$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14b4a81f-12ce-3099-a30b-95511b33ef42.roa File: 14b4a81f-12ce-3099-a30b-95511b33ef42.roa (raw, json) Hash identifier: DrLNsY/QDsPjsgst9WMDxcFt4z9agNqc9WZY5XFsPJ8= Subject key identifier: 09:65:3F:F0:06:4B:C4:D8:0E:57:88:EE:0F:9E:75:B2:82:7E:2B:C9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A9416863D6CA87A09D500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14b4a81f-12ce-3099-a30b-95511b33ef42.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:94:16:86:3d:6c:a8:7a:09:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=621df5ce-32e3-4b13-b80c-fdc81c049e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:1d:b8:b8:04:76:4a:17:16:83:9c:c0:b2: fd:a4:b7:ba:20:af:af:45:d8:4e:dc:d8:a6:ee:80: dc:bb:63:a1:de:db:5b:4c:fe:d0:9f:25:e1:cb:70: b2:83:af:0e:bb:2a:c7:bc:75:d8:8d:90:20:0f:f6: 19:07:7a:65:5d:76:af:78:eb:40:ed:5d:3f:3c:ee: eb:7f:47:42:40:f8:5d:c0:de:9e:d0:f2:5c:16:3d: 8f:2a:55:a0:40:0a:f8:ee:b6:69:06:46:f9:05:ac: 07:1e:49:ef:8d:62:80:4c:f6:a0:86:40:32:b1:ad: a1:2a:cd:2e:ab:b1:59:49:2d:d2:e5:67:b7:c0:79: 50:f2:ed:c9:cf:93:25:18:65:d8:59:4b:a2:a0:af: 7f:ff:1b:bc:a3:b9:21:f3:da:1e:57:93:22:f2:d3: 31:87:7f:0e:0a:d0:10:ce:31:ec:7e:5e:dd:45:46: 05:3c:18:12:3f:c9:03:a5:18:d9:ab:57:b0:9c:48: 43:46:b1:36:f2:2f:e3:0b:6c:8b:fb:6b:4a:ac:6a: 07:d4:ef:02:c2:a1:82:9d:50:f5:69:3c:24:2b:d2: dc:ce:74:0a:6f:34:09:70:55:ab:8f:2d:73:27:b5: 8b:6f:9d:e0:db:4b:ba:f2:bd:f1:02:a4:67:70:1e: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:65:3F:F0:06:4B:C4:D8:0E:57:88:EE:0F:9E:75:B2:82:7E:2B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14b4a81f-12ce-3099-a30b-95511b33ef42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:2b:3b:56:11:2f:72:af:bd:97:7c:98:f0:d0:df:30:b0:a9: 2c:5a:f5:a1:2c:90:4f:c4:51:a5:c0:89:46:53:01:84:90:48: 5a:9f:7b:7b:e0:95:91:67:11:92:5d:18:c4:db:65:45:be:fc: 9a:9d:67:73:bb:03:c8:b1:a2:98:94:87:93:3e:f8:ff:93:8b: 4e:eb:ed:94:92:08:74:b5:d6:ba:5d:c7:a1:37:ea:fa:e2:e0: cb:3b:17:83:9c:cf:36:2d:05:da:d0:bc:0f:83:bb:91:8a:e3: 52:7b:b8:af:49:d3:af:e5:af:57:08:63:eb:ae:e4:b8:84:1c: dc:49:f8:77:d7:57:89:99:bb:1b:9d:a2:59:66:00:cb:66:9e: f5:2d:ce:52:93:7c:de:32:97:f1:c5:c8:5d:95:66:54:76:9b: c4:45:3a:87:86:51:fd:2e:7b:7f:bb:f0:b9:11:6e:bc:b7:61: 89:07:ba:b0:70:66:41:f7:5d:1a:aa:11:a1:e6:a1:95:fb:80: d0:7b:09:57:23:90:4a:c0:fa:ac:d5:0c:40:b4:65:8b:ce:0d: da:af:40:a5:e7:24:a1:94:bc:ef:1f:6f:ac:a3:63:8d:9a:1e: df:a1:69:75:f9:a2:42:8e:92:d9:f7:fd:e1:bc:94:22:ff:41: 7a:46:86:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpQWhj1sqHoJ1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NjIxZGY1Y2UtMzJlMy00YjEzLWI4MGMtZmRjODFjMDQ5ZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5AduLgEdkoXFoOcwLL9pLe6IK+vRdhO3Nim 7oDcu2Oh3ttbTP7QnyXhy3Cyg68OuyrHvHXYjZAgD/YZB3plXXaveOtA7V0/PO7r f0dCQPhdwN6e0PJcFj2PKlWgQAr47rZpBkb5BawHHknvjWKATPaghkAysa2hKs0u q7FZSS3S5We3wHlQ8u3Jz5MlGGXYWUuioK9//xu8o7kh89oeV5Mi8tMxh38OCtAQ zjHsfl7dRUYFPBgSP8kDpRjZq1ewnEhDRrE28i/jC2yL+2tKrGoH1O8CwqGCnVD1 aTwkK9LcznQKbzQJcFWrjy1zJ7WLb53g20u68r3xAqRncB42fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAllP/AGS8TYDleI7g+edbKCfivJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTRiNGE4MWYtMTJjZS0z MDk5LWEzMGItOTU1MTFiMzNlZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4rO1YRL3KvvZd8mPDQ3zCwqSxa9aEskE/EUaXAiUZTAYSQSFqfe3vg lZFnEZJdGMTbZUW+/JqdZ3O7A8ixopiUh5M++P+Ti07r7ZSSCHS11rpdx6E36vri 4Ms7F4OczzYtBdrQvA+Du5GK41J7uK9J06/lr1cIY+uu5LiEHNxJ+HfXV4mZuxud ollmAMtmnvUtzlKTfN4yl/HFyF2VZlR2m8RFOoeGUf0ue3+78LkRbry3YYkHurBw ZkH3XRqqEaHmoZX7gNB7CVcjkErA+qzVDEC0ZYvODdqvQKXnJKGUvO8fb6yjY42a Ht+haXX5okKOktn3/eG8lCL/QXpGhhA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:38 2025 by rpki-client