$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1cf38e6c-890c-339d-b1e4-64ffee8569ec.roa File: 1cf38e6c-890c-339d-b1e4-64ffee8569ec.roa (raw, json) Hash identifier: 21SC6UpAI8EmNnRZAen3sVOCzAc1CM3Hl3P+NRZOdRA= Subject key identifier: 42:04:F3:CF:03:0E:84:88:1E:35:9A:2A:DF:C9:F9:DE:FD:B3:B7:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA854A5B734315D765057E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1cf38e6c-890c-339d-b1e4-64ffee8569ec.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:4a:5b:73:43:15:d7:65:05:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=99551a3b-8482-4133-b94e-0833e3d2f27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:ea:ae:e6:52:8f:e4:61:64:a6:29:1f:05: 91:2e:62:f5:b2:97:13:7f:d2:dd:10:41:c7:14:20: f4:c3:bf:6d:7c:e1:be:fb:49:70:f2:bc:a7:c0:cd: f8:a1:02:6b:8a:5d:3a:7d:66:7e:a3:60:16:6d:e2: 8b:ae:50:d5:0f:46:97:61:d5:41:3d:60:09:bc:99: 4e:6a:09:a7:98:6a:82:2b:55:97:2b:ea:81:83:56: d2:00:67:f2:f2:a5:51:20:06:0f:2c:a2:42:48:46: 6c:ca:44:a3:d3:70:f2:50:05:5a:b5:6a:0c:ae:30: 2e:c9:b1:42:94:4a:96:52:ed:6b:53:7f:d9:68:f3: 76:45:2e:67:98:2e:60:3a:d7:88:62:4b:77:e5:09: f6:cc:d0:94:49:ae:e6:88:41:4f:8f:43:58:05:3d: 4c:87:23:6d:e5:7b:2b:e9:c8:1d:bc:12:81:8d:00: ae:42:90:be:be:45:27:5b:25:bd:b7:45:9a:3a:cd: 37:1f:c9:99:fb:ff:71:c3:d7:2d:5f:27:41:94:78: c2:a4:50:71:a0:87:c3:b2:86:74:f3:3c:bc:22:44: 26:de:5f:24:6e:a2:e7:5b:a7:f2:32:c6:75:ef:55: 75:81:97:2c:fb:5f:c4:93:f2:4a:19:af:8a:c1:94: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:04:F3:CF:03:0E:84:88:1E:35:9A:2A:DF:C9:F9:DE:FD:B3:B7:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1cf38e6c-890c-339d-b1e4-64ffee8569ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fc:e3:7a:67:eb:fe:f6:7e:71:08:98:15:6e:d1:b0:03:d7: 9b:92:1d:47:8d:41:03:bb:56:c4:bd:4b:fc:b2:a3:af:dc:bf: 1a:28:11:5e:55:52:3d:64:0a:ce:b4:5e:24:8e:1a:95:21:bc: b6:16:0a:62:53:75:3d:7b:72:d3:c2:ec:ec:73:4c:95:3f:82: 2a:79:12:8c:85:3e:c3:a0:08:1d:b8:22:eb:b6:64:78:07:d9: ec:55:e5:0e:fc:bd:61:b9:d9:c9:a5:87:da:ed:48:e7:78:fd: bf:98:fa:c3:e8:3a:d6:c5:27:1a:3e:ed:e2:ec:23:d9:6a:b1: 0d:fd:47:6f:9b:eb:fe:16:c7:ef:1e:8c:17:6d:9b:47:d9:7f: 81:b3:fa:af:55:9f:4a:e5:91:c2:a0:0d:98:d8:f3:e4:f7:d3: 0d:11:1d:09:cf:46:3e:7a:df:89:68:3d:db:25:ad:e8:c7:7c: eb:c5:6a:44:a4:74:f9:20:2d:3d:6c:f4:88:b5:50:8c:a6:61: d1:26:ae:89:28:4d:5d:87:d6:9a:90:53:92:b8:c9:c2:72:a8: 10:02:06:54:73:60:8a:4f:64:cd:40:71:34:09:d3:45:89:88: 73:16:2d:ac:59:98:f1:9c:fd:8f:a3:fe:57:cf:c8:08:a3:38: 18:59:76:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUpbc0MV12UFfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk OTk1NTFhM2ItODQ4Mi00MTMzLWI5NGUtMDgzM2UzZDJmMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFrqruZSj+RhZKYpHwWRLmL1spcTf9LdEEHH FCD0w79tfOG++0lw8rynwM34oQJril06fWZ+o2AWbeKLrlDVD0aXYdVBPWAJvJlO agmnmGqCK1WXK+qBg1bSAGfy8qVRIAYPLKJCSEZsykSj03DyUAVatWoMrjAuybFC lEqWUu1rU3/ZaPN2RS5nmC5gOteIYkt35Qn2zNCUSa7miEFPj0NYBT1MhyNt5Xsr 6cgdvBKBjQCuQpC+vkUnWyW9t0WaOs03H8mZ+/9xw9ctXydBlHjCpFBxoIfDsoZ0 8zy8IkQm3l8kbqLnW6fyMsZ171V1gZcs+1/Ek/JKGa+KwZSulwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIE888DDoSIHjWaKt/J+d79s7c0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWNmMzhlNmMtODkwYy0z MzlkLWIxZTQtNjRmZmVlODU2OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7843pn6/72fnEImBVu0bAD15uSHUeNQQO7VsS9S/yyo6/cvxooEV5V Uj1kCs60XiSOGpUhvLYWCmJTdT17ctPC7OxzTJU/gip5EoyFPsOgCB24Iuu2ZHgH 2exV5Q78vWG52cmlh9rtSOd4/b+Y+sPoOtbFJxo+7eLsI9lqsQ39R2+b6/4Wx+8e jBdtm0fZf4Gz+q9Vn0rlkcKgDZjY8+T30w0RHQnPRj5634loPdslrejHfOvFakSk dPkgLT1s9Ii1UIymYdEmrokoTV2H1pqQU5K4ycJyqBACBlRzYIpPZM1AcTQJ00WJ iHMWLaxZmPGc/Y+j/lfPyAijOBhZdoo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:02 2025 by rpki-client