$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa0cc9d0-de42-39df-90be-776c39262fb4.roa File: aa0cc9d0-de42-39df-90be-776c39262fb4.roa (raw, json) Hash identifier: Q+PQrRdGRLCRO16IrjVOVSwF7eNId0qDrdklpOu2Chw= Subject key identifier: BB:8B:4F:9D:2B:0A:6D:77:14:DB:91:40:F8:EA:F7:01:D5:82:05:D0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A6290B462CD699E9C35977B34 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa0cc9d0-de42-39df-90be-776c39262fb4.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 13335 IP address blocks: 172.71.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:b4:62:cd:69:9e:9c:35:97:7b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=a8b36633-09f5-4101-9995-ec691c5ce093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:32:12:5b:3c:77:dc:f6:ba:dd:0f:b4:ae: 46:98:d2:b4:e0:f3:2c:df:4e:5c:a7:7b:48:35:56: 0f:0f:1f:54:0b:29:1d:9a:b6:ca:1c:5f:0d:e2:cb: 04:42:5a:e5:29:f8:e5:80:84:e5:b2:c4:93:79:85: 1a:42:5c:43:89:e9:ca:49:c8:76:30:59:70:93:6a: f5:b9:dc:99:80:c8:fd:6d:d4:ff:18:92:a3:29:1d: 6c:1b:15:a5:0f:75:05:36:c6:8c:62:81:c8:96:59: 20:44:76:29:7b:47:73:44:72:9e:53:71:dd:72:b5: 27:ef:37:b0:62:89:72:4e:30:c9:b2:6b:bc:91:1d: 1b:11:df:8b:2d:dc:47:6c:b3:fc:b6:54:cf:9e:70: 28:f0:73:17:c1:31:50:69:8c:07:04:bc:97:4f:a9: 72:03:ae:72:3f:01:24:80:6a:2a:c7:8c:3c:98:0e: e0:d2:58:3a:16:76:c4:20:69:10:ca:3c:57:12:02: b4:6c:25:60:58:c2:05:cc:6e:42:5d:2c:f0:78:87: 87:56:97:54:f1:c9:25:63:d5:0a:6c:36:70:c6:5c: 30:1d:eb:3d:a5:7a:a1:09:d0:a9:f7:63:12:70:12: 07:db:d1:6e:ec:c7:7a:13:51:e0:0b:6f:54:6a:99: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:4F:9D:2B:0A:6D:77:14:DB:91:40:F8:EA:F7:01:D5:82:05:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa0cc9d0-de42-39df-90be-776c39262fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:13:ee:fb:47:c9:98:f5:84:de:29:e8:eb:e5:a8:87:36:13: 64:4c:4e:cf:fc:97:ae:2c:a8:f2:f6:4e:a1:48:27:32:b4:ed: 75:72:89:8b:b9:a0:db:9e:4b:81:ab:db:d4:51:5f:a2:19:0d: 70:1f:d1:8b:9d:ea:ff:b6:86:56:93:ba:ec:20:3c:06:22:18: aa:f2:7f:8a:ee:36:bc:1f:41:74:7d:83:b5:39:7e:fe:84:38: 76:a6:6b:b0:cf:5c:1e:fc:bb:6b:f8:89:92:39:5d:9e:b2:b2: 7f:c7:04:54:48:23:88:1c:94:c3:e4:59:9d:15:d3:dc:0b:d1: 1b:45:1a:75:6c:49:d8:e4:fc:e9:20:6d:cd:7e:ed:a2:0d:73: 07:15:18:9a:e5:f3:df:d2:c2:55:5f:75:14:69:b0:79:c9:bf: d8:ce:c8:2b:ae:16:89:b2:89:9b:73:f4:ec:82:17:8d:f8:97: 18:f0:c8:9b:f4:76:e9:5f:f1:d4:8f:d6:01:d7:7c:69:cb:1b: 17:ff:2c:d2:dc:62:2a:7f:5d:67:10:71:6a:6d:90:78:e4:1a: c7:26:7d:24:de:27:6a:3d:e8:f1:d4:4e:c9:9d:4a:3c:8f:11: bb:04:75:14:a0:d7:18:a6:c8:d4:b2:26:5b:27:a6:3c:76:00: ee:db:36:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikLRizWmenDWXezQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YThiMzY2MzMtMDlmNS00MTAxLTk5OTUtZWM2OTFjNWNlMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIMyEls8d9z2ut0PtK5GmNK04PMs305cp3tI NVYPDx9UCykdmrbKHF8N4ssEQlrlKfjlgITlssSTeYUaQlxDienKSch2MFlwk2r1 udyZgMj9bdT/GJKjKR1sGxWlD3UFNsaMYoHIllkgRHYpe0dzRHKeU3HdcrUn7zew YolyTjDJsmu8kR0bEd+LLdxHbLP8tlTPnnAo8HMXwTFQaYwHBLyXT6lyA65yPwEk gGoqx4w8mA7g0lg6FnbEIGkQyjxXEgK0bCVgWMIFzG5CXSzweIeHVpdU8cklY9UK bDZwxlwwHes9pXqhCdCp92MScBIH29Fu7Md6E1HgC29Uapm/wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuLT50rCm13FNuRQPjq9wHVggXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWEwY2M5ZDAtZGU0Mi0z OWRmLTkwYmUtNzc2YzM5MjYyZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0T7vtHyZj1hN4p6OvlqIc2E2RMTs/8l64sqPL2TqFIJzK07XVyiYu5 oNueS4Gr29RRX6IZDXAf0Yud6v+2hlaTuuwgPAYiGKryf4ruNrwfQXR9g7U5fv6E OHama7DPXB78u2v4iZI5XZ6ysn/HBFRII4gclMPkWZ0V09wL0RtFGnVsSdjk/Okg bc1+7aINcwcVGJrl89/SwlVfdRRpsHnJv9jOyCuuFomyiZtz9OyCF434lxjwyJv0 dulf8dSP1gHXfGnLGxf/LNLcYip/XWcQcWptkHjkGscmfSTeJ2o96PHUTsmdSjyP EbsEdRSg1ximyNSyJlsnpjx2AO7bNvE= -----END CERTIFICATE-----Generated at Thu Jul 24 12:03:35 2025 by rpki-client