$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da0d0c9-ccab-3821-845a-dd0fdb86f429.roa File: 0da0d0c9-ccab-3821-845a-dd0fdb86f429.roa (raw, json) Hash identifier: rrnNkzk1ZPaK8yy/ueY/QcyUHsQCAwVFI4slUxt4Pv4= Subject key identifier: 03:27:C1:6C:3F:9D:86:F9:AF:2A:55:06:DB:6D:1A:5D:13:D9:28:64 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9F4C3A57430DDADCAE40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da0d0c9-ccab-3821-845a-dd0fdb86f429.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.67.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:9f:4c:3a:57:43:0d:da:dc:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=849fad4b-9c96-4db8-b19e-ac551e5f7253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:66:f1:42:1f:00:43:33:03:31:c4:08:a9: a3:0e:5e:ea:77:cc:22:6e:0b:e2:77:87:94:c9:7e: 18:d9:1b:82:ac:05:cd:a2:ed:3f:93:ae:69:a2:5a: e7:6d:9c:72:9c:68:59:54:39:33:d3:48:58:fc:10: b7:ce:b3:2e:53:0f:62:f4:38:25:71:cb:9b:4f:8a: 95:2d:ae:57:93:25:5a:94:4f:ca:0a:aa:84:9f:8f: 21:6a:06:41:88:8d:14:e7:90:e6:de:40:4b:ef:d9: 32:08:c2:da:41:55:61:0f:3d:3d:f7:58:e0:26:55: 93:4b:cf:6a:7c:5d:76:37:52:db:0b:51:1c:f3:f5: d8:a2:f4:2d:1c:75:14:71:f7:fd:cd:8c:08:1c:a8: 42:0e:ff:17:1c:80:a3:0c:e8:6b:1b:e8:38:9f:78: cf:f8:64:08:6c:4d:a0:13:d5:49:a8:1f:25:0c:61: ef:d5:d1:36:aa:98:f5:bc:0a:4f:2c:c5:a9:24:5c: 8e:94:e8:3c:74:33:ae:22:d8:8a:0f:31:c3:b8:a9: 1a:42:a4:ab:20:59:90:49:83:1d:ee:63:d6:3e:4a: 02:a4:d9:50:63:84:f7:b9:dd:a2:3a:49:e5:f5:72: 3d:52:30:e7:22:e5:fc:c4:06:d5:39:dc:ca:23:15: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:C1:6C:3F:9D:86:F9:AF:2A:55:06:DB:6D:1A:5D:13:D9:28:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da0d0c9-ccab-3821-845a-dd0fdb86f429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2a:10:bf:2f:e0:ac:05:ef:b4:47:9e:d6:7d:ea:97:7a:e3: 0c:66:7e:cf:29:a8:5f:7d:f0:50:3e:4a:d1:4d:7d:98:e1:cf: 8f:8d:8d:29:ce:a5:64:86:2f:93:9e:ec:65:9a:55:a0:19:92: 62:ff:87:24:e0:ff:d0:f4:60:26:5e:1c:ad:af:69:95:d2:7a: 47:4b:d2:6c:9d:c6:3d:56:a5:26:45:f7:21:30:e0:7a:4a:fc: 20:64:77:11:a1:68:7a:53:f9:5b:54:97:40:ff:b4:08:10:d3: da:41:e8:f1:4f:02:df:62:5f:20:23:3d:2d:0b:d3:18:9c:35: 3a:20:ee:ac:c8:80:54:37:67:7d:4e:08:4f:70:69:82:aa:60: fc:59:17:01:99:0b:43:4a:41:e8:aa:b1:b1:aa:6b:ce:a7:1d: bf:ca:2d:fa:f0:1d:57:16:ef:fe:23:86:fe:5c:c2:3f:e9:44: f4:d5:b3:90:70:b6:55:fd:18:a8:41:6d:73:07:3c:93:1d:81: df:99:6e:97:94:70:87:75:e2:aa:d5:57:a1:46:f1:36:a9:dd: 08:a9:c2:7c:75:30:91:ef:ec:df:7d:52:1d:38:9b:5e:8a:9b: 22:be:b5:c2:f8:3b:1f:ba:a8:63:95:a1:27:82:04:49:93:c9: ff:bd:69:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnup9MOldDDdrcrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ODQ5ZmFkNGItOWM5Ni00ZGI4LWIxOWUtYWM1NTFlNWY3MjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9pm8UIfAEMzAzHECKmjDl7qd8wibgvid4eU yX4Y2RuCrAXNou0/k65polrnbZxynGhZVDkz00hY/BC3zrMuUw9i9DglccubT4qV La5XkyValE/KCqqEn48hagZBiI0U55Dm3kBL79kyCMLaQVVhDz0991jgJlWTS89q fF12N1LbC1Ec8/XYovQtHHUUcff9zYwIHKhCDv8XHICjDOhrG+g4n3jP+GQIbE2g E9VJqB8lDGHv1dE2qpj1vApPLMWpJFyOlOg8dDOuItiKDzHDuKkaQqSrIFmQSYMd 7mPWPkoCpNlQY4T3ud2iOknl9XI9UjDnIuX8xAbVOdzKIxXvQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMnwWw/nYb5rypVBtttGl0T2ShkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGRhMGQwYzktY2NhYi0z ODIxLTg0NWEtZGQwZmRiODZmNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoqEL8v4KwF77RHntZ96pd64wxmfs8pqF998FA+StFNfZjhz4+NjSnO pWSGL5Oe7GWaVaAZkmL/hyTg/9D0YCZeHK2vaZXSekdL0mydxj1WpSZF9yEw4HpK /CBkdxGhaHpT+VtUl0D/tAgQ09pB6PFPAt9iXyAjPS0L0xicNTog7qzIgFQ3Z31O CE9waYKqYPxZFwGZC0NKQeiqsbGqa86nHb/KLfrwHVcW7/4jhv5cwj/pRPTVs5Bw tlX9GKhBbXMHPJMdgd+ZbpeUcId14qrVV6FG8Tap3Qipwnx1MJHv7N99Uh04m16K myK+tcL4Ox+6qGOVoSeCBEmTyf+9aR0= -----END CERTIFICATE-----Generated at Sat Jun 7 05:04:39 2025 by rpki-client