$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b0d415c-5120-30dd-bcc4-1fa33db5ff0a.roa File: 1b0d415c-5120-30dd-bcc4-1fa33db5ff0a.roa (raw, json) Hash identifier: B2//rhMJNsAu7wp3qVILPoXg5QCNYLHaDY6jxu2UjtM= Subject key identifier: A0:7D:19:09:29:2F:3E:06:17:CA:6F:E7:0B:42:68:01:0D:74:5F:3A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B1D8AA805F87E71A2897CC500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b0d415c-5120-30dd-bcc4-1fa33db5ff0a.roa Signing time: Sun 07 Sep 2025 12:25:31 +0000 ROA not before: Sun 07 Sep 2025 12:25:31 +0000 ROA not after: Sat 06 Dec 2025 13:25:31 +0000 asID: 14789 IP address blocks: 172.70.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:8a:a8:05:f8:7e:71:a2:89:7c:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 7 12:25:31 2025 GMT Not After : Dec 6 13:25:31 2025 GMT Subject: CN=36f685d2-9a97-44d7-a397-5eabb445a51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2c:c1:29:a2:be:a1:74:2a:64:2d:29:7f:52: 65:b9:f9:62:5b:1b:02:a6:c4:64:58:b6:39:7a:e4: 3d:64:0d:8c:89:7f:78:d3:9b:10:d8:e6:9f:9e:61: 32:41:99:9b:ab:99:f0:d8:9d:af:7f:6a:91:2a:ae: 4e:03:f1:12:3e:cc:f9:54:e0:89:aa:64:fc:b8:1a: d1:4b:79:51:20:48:8a:91:1f:33:95:93:0c:34:f6: 83:11:e5:59:04:0e:06:04:8c:50:2b:f3:27:dd:fe: e7:fd:91:fb:e4:f5:d4:b4:e5:0c:d9:e2:f4:8c:b7: 7b:55:54:3b:c2:11:04:84:42:52:dd:e7:a8:24:f2: be:6e:44:8e:f2:d5:13:9f:bb:52:32:6e:02:03:cc: 79:93:09:76:13:a2:34:ed:0d:2a:fd:c0:d6:44:eb: 06:b4:c6:89:25:bb:c1:7a:67:22:d9:a6:05:d4:96: e4:e1:f7:ff:2b:ab:c0:e7:6c:69:78:f5:5b:28:cc: 32:d1:cc:97:e6:7b:7e:87:14:fe:3f:c6:29:4f:8b: 51:30:4e:b4:f1:40:e3:d6:3c:72:84:0a:a0:48:e0: 89:e1:a3:b3:70:7f:9e:54:99:66:6d:60:62:a5:fb: 09:4b:e5:ca:11:6f:dd:84:6b:94:a6:ce:ca:5f:06: a9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7D:19:09:29:2F:3E:06:17:CA:6F:E7:0B:42:68:01:0D:74:5F:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b0d415c-5120-30dd-bcc4-1fa33db5ff0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:0d:3b:b9:d2:a3:a5:50:52:e9:d4:e7:ed:83:7d:d0:36:b3: cf:4f:51:4a:da:55:c8:ac:a8:58:d2:b3:12:ec:7a:64:c6:05: f8:21:16:b2:c2:ba:46:a0:6a:2a:09:21:2a:d1:58:65:80:92: 91:20:f8:b9:29:26:c8:e4:bf:a6:8e:c7:eb:48:a2:7b:0b:af: bd:c6:2f:4a:74:6c:ce:80:60:9c:ae:52:88:05:88:e2:8f:97: 4b:14:d9:5e:74:dd:e8:47:7f:0d:71:97:2a:13:b6:10:2c:a8: 25:08:93:53:be:0d:14:cc:de:fe:3a:57:ed:1f:0a:4e:9d:ef: 30:ae:dd:3e:48:a7:85:10:60:af:dc:94:ae:b7:11:6e:48:f5: fe:a6:13:c3:51:cf:57:90:b0:d5:89:a5:fd:f1:56:ed:db:33: ca:f4:7a:a9:a8:71:14:75:07:1a:27:24:fb:1c:06:72:d4:0e: 85:7e:b5:4c:74:ac:f1:3c:25:90:07:0b:c9:54:86:7d:d9:87: 94:d8:fe:dd:5f:c8:f9:22:3f:e5:0f:0e:83:01:86:a5:6a:7b: b4:ce:a4:91:27:1e:ef:b7:53:9c:37:f2:9a:67:4d:1f:60:8f: 9c:39:8f:ed:8f:f9:3a:3f:94:94:59:55:8f:64:f4:e1:f3:9e: 3e:96:08:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdiqgF+H5xool8xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkwNzEyMjUzMVoXDTI1MTIwNjEzMjUzMVowLzEtMCsGA1UEAxMk MzZmNjg1ZDItOWE5Ny00NGQ3LWEzOTctNWVhYmI0NDVhNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyzBKaK+oXQqZC0pf1JlufliWxsCpsRkWLY5 euQ9ZA2MiX9405sQ2OafnmEyQZmbq5nw2J2vf2qRKq5OA/ESPsz5VOCJqmT8uBrR S3lRIEiKkR8zlZMMNPaDEeVZBA4GBIxQK/Mn3f7n/ZH75PXUtOUM2eL0jLd7VVQ7 whEEhEJS3eeoJPK+bkSO8tUTn7tSMm4CA8x5kwl2E6I07Q0q/cDWROsGtMaJJbvB emci2aYF1Jbk4ff/K6vA52xpePVbKMwy0cyX5nt+hxT+P8YpT4tRME608UDj1jxy hAqgSOCJ4aOzcH+eVJlmbWBipfsJS+XKEW/dhGuUps7KXwapZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB9GQkpLz4GF8pv5wtCaAENdF86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWIwZDQxNWMtNTEyMC0z MGRkLWJjYzQtMWZhMzNkYjVmZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUNO7nSo6VQUunU5+2DfdA2s89PUUraVcisqFjSsxLsemTGBfghFrLC ukagaioJISrRWGWAkpEg+LkpJsjkv6aOx+tIonsLr73GL0p0bM6AYJyuUogFiOKP l0sU2V503ehHfw1xlyoTthAsqCUIk1O+DRTM3v46V+0fCk6d7zCu3T5Ip4UQYK/c lK63EW5I9f6mE8NRz1eQsNWJpf3xVu3bM8r0eqmocRR1BxonJPscBnLUDoV+tUx0 rPE8JZAHC8lUhn3Zh5TY/t1fyPkiP+UPDoMBhqVqe7TOpJEnHu+3U5w38ppnTR9g j5w5j+2P+To/lJRZVY9k9OHznj6WCFs= -----END CERTIFICATE-----Generated at Mon Sep 8 20:41:11 2025 by rpki-client