$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1af4ef48-a7c3-3033-8d89-07f369760995.roa File: 1af4ef48-a7c3-3033-8d89-07f369760995.roa (raw, json) Hash identifier: yQiLtlH7TWlN2jcQDQSlat7Z25xh9C3K5ZAJbAYXOpE= Subject key identifier: E3:BB:2A:A3:E4:50:C6:C2:AA:3E:4E:16:97:CF:5B:80:56:97:54:B3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550856D13EAB7D7D933000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1af4ef48-a7c3-3033-8d89-07f369760995.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.70.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:08:56:d1:3e:ab:7d:7d:93:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=3be5b09d-b9d5-4bd8-bb9e-003abc7f8e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:be:c5:bf:3b:f8:fd:e8:80:b7:cc:9c:19: af:ce:80:2f:2c:fc:bf:4e:cf:10:7f:43:2c:3d:7c: 4d:28:44:1b:02:0d:5c:06:b9:fe:27:db:6e:d3:18: 6d:d6:0c:b0:cc:99:f3:a2:ef:c5:38:a0:f4:4c:53: 46:c9:1b:9d:38:b9:53:41:29:03:c1:d3:e7:7d:f1: b2:ee:f5:e3:72:a8:79:ec:d5:d9:ce:bc:91:1e:16: 8c:81:b6:06:cd:23:a6:98:e5:ee:64:50:df:44:ed: 20:90:c8:75:be:59:f0:cc:ee:ab:fc:8c:2e:ee:44: 2f:0e:82:f1:25:64:26:07:75:26:aa:6c:a5:c5:95: 15:37:6f:6d:45:2b:ef:c8:ec:86:0a:d3:04:2b:f7: 3c:aa:dd:23:ad:93:66:95:ba:7f:e0:8e:d7:68:80: 4a:34:d8:e2:88:80:fa:57:c8:a4:29:dc:9b:06:e2: 7e:6e:aa:e1:0e:33:1b:ff:fd:fd:f0:12:18:3d:45: 35:1f:51:f4:e8:db:c8:1b:80:87:38:56:53:74:ee: 35:a0:ed:84:a8:7b:01:96:2d:d7:47:fa:e0:01:85: 6b:7d:75:62:b0:8b:97:96:cc:f4:d1:7d:74:9c:42: ae:bd:d5:13:9b:90:30:22:71:56:ef:de:4e:9f:12: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BB:2A:A3:E4:50:C6:C2:AA:3E:4E:16:97:CF:5B:80:56:97:54:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1af4ef48-a7c3-3033-8d89-07f369760995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:14:68:b6:b7:28:50:ef:aa:23:76:8b:bc:59:50:62:32:c5: 86:0b:c7:52:46:bc:21:d7:01:5f:fa:9a:ea:e1:c3:e0:d9:ba: cd:09:62:31:df:9a:87:69:f7:d5:4a:72:cb:ec:e5:a7:ad:73: a8:04:e7:a3:56:fa:30:3c:31:90:df:75:3b:b7:b8:0c:5a:19: 24:2d:c1:f0:ca:8c:10:af:da:cf:61:99:65:1d:3b:06:3f:67: ab:05:f6:0a:40:7a:07:1b:07:d5:3d:a0:06:29:46:be:eb:ff: 97:da:6a:3e:1c:04:9f:6d:3e:fb:45:41:26:e9:fc:d8:c4:dd: 6a:39:a9:85:86:42:86:23:da:98:03:a5:ff:41:15:db:33:4a: 95:6b:f3:e4:23:d6:e1:55:6a:a4:39:ca:6b:4c:e7:67:80:03: b8:82:ab:99:9d:59:a9:43:fe:ff:93:71:8c:59:3d:cf:53:82: 3a:d2:0d:56:28:a6:5e:c9:a0:5a:c8:24:75:cc:fd:17:01:56: 45:1f:d6:79:b8:74:e1:19:86:26:f5:79:32:42:ab:4e:13:a3: 4e:e8:10:01:31:c3:b1:06:27:ea:7b:80:bc:f5:33:68:4e:e1: 8b:4d:dc:49:24:3b:c4:b0:99:eb:1b:14:26:ae:9c:df:7e:f6: d3:95:6e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQhW0T6rfX2TMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk M2JlNWIwOWQtYjlkNS00YmQ4LWJiOWUtMDAzYWJjN2Y4ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ti+xb87+P3ogLfMnBmvzoAvLPy/Ts8Qf0Ms PXxNKEQbAg1cBrn+J9tu0xht1gywzJnzou/FOKD0TFNGyRudOLlTQSkDwdPnffGy 7vXjcqh57NXZzryRHhaMgbYGzSOmmOXuZFDfRO0gkMh1vlnwzO6r/Iwu7kQvDoLx JWQmB3UmqmylxZUVN29tRSvvyOyGCtMEK/c8qt0jrZNmlbp/4I7XaIBKNNjiiID6 V8ikKdybBuJ+bqrhDjMb//398BIYPUU1H1H06NvIG4CHOFZTdO41oO2EqHsBli3X R/rgAYVrfXVisIuXlsz00X10nEKuvdUTm5AwInFW795OnxLMhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOO7KqPkUMbCqj5OFpfPW4BWl1SzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWFmNGVmNDgtYTdjMy0z MDMzLThkODktMDdmMzY5NzYwOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcUaLa3KFDvqiN2i7xZUGIyxYYLx1JGvCHXAV/6murhw+DZus0JYjHf modp99VKcsvs5aetc6gE56NW+jA8MZDfdTu3uAxaGSQtwfDKjBCv2s9hmWUdOwY/ Z6sF9gpAegcbB9U9oAYpRr7r/5faaj4cBJ9tPvtFQSbp/NjE3Wo5qYWGQoYj2pgD pf9BFdszSpVr8+Qj1uFVaqQ5ymtM52eAA7iCq5mdWalD/v+TcYxZPc9TgjrSDVYo pl7JoFrIJHXM/RcBVkUf1nm4dOEZhib1eTJCq04To07oEAExw7EGJ+p7gLz1M2hO 4YtN3EkkO8SwmesbFCaunN9+9tOVbq0= -----END CERTIFICATE-----Generated at Sat Jun 7 17:46:07 2025 by rpki-client