDMwLTkzNDQtZTNiZGRjODAyYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpPwxbd7oBWytjPBI6g+89AyTpP6D8QcRc3X6lYiX12bY2vfzobwnR5 rMAc0l46fSUglFkt/mjpS+I//cCBa1cI1J3Vc/Um3kSo0VbZXLo+ah49MzQK22IT es+BgJaG/1tbDjeePVGN1qfCaHfSy7CU/g3aXUi4+5qRlCtGdK26rLmVduxl+DPl yPmqxB27MojbhWjQn6mYv29f6Sl6NgI5JhtoBleAoCjblCa0B0Rs2fIa06DxWW7/ y+PUGvJ4Eq+7hDlQXIf1Db2KgqDAoNSKUMzEJy91+gBaRTXiiP10X+d90NnlcuKF 2ZDYFjqfWzKYmnGvAA8qd5d3xWWjBc8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:00:34 2025 by rpki-client