$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0796cbd0-5bd5-3a8b-8ff5-fa747c6f7321.roa File: 0796cbd0-5bd5-3a8b-8ff5-fa747c6f7321.roa (raw, json) Hash identifier: ObstWTiR1NLQlWD4LtTYkINSf9LdfbIGVgYTAxJ3md4= Subject key identifier: 39:BD:AB:9E:32:5F:1D:67:A5:D0:11:AE:B3:BA:92:90:31:B8:8C:25 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8549C178F3A6C32E7A0F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0796cbd0-5bd5-3a8b-8ff5-fa747c6f7321.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:49:c1:78:f3:a6:c3:2e:7a:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=9a4ff650-ec17-46db-ae9e-ffc92297d6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:18:0d:84:c4:d3:df:e4:cc:3e:36:3e:dc: bc:ee:70:89:56:b6:b5:62:f2:49:4b:24:46:81:45: d8:f2:29:15:d4:f2:c0:b5:11:e3:13:57:36:06:c2: 86:c7:c9:9b:e6:b0:2a:04:d3:85:f8:ab:fd:02:15: 33:70:19:90:5c:a2:8d:39:6d:76:8b:ff:a4:23:36: b0:f5:82:21:cc:e4:a9:57:3d:df:f5:ea:b8:4c:bf: c1:cc:42:1f:b8:b5:e4:76:ca:f2:b0:a6:59:16:80: 9f:69:15:e8:84:b5:63:1f:b0:c0:a1:7d:52:19:fb: 53:ce:63:c2:5a:bb:7f:74:a1:44:eb:35:f3:ca:ac: 5f:a5:2a:97:98:3f:4f:44:89:ed:11:1d:7a:c6:a1: 41:66:30:a2:d9:1c:63:e7:7e:9e:f9:6d:26:12:55: 1b:28:31:cc:32:87:42:15:30:a7:1b:27:ad:e7:d9: 5b:41:4f:c2:9e:cd:2a:5b:17:68:90:ac:6f:b8:48: a3:d1:b9:6e:3d:44:bd:35:5c:50:44:f8:0b:5b:7e: f5:e6:e5:4a:90:b3:80:d2:9e:e8:1a:29:03:32:e2: 9c:ba:1b:7e:c8:3e:1f:7d:81:b0:58:bc:77:e9:25: 8f:ff:75:74:a9:5f:98:9a:39:32:85:9a:77:ae:51: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BD:AB:9E:32:5F:1D:67:A5:D0:11:AE:B3:BA:92:90:31:B8:8C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0796cbd0-5bd5-3a8b-8ff5-fa747c6f7321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9c:8c:08:b5:b5:d0:2f:ca:0d:0d:e6:8a:8b:68:df:64:18: 10:c3:f8:6e:79:52:f9:ec:9d:fb:cc:ec:d9:e6:50:9d:79:e6: 7a:b1:44:9f:21:bc:89:9c:40:c2:dd:4e:98:db:95:7c:20:9f: 44:93:23:2a:53:56:08:35:eb:e9:d4:c2:e0:43:f6:b8:59:fd: 1d:15:1a:a4:af:f9:77:bd:a5:b3:6d:e2:a1:20:65:40:99:eb: ca:f2:56:26:b6:69:52:33:14:35:a0:5f:0c:d8:3f:f6:ae:d3: 45:b0:9f:6c:e9:49:fe:23:be:ea:b5:0c:81:e5:1e:5e:67:a9: af:6e:52:60:78:1e:83:d3:f4:68:59:d1:ce:42:bf:0c:9b:37: 45:aa:35:2b:1d:49:b5:3c:5a:67:eb:2d:1b:22:b5:96:e9:14: 47:63:83:f9:d2:d9:07:99:c3:f3:b4:0f:ea:9c:aa:c2:09:2b: 28:95:99:51:37:e8:c2:9e:f3:b1:24:4a:60:8c:93:b2:9d:14: 2f:c2:d1:00:7d:ee:7c:1f:aa:a9:30:8e:30:77:15:11:5c:98: 98:29:d4:d8:2e:18:86:42:22:2f:ec:54:75:60:f4:d5:5c:ae: 82:ce:80:63:c6:72:92:92:0c:68:17:f6:ed:ce:ca:26:7c:2e: e7:17:49:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUnBePOmwy56D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk OWE0ZmY2NTAtZWMxNy00NmRiLWFlOWUtZmZjOTIyOTdkNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI8YDYTE09/kzD42Pty87nCJVra1YvJJSyRG gUXY8ikV1PLAtRHjE1c2BsKGx8mb5rAqBNOF+Kv9AhUzcBmQXKKNOW12i/+kIzaw 9YIhzOSpVz3f9eq4TL/BzEIfuLXkdsrysKZZFoCfaRXohLVjH7DAoX1SGftTzmPC Wrt/dKFE6zXzyqxfpSqXmD9PRIntER16xqFBZjCi2Rxj536e+W0mElUbKDHMModC FTCnGyet59lbQU/Cns0qWxdokKxvuEij0bluPUS9NVxQRPgLW3715uVKkLOA0p7o GikDMuKcuht+yD4ffYGwWLx36SWP/3V0qV+YmjkyhZp3rlGlPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm9q54yXx1npdARrrO6kpAxuIwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDc5NmNiZDAtNWJkNS0z YThiLThmZjUtZmE3NDdjNmY3MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqcjAi1tdAvyg0N5oqLaN9kGBDD+G55UvnsnfvM7NnmUJ155nqxRJ8h vImcQMLdTpjblXwgn0STIypTVgg16+nUwuBD9rhZ/R0VGqSv+Xe9pbNt4qEgZUCZ 68ryVia2aVIzFDWgXwzYP/au00Wwn2zpSf4jvuq1DIHlHl5nqa9uUmB4HoPT9GhZ 0c5CvwybN0WqNSsdSbU8WmfrLRsitZbpFEdjg/nS2QeZw/O0D+qcqsIJKyiVmVE3 6MKe87EkSmCMk7KdFC/C0QB97nwfqqkwjjB3FRFcmJgp1NguGIZCIi/sVHVg9NVc roLOgGPGcpKSDGgX9u3OyiZ8LucXSZo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:42 2025 by rpki-client