$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb99f3e5-f579-3c82-8919-87da1e5ea9c9.roa File: fb99f3e5-f579-3c82-8919-87da1e5ea9c9.roa (raw, json) Hash identifier: 2kak+E+hAoE9PqwOh6qVDBpMLZQVtRCKqMgW3EEwln8= Subject key identifier: 71:03:FF:9F:31:CE:EE:FE:5E:F9:C0:C9:93:C5:54:07:18:53:9C:DA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AD0D64BF65319FE54735C8C40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb99f3e5-f579-3c82-8919-87da1e5ea9c9.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 13335 IP address blocks: 172.70.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:4b:f6:53:19:fe:54:73:5c:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=8f471a40-0ada-46bd-b53b-de9f5c120fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:39:54:cb:f3:c1:58:bd:a3:03:a5:a9:c4: 9d:e2:86:f9:9b:2d:64:52:3c:4d:bc:b7:66:73:d1: fb:06:7f:51:a1:ff:fd:8f:29:58:52:8b:95:92:e8: 42:8f:36:ff:38:07:00:1e:0a:09:87:3f:b5:3d:55: 9f:7f:1a:60:99:da:42:8e:0a:3f:0e:2a:1f:b3:07: 87:94:5b:a4:98:c4:3e:f6:01:78:b7:e3:12:0b:37: e8:81:b4:20:bd:76:1d:0b:79:49:e8:85:85:91:b8: 70:a6:33:d6:42:7a:1f:0c:1f:f7:4e:fd:b2:21:00: a7:71:c6:97:12:02:92:08:46:fa:70:e1:4f:e5:f0: 2f:d1:e7:e6:69:66:e5:d9:22:d9:5c:a3:ec:59:54: 8b:0d:16:df:29:91:4c:de:a5:1b:59:02:2f:e8:ee: 28:23:38:ed:b5:9e:55:ac:4e:86:be:6c:6c:8d:e0: 34:8d:ee:83:15:13:b6:b1:cf:a7:8d:5f:91:bf:e2: ea:b4:78:22:e1:28:5a:80:92:0b:6f:b9:8b:5b:ee: fd:d5:b8:e3:22:91:e0:2c:3c:e5:f8:86:20:a6:b8: 6c:42:1d:36:fa:df:5d:d1:92:46:26:44:9a:29:85: e3:fa:b5:29:37:4a:ad:a0:fc:28:04:20:fb:93:b0: f4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:FF:9F:31:CE:EE:FE:5E:F9:C0:C9:93:C5:54:07:18:53:9C:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb99f3e5-f579-3c82-8919-87da1e5ea9c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:bb:8c:7e:8e:39:35:92:7f:3b:37:6a:78:64:32:1a:a6:36: b1:1c:7d:d7:8a:5c:cb:c5:96:f9:70:88:8e:18:ea:eb:91:fa: 02:82:5f:c7:3b:12:cb:e6:18:03:45:1a:fc:3f:1d:5e:a1:ce: 2e:c7:04:30:f6:b2:e1:86:44:d8:cf:ae:dc:b8:29:d6:20:fd: 22:a6:c0:56:e7:23:a8:ec:3c:75:0a:b4:d5:1e:e3:6c:41:ea: a5:7f:6c:ee:8a:45:2b:7a:b2:65:c0:38:90:a7:f1:15:ce:04: ad:62:16:b4:eb:4c:49:a7:1f:b4:ec:ca:b5:da:bf:cf:85:c3: 15:4e:c1:f0:ec:b3:c0:e4:bc:55:e8:a6:f0:1e:a5:23:cd:97: b1:6e:74:76:a1:93:67:cd:0e:99:9a:0f:64:a4:6e:1a:08:1a: 43:5d:b2:99:ca:1c:e0:98:88:3f:03:c6:99:05:8e:f4:05:83: 36:56:7b:f9:af:2c:6e:e2:ab:36:f5:65:f8:1e:f5:47:7f:2b: 33:94:83:24:28:2a:59:f0:fa:91:37:59:bf:a2:f2:11:cb:76: 02:9e:72:c5:aa:d3:41:d9:a6:77:01:59:6c:b3:d0:c6:88:d1: 77:aa:a0:fe:3c:5a:7d:69:70:fa:58:12:05:90:db:56:35:a6: 92:30:a0:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kv2Uxn+VHNcjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk OGY0NzFhNDAtMGFkYS00NmJkLWI1M2ItZGU5ZjVjMTIwZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGg5VMvzwVi9owOlqcSd4ob5my1kUjxNvLdm c9H7Bn9Rof/9jylYUouVkuhCjzb/OAcAHgoJhz+1PVWffxpgmdpCjgo/DiofsweH lFukmMQ+9gF4t+MSCzfogbQgvXYdC3lJ6IWFkbhwpjPWQnofDB/3Tv2yIQCnccaX EgKSCEb6cOFP5fAv0efmaWbl2SLZXKPsWVSLDRbfKZFM3qUbWQIv6O4oIzjttZ5V rE6GvmxsjeA0je6DFRO2sc+njV+Rv+LqtHgi4ShagJILb7mLW+791bjjIpHgLDzl +IYgprhsQh02+t9d0ZJGJkSaKYXj+rUpN0qtoPwoBCD7k7D0mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHED/58xzu7+XvnAyZPFVAcYU5zaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmI5OWYzZTUtZjU3OS0z YzgyLTg5MTktODdkYTFlNWVhOWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu7jH6OOTWSfzs3anhkMhqmNrEcfdeKXMvFlvlwiI4Y6uuR+gKCX8c7 EsvmGANFGvw/HV6hzi7HBDD2suGGRNjPrty4KdYg/SKmwFbnI6jsPHUKtNUe42xB 6qV/bO6KRSt6smXAOJCn8RXOBK1iFrTrTEmnH7TsyrXav8+FwxVOwfDss8DkvFXo pvAepSPNl7FudHahk2fNDpmaD2SkbhoIGkNdspnKHOCYiD8DxpkFjvQFgzZWe/mv LG7iqzb1Zfge9Ud/KzOUgyQoKlnw+pE3Wb+i8hHLdgKecsWq00HZpncBWWyz0MaI 0XeqoP48Wn1pcPpYEgWQ21Y1ppIwoJM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:50 2025 by rpki-client