$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a4c3679-e291-340a-8eea-fb1f22d3eae0.roa File: 0a4c3679-e291-340a-8eea-fb1f22d3eae0.roa (raw, json) Hash identifier: z5Y6HjHqVghUcErRCtgqySwPgCe4DFJ1pEqqvRxXNvA= Subject key identifier: 43:CA:AB:21:5B:3C:E4:A5:DB:F1:09:32:81:42:B3:89:0E:D3:4D:37 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8547273AA8ECE88EF65700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a4c3679-e291-340a-8eea-fb1f22d3eae0.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:47:27:3a:a8:ec:e8:8e:f6:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=deb6e192-4b8e-4176-b2f9-c5b942da86f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:52:08:f2:d7:d0:78:fc:f4:29:aa:f5:b4: 8b:f4:bf:51:44:1e:2b:63:2b:91:e4:c0:67:af:5a: c5:0a:b2:0c:17:da:d5:18:d7:c9:36:5f:a7:7c:b7: 6f:cf:7d:06:09:bd:d4:db:61:15:f3:29:b1:6e:1e: 9d:61:73:b7:6d:97:09:a4:8e:c4:91:a5:cd:85:67: e1:03:d1:d9:e8:e5:4c:64:ff:ec:8b:ff:4d:24:89: 8b:1b:4d:51:b7:eb:09:49:d1:95:ba:30:6f:0d:4a: b3:2d:33:78:2f:2c:a1:2b:df:3e:a7:dc:f3:16:ca: 14:bb:f0:2a:85:18:0e:8f:9b:5e:e4:40:6a:61:55: 5e:25:7b:7b:82:78:4a:20:a3:63:a0:7b:bb:76:c1: 18:ae:57:1f:ca:98:2b:7a:bc:9c:d1:f0:7c:0f:ea: e1:79:c8:02:af:88:83:5d:a0:80:38:22:5a:4d:bd: 28:b9:27:7d:a0:96:04:5e:56:d8:d6:67:36:69:3a: d6:01:ba:25:bf:0b:07:54:c0:59:ec:af:46:1a:43: 6f:77:6f:93:f4:6b:a7:9d:93:81:53:ee:c0:75:b8: f6:e7:88:8e:0f:3c:81:86:7f:3e:ad:52:d5:b0:5a: d3:87:06:a9:d5:80:94:16:c9:86:7c:22:16:5b:16: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CA:AB:21:5B:3C:E4:A5:DB:F1:09:32:81:42:B3:89:0E:D3:4D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a4c3679-e291-340a-8eea-fb1f22d3eae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e7:03:78:63:2d:57:df:c7:6c:51:88:9c:51:2f:db:f8:a5: 23:e8:09:cc:6f:34:2a:47:2c:f5:a7:7b:df:45:ca:3b:d5:f1: 0a:51:97:67:ca:de:2b:b6:1b:5e:b2:3f:f8:d8:35:51:c8:2a: af:f2:af:9f:b8:25:ec:88:f2:0f:b0:7d:95:1f:d1:48:76:a3: 8f:be:35:ac:ad:5c:80:33:e1:ec:e3:43:47:1e:95:b3:07:09: 52:98:e0:43:28:67:c1:ea:e8:9e:3a:f1:7d:7f:d3:41:76:cb: 22:cd:f6:de:c5:c1:90:8e:61:43:f5:b3:18:ea:b0:75:7c:85: d9:b5:f9:ca:0d:83:c4:80:5e:3d:31:75:4f:e9:b6:7d:ab:73: e6:ed:9b:49:9a:84:98:0b:84:c7:fc:05:48:ad:68:92:af:c0: 43:43:e9:a2:0c:87:1b:28:a6:83:71:87:de:98:82:47:1d:2c: 30:8a:07:2f:69:ff:79:c5:bd:12:d3:bb:da:2c:b7:1d:ce:49: 6f:8e:a6:ab:e7:3e:be:73:b8:a3:ff:a1:93:4e:fe:d6:40:70: c5:96:57:7e:b5:04:14:84:ff:cb:74:34:9c:16:4f:d5:f1:41: d2:03:05:2a:7f:ef:9b:3c:dd:3a:62:78:13:c2:dc:80:dc:b6: cd:38:97:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUcnOqjs6I72VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZGViNmUxOTItNGI4ZS00MTc2LWIyZjktYzViOTQyZGE4NmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB5SCPLX0Hj89Cmq9bSL9L9RRB4rYyuR5MBn r1rFCrIMF9rVGNfJNl+nfLdvz30GCb3U22EV8ymxbh6dYXO3bZcJpI7EkaXNhWfh A9HZ6OVMZP/si/9NJImLG01Rt+sJSdGVujBvDUqzLTN4LyyhK98+p9zzFsoUu/Aq hRgOj5te5EBqYVVeJXt7gnhKIKNjoHu7dsEYrlcfypgreryc0fB8D+rhecgCr4iD XaCAOCJaTb0ouSd9oJYEXlbY1mc2aTrWAbolvwsHVMBZ7K9GGkNvd2+T9GunnZOB U+7Adbj254iODzyBhn8+rVLVsFrThwap1YCUFsmGfCIWWxa2LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPKqyFbPOSl2/EJMoFCs4kO0003MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGE0YzM2NzktZTI5MS0z NDBhLThlZWEtZmIxZjIyZDNlYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvnA3hjLVffx2xRiJxRL9v4pSPoCcxvNCpHLPWne99FyjvV8QpRl2fK 3iu2G16yP/jYNVHIKq/yr5+4JeyI8g+wfZUf0Uh2o4++NaytXIAz4ezjQ0celbMH CVKY4EMoZ8Hq6J468X1/00F2yyLN9t7FwZCOYUP1sxjqsHV8hdm1+coNg8SAXj0x dU/ptn2rc+btm0mahJgLhMf8BUitaJKvwEND6aIMhxsopoNxh96YgkcdLDCKBy9p /3nFvRLTu9ostx3OSW+OpqvnPr5zuKP/oZNO/tZAcMWWV361BBSE/8t0NJwWT9Xx QdIDBSp/75s83TpieBPC3IDcts04lzo= -----END CERTIFICATE-----Generated at Sat Jun 7 19:53:49 2025 by rpki-client