$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13212b3f-38ca-3114-af9b-4d50d22a06ea.roa File: 13212b3f-38ca-3114-af9b-4d50d22a06ea.roa (raw, json) Hash identifier: lYpDLNDV4zWXvSQHXKq5h+5sLyXqy34z4TC1xkYl0fw= Subject key identifier: 6A:91:42:E3:7A:09:6C:3A:09:9E:78:5F:3C:B4:7F:9B:97:EC:5F:EC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8941A411DB5591AE9720 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13212b3f-38ca-3114-af9b-4d50d22a06ea.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:89:41:a4:11:db:55:91:ae:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=c264207f-b737-4ce0-8936-902a10bba042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:0c:be:1c:5d:a8:0a:38:00:28:7f:05:29: ff:fe:be:c5:6b:5f:b3:d3:cb:8c:1a:33:16:b6:9f: e6:54:ff:92:92:3a:4a:0d:6d:a0:77:f8:78:26:6c: a3:9a:dc:9b:0b:62:37:8d:53:d1:b9:bb:82:95:ca: 5d:c9:58:21:70:5a:24:59:c2:42:a8:dd:55:6e:b6: d5:5b:42:cd:96:2b:9c:4a:31:a1:49:9f:61:13:f1: a6:56:5f:13:09:d6:3f:db:f3:a8:0c:fe:c9:e3:e7: 6f:b1:3c:18:6c:b9:b5:e6:e7:a6:c0:8f:53:2a:27: 9d:0a:d2:eb:bc:cf:3d:36:93:d7:65:72:c6:54:09: b0:80:4b:fb:ba:b5:5d:f2:92:d2:81:fd:ca:e8:0f: 14:21:eb:75:8d:e4:16:90:34:04:d6:0e:e7:83:fa: bc:2b:3f:65:97:14:69:ba:c5:de:fd:ea:41:c8:5c: 05:a6:58:9d:c8:3a:ae:c5:7e:55:9e:30:f4:36:8b: 43:2e:04:8e:48:cc:16:fa:c8:b7:f1:54:0f:4f:31: cc:05:e3:df:75:8b:68:d9:85:58:a0:e7:5a:09:9f: e2:8e:48:d0:5e:29:f7:5e:fa:76:f6:95:10:d0:63: bf:11:8a:1d:cf:45:63:62:e0:84:7e:10:b2:b9:1b: f8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:91:42:E3:7A:09:6C:3A:09:9E:78:5F:3C:B4:7F:9B:97:EC:5F:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/13212b3f-38ca-3114-af9b-4d50d22a06ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:4b:65:58:dc:4d:f4:35:cf:c6:12:da:b4:f6:b9:58:78:8e: 5a:6b:3b:17:aa:08:3d:48:fe:7b:a8:cb:6a:2f:99:e3:45:c7: e3:e3:85:cc:59:cb:29:5f:a8:9f:74:17:a0:a7:8c:60:e5:2b: 85:99:65:d6:22:e1:06:92:c0:50:b3:b7:5e:11:8b:f9:83:24: 5c:e0:99:99:28:1e:a7:91:56:62:94:8d:03:ac:1c:e4:ea:3c: 80:d4:d5:50:52:3a:d1:8e:6d:20:b1:7e:de:83:04:10:65:ef: 0c:16:ba:e0:d8:cf:d0:80:fa:80:b0:2f:0c:08:28:bc:e1:d1: 84:8b:74:8e:88:35:4b:e0:c1:d3:50:15:0c:13:b8:04:0f:8f: c2:ea:87:8f:2d:5a:29:a1:35:91:c7:36:04:c2:b1:4e:6e:2a: ae:34:35:f0:c0:af:b4:e5:a3:21:3b:60:c0:07:21:22:d8:79: ae:1b:10:33:54:6e:49:cd:17:de:e8:42:bd:c8:3d:74:9b:4f: 42:ad:25:66:a8:56:16:41:80:38:9e:80:c3:b1:f1:07:f5:e6: 1c:58:3b:a9:cf:dd:e6:48:e5:b1:ea:32:97:f5:49:85:24:26: 8e:db:dd:da:21:eb:a0:aa:a8:67:c7:d2:c2:c7:5e:a0:44:48: ba:e3:27:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGolBpBHbVZGulyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk YzI2NDIwN2YtYjczNy00Y2UwLTg5MzYtOTAyYTEwYmJhMDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux0MvhxdqAo4ACh/BSn//r7Fa1+z08uMGjMW tp/mVP+SkjpKDW2gd/h4JmyjmtybC2I3jVPRubuClcpdyVghcFokWcJCqN1VbrbV W0LNliucSjGhSZ9hE/GmVl8TCdY/2/OoDP7J4+dvsTwYbLm15uemwI9TKiedCtLr vM89NpPXZXLGVAmwgEv7urVd8pLSgf3K6A8UIet1jeQWkDQE1g7ng/q8Kz9llxRp usXe/epByFwFplidyDquxX5VnjD0NotDLgSOSMwW+si38VQPTzHMBePfdYto2YVY oOdaCZ/ijkjQXin3Xvp29pUQ0GO/EYodz0VjYuCEfhCyuRv4UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqRQuN6CWw6CZ54Xzy0f5uX7F/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTMyMTJiM2YtMzhjYS0z MTE0LWFmOWItNGQ1MGQyMmEwNmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBLZVjcTfQ1z8YS2rT2uVh4jlprOxeqCD1I/nuoy2ovmeNFx+PjhcxZ yylfqJ90F6CnjGDlK4WZZdYi4QaSwFCzt14Ri/mDJFzgmZkoHqeRVmKUjQOsHOTq PIDU1VBSOtGObSCxft6DBBBl7wwWuuDYz9CA+oCwLwwIKLzh0YSLdI6INUvgwdNQ FQwTuAQPj8Lqh48tWimhNZHHNgTCsU5uKq40NfDAr7TloyE7YMAHISLYea4bEDNU bknNF97oQr3IPXSbT0KtJWaoVhZBgDiegMOx8Qf15hxYO6nP3eZI5bHqMpf1SYUk Jo7b3doh66CqqGfH0sLHXqBESLrjJ2E= -----END CERTIFICATE-----Generated at Fri Jun 6 16:56:28 2025 by rpki-client