$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb1d254c-2627-37b5-b915-899f66d878b5.roa File: fb1d254c-2627-37b5-b915-899f66d878b5.roa (raw, json) Hash identifier: zLIi+H8LtiyzgiewKqzTt/RFAwP0tmbMSOc4pihbMGs= Subject key identifier: 8E:CF:3C:3B:4C:D6:DD:0C:51:84:A1:06:5B:CC:87:45:CE:3A:21:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64A5827EABE4F0EF6E600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb1d254c-2627-37b5-b915-899f66d878b5.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4a:58:27:ea:be:4f:0e:f6:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=c82f2a27-2976-4926-9ea5-0813c56d9d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:3b:de:17:12:81:ac:f6:81:3d:a9:b9:63: a9:2e:86:f8:b3:3a:af:3a:36:0d:f3:a2:23:44:b1: 58:58:04:cb:2e:e1:32:1e:d3:94:38:15:fc:6f:7e: 9c:65:fe:18:04:c9:2f:5e:17:19:43:26:cb:31:36: 23:44:bc:75:2f:e9:af:88:05:02:99:be:f4:5b:be: 00:90:cf:32:07:13:82:22:d9:a6:b2:d0:a8:ba:0e: ed:b7:6f:41:dc:0d:22:f8:4d:e2:56:ec:ed:17:1a: cc:0a:99:e5:32:70:e5:9c:c2:cd:72:bb:1e:56:45: 65:ba:f0:89:0c:69:63:d8:db:3f:b1:83:96:cc:95: 86:ef:73:c0:a0:92:25:7c:68:f2:94:f7:25:d6:5c: 8f:5d:f8:c2:f2:31:00:84:f4:a0:78:85:3e:9c:db: 30:40:bb:ee:d3:95:28:6d:35:1c:2f:d6:1a:60:02: 40:1e:5a:d1:68:8b:80:09:6d:79:c8:7b:d2:1c:af: 0e:b1:32:e4:a5:27:97:b8:3b:dd:b7:aa:9e:9a:a3: 0b:5c:28:a5:a6:6c:4b:a3:c1:06:57:c4:b7:6a:74: b1:6a:ea:4b:64:45:f1:4b:28:e1:62:d5:29:e8:e5: de:22:ad:02:d1:7c:c2:33:76:e6:c7:ad:98:02:bd: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CF:3C:3B:4C:D6:DD:0C:51:84:A1:06:5B:CC:87:45:CE:3A:21:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb1d254c-2627-37b5-b915-899f66d878b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:6b:ac:c1:a8:bc:93:b0:dc:d3:fc:03:73:c8:14:16:17:e7: 3f:cc:e7:e9:41:ac:61:63:46:f6:b1:98:52:5d:b7:0a:13:7e: f8:cc:8a:4f:28:af:c5:8b:63:6c:00:f1:ad:ec:b4:8d:3b:87: c3:6f:a0:e7:2f:94:ed:17:76:f8:ff:6b:e1:94:81:c2:ce:6e: d1:b9:69:8c:fa:9a:cf:15:a9:7b:81:04:2e:49:ca:a1:44:83: 8a:5e:87:a3:35:7c:c0:5b:10:66:19:13:4f:f4:3f:58:c8:7b: ef:2b:d3:02:ea:9b:50:9a:7d:c3:02:4d:9a:9a:90:cf:6c:f3: ce:a9:2f:e2:fd:48:63:75:7a:98:89:b9:d8:10:f2:ed:ae:eb: 79:6b:a5:17:d6:54:07:b3:5e:73:fe:6a:b0:fd:c1:c4:f1:a9: d1:7f:bf:15:42:5c:d5:5c:00:8c:b7:00:d1:1a:48:da:e3:26: 3e:c9:0a:68:ad:db:0c:c7:b5:44:67:ca:4a:4e:58:09:80:56: 71:bf:0d:0e:b5:44:5c:26:38:61:c3:3d:c9:75:99:c3:fe:68: 0f:0e:58:01:d4:97:03:06:bd:50:09:5e:72:c9:e3:52:70:15: 94:b0:1b:57:ed:7a:f4:44:9e:4c:ba:0d:00:2e:16:4d:f4:8b: ff:3c:9b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kpYJ+q+Tw725gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YzgyZjJhMjctMjk3Ni00OTI2LTllYTUtMDgxM2M1NmQ5ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIs73hcSgaz2gT2puWOpLob4szqvOjYN86Ij RLFYWATLLuEyHtOUOBX8b36cZf4YBMkvXhcZQybLMTYjRLx1L+mviAUCmb70W74A kM8yBxOCItmmstCoug7tt29B3A0i+E3iVuztFxrMCpnlMnDlnMLNcrseVkVluvCJ DGlj2Ns/sYOWzJWG73PAoJIlfGjylPcl1lyPXfjC8jEAhPSgeIU+nNswQLvu05Uo bTUcL9YaYAJAHlrRaIuACW15yHvSHK8OsTLkpSeXuDvdt6qemqMLXCilpmxLo8EG V8S3anSxaupLZEXxSyjhYtUp6OXeIq0C0XzCM3bmx62YAr0j9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7PPDtM1t0MUYShBlvMh0XOOiFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmIxZDI1NGMtMjYyNy0z N2I1LWI5MTUtODk5ZjY2ZDg3OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5rrMGovJOw3NP8A3PIFBYX5z/M5+lBrGFjRvaxmFJdtwoTfvjMik8o r8WLY2wA8a3stI07h8NvoOcvlO0Xdvj/a+GUgcLObtG5aYz6ms8VqXuBBC5JyqFE g4peh6M1fMBbEGYZE0/0P1jIe+8r0wLqm1CafcMCTZqakM9s886pL+L9SGN1epiJ udgQ8u2u63lrpRfWVAezXnP+arD9wcTxqdF/vxVCXNVcAIy3ANEaSNrjJj7JCmit 2wzHtURnykpOWAmAVnG/DQ61RFwmOGHDPcl1mcP+aA8OWAHUlwMGvVAJXnLJ41Jw FZSwG1ftevREnky6DQAuFk30i/88myM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:00 2025 by rpki-client