$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a95c72c-4c3a-3661-8c15-522333021f1c.roa File: 0a95c72c-4c3a-3661-8c15-522333021f1c.roa (raw, json) Hash identifier: 6NspdgqHX7oWol4thDYK0w5JsTNnxVzFOOZlpGL3GDw= Subject key identifier: 4F:15:8F:95:69:20:35:DC:15:B5:2B:15:89:FE:59:CC:A0:1D:BA:BB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFDA912ADBA56A3055D300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a95c72c-4c3a-3661-8c15-522333021f1c.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.69.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:da:91:2a:db:a5:6a:30:55:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=e3e26ff5-acbe-4658-bdcf-03a0b75ffe12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a2:52:97:16:2b:db:06:84:d8:6f:6b:df:0b: 93:fb:1f:c2:59:41:8c:ab:9b:40:53:76:d3:06:10: ca:fd:de:a7:50:8e:08:ef:b7:d5:a9:1f:ed:9d:be: 07:29:7d:ba:55:06:fc:8f:5e:e6:f1:fe:43:4d:88: da:bb:2e:04:53:89:3a:0b:e2:e8:fb:cb:e2:0e:36: b5:97:ee:dc:ee:75:6b:8d:64:e1:2a:c1:09:8b:47: e9:d4:5b:1a:98:88:c5:cd:1d:45:cb:99:de:a9:26: 62:e3:ee:e2:fe:9d:f3:3f:8a:61:ab:d4:65:8b:bc: 18:18:95:48:42:d5:b9:94:dc:c3:6f:78:0d:5f:6b: 7f:a1:ea:c1:0a:58:11:73:97:2c:86:d3:85:3e:98: 8a:38:7f:eb:80:01:07:83:d4:08:47:69:22:45:8c: 07:bf:1c:99:24:35:ce:da:d0:c9:d3:2c:67:cd:94: 3d:92:2e:0e:d3:ba:f2:35:5d:19:40:e5:21:a2:fb: 7d:ea:89:00:12:44:76:c2:df:39:49:aa:e7:d9:28: 05:fa:ce:16:60:fd:54:20:53:a3:e6:93:21:13:c0: c7:d8:ad:ad:b3:ac:68:7c:9b:4e:c3:64:f4:26:56: bc:a8:a9:de:d7:2f:e1:0e:ad:07:a7:5f:89:99:98: cd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:8F:95:69:20:35:DC:15:B5:2B:15:89:FE:59:CC:A0:1D:BA:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a95c72c-4c3a-3661-8c15-522333021f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:35:44:b4:90:24:c7:84:f8:8f:bc:9c:7a:7d:04:a8:d4:30: b2:c3:37:3f:fd:34:90:6e:34:b2:c8:18:3f:76:af:41:12:ab: eb:8d:5b:78:85:60:fa:40:7f:90:77:38:5f:ba:a6:e3:ca:99: d6:54:17:45:62:81:ad:53:ef:92:46:2d:ff:ed:21:b1:61:4b: ce:be:ea:3d:4c:c2:55:46:fc:d4:40:5a:4e:d3:a8:cc:d9:18: 2d:8f:42:57:ca:6d:c3:9f:f0:08:a6:b3:36:24:64:e5:fa:20: 76:8e:cf:4f:86:65:70:56:04:ab:5e:98:7b:cc:f2:37:76:30: cc:7f:d7:b1:0f:ba:17:ef:bd:ff:e7:2f:5c:25:f3:d3:f5:d7: fd:09:3c:45:ce:49:04:9e:3e:05:3b:d4:40:ab:13:89:c4:07: 63:5b:9f:1a:8b:b3:21:13:ef:41:cc:ea:a9:dc:35:d6:3f:0c: fa:7d:0a:89:b1:1b:d5:35:de:d0:9b:8e:ca:b6:7b:04:3d:f4: 2d:0d:d9:58:f2:ab:1e:37:3f:c0:14:20:3c:ca:b6:0d:1a:e0: 2b:a7:66:44:da:b0:09:2e:28:cf:27:60:d4:2e:df:7a:08:bc: 26:3a:24:91:3c:48:b0:e4:b9:bd:44:db:c3:36:f8:83:55:44: ae:36:0a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79qRKtulajBV0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTNlMjZmZjUtYWNiZS00NjU4LWJkY2YtMDNhMGI3NWZmZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKJSlxYr2waE2G9r3wuT+x/CWUGMq5tAU3bT BhDK/d6nUI4I77fVqR/tnb4HKX26VQb8j17m8f5DTYjauy4EU4k6C+Lo+8viDja1 l+7c7nVrjWThKsEJi0fp1FsamIjFzR1Fy5neqSZi4+7i/p3zP4phq9Rli7wYGJVI QtW5lNzDb3gNX2t/oerBClgRc5cshtOFPpiKOH/rgAEHg9QIR2kiRYwHvxyZJDXO 2tDJ0yxnzZQ9ki4O07ryNV0ZQOUhovt96okAEkR2wt85Sarn2SgF+s4WYP1UIFOj 5pMhE8DH2K2ts6xofJtOw2T0Jla8qKne1y/hDq0Hp1+JmZjNCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8Vj5VpIDXcFbUrFYn+WcygHbq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGE5NWM3MmMtNGMzYS0z NjYxLThjMTUtNTIyMzMzMDIxZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB81RLSQJMeE+I+8nHp9BKjUMLLDNz/9NJBuNLLIGD92r0ESq+uNW3iF YPpAf5B3OF+6puPKmdZUF0Viga1T75JGLf/tIbFhS86+6j1MwlVG/NRAWk7TqMzZ GC2PQlfKbcOf8AimszYkZOX6IHaOz0+GZXBWBKtemHvM8jd2MMx/17EPuhfvvf/n L1wl89P11/0JPEXOSQSePgU71ECrE4nEB2NbnxqLsyET70HM6qncNdY/DPp9Comx G9U13tCbjsq2ewQ99C0N2Vjyqx43P8AUIDzKtg0a4CunZkTasAkuKM8nYNQu33oI vCY6JJE8SLDkub1E28M2+INVRK42Cp0= -----END CERTIFICATE-----Generated at Fri Jun 6 16:51:16 2025 by rpki-client