$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa File: 2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa (raw, json) Hash identifier: dUzI6biIqX6UH5Dkinr1OK63gaRLPZseFNbLTo/t6dg= Subject key identifier: 64:DD:34:3D:0B:85:36:86:67:5F:FC:57:F1:42:CF:6D:25:7C:27:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EEB5100B244E4D006DF74480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 13335 IP address blocks: 172.70.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:10:0b:24:4e:4d:00:6d:f7:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=848ce96c-d147-4b75-8079-89969e9bb578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b2:a4:0d:df:7a:be:97:d5:a2:d4:43:3d:67: 90:f9:bc:8e:8c:02:c3:eb:61:e1:2d:5c:db:3b:e9: 6e:6c:aa:5b:e1:09:01:fb:6a:7f:a8:87:38:05:6c: 64:e7:2f:d5:1c:52:28:38:28:51:78:f6:bd:2b:15: 75:8f:01:f8:b1:f2:36:3a:6d:2a:1c:d1:f3:6e:98: a4:b1:23:55:28:37:a7:b5:dd:2d:2b:8e:e8:1c:90: d0:85:e1:31:a0:88:c3:89:ac:4c:bc:24:74:61:4e: d4:e1:dd:50:a4:5d:df:f1:28:07:97:69:c5:46:20: 05:de:a6:63:24:0d:cf:aa:25:f5:af:f9:d1:34:e9: 38:b5:13:75:0d:b3:dd:f2:1c:1f:49:ee:47:64:2c: 30:4e:65:24:dc:04:1f:a6:4d:75:74:42:0c:ea:df: 3b:4d:c6:84:36:58:26:5a:68:24:ec:a1:2c:7b:3b: 15:51:22:3f:b1:eb:6d:fb:b4:68:57:c7:73:32:a5: 9e:c7:81:f4:b4:86:2d:0c:f1:51:fb:1c:b9:b3:b8: 05:f8:9b:7b:e1:cc:77:3d:4f:b7:fb:74:9e:12:07: ec:4c:df:0d:31:88:05:a1:95:c6:bf:2c:9e:3c:2e: 70:d8:55:4d:07:e7:51:42:a5:2a:0d:42:88:39:b9: 50:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DD:34:3D:0B:85:36:86:67:5F:FC:57:F1:42:CF:6D:25:7C:27:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:73:2e:01:53:85:51:4b:46:fc:cf:a6:99:62:e4:6e:d1:da: 17:bc:d7:da:e7:07:2c:89:32:1b:b2:47:71:86:eb:d6:6d:b0: 7d:8c:8f:d9:43:78:47:64:f6:33:ca:61:92:6b:35:be:e7:db: 15:97:44:99:c2:7a:8a:dc:05:f7:3a:13:1d:51:e8:ec:bb:9d: 07:57:09:9c:b7:f5:cc:43:98:21:f1:01:16:5b:9a:82:4b:0d: df:fb:5d:a4:8c:30:e1:11:6f:04:75:13:c6:f6:55:7d:51:29: 63:25:7d:af:8c:c9:2b:89:5c:97:ab:d3:a4:7c:b9:82:4c:88: ba:7a:d8:ef:f2:58:83:02:cf:88:3e:9e:a4:dd:8d:fd:91:5a: 98:e8:af:81:68:9d:13:3d:3d:a6:d5:3a:be:67:1f:c4:80:9b: 42:68:c1:73:8a:ae:44:22:1a:55:88:7d:14:5f:12:3d:14:d4: 49:b7:68:a6:e6:13:7f:58:4b:bb:4e:8a:6f:ef:8e:db:ac:36: fb:c0:bc:b9:0b:5c:48:bc:f2:91:22:32:ee:a8:81:43:a7:70: f9:72:be:d4:aa:e8:cb:2e:df:f8:8a:0c:15:29:a1:63:01:1f: b2:e0:a3:85:9d:12:56:1a:1a:b4:99:18:b1:d6:59:0d:93:60: 29:e1:31:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutRALJE5NAG33RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk ODQ4Y2U5NmMtZDE0Ny00Yjc1LTgwNzktODk5NjllOWJiNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LKkDd96vpfVotRDPWeQ+byOjALD62HhLVzb O+lubKpb4QkB+2p/qIc4BWxk5y/VHFIoOChRePa9KxV1jwH4sfI2Om0qHNHzbpik sSNVKDentd0tK47oHJDQheExoIjDiaxMvCR0YU7U4d1QpF3f8SgHl2nFRiAF3qZj JA3PqiX1r/nRNOk4tRN1DbPd8hwfSe5HZCwwTmUk3AQfpk11dEIM6t87TcaENlgm Wmgk7KEsezsVUSI/sett+7RoV8dzMqWex4H0tIYtDPFR+xy5s7gF+Jt74cx3PU+3 +3SeEgfsTN8NMYgFoZXGvyyePC5w2FVNB+dRQqUqDUKIOblQBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTdND0LhTaGZ1/8V/FCz20lfCfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjIyMGVjM2MtNTZmOC0z NWYyLWFhZmUtOGNjYmM0NWIwZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFzLgFThVFLRvzPppli5G7R2he819rnByyJMhuyR3GG69ZtsH2Mj9lD eEdk9jPKYZJrNb7n2xWXRJnCeorcBfc6Ex1R6Oy7nQdXCZy39cxDmCHxARZbmoJL Dd/7XaSMMOERbwR1E8b2VX1RKWMlfa+MySuJXJer06R8uYJMiLp62O/yWIMCz4g+ nqTdjf2RWpjor4FonRM9PabVOr5nH8SAm0JowXOKrkQiGlWIfRRfEj0U1Em3aKbm E39YS7tOim/vjtusNvvAvLkLXEi88pEiMu6ogUOncPlyvtSq6Msu3/iKDBUpoWMB H7Lgo4WdElYaGrSZGLHWWQ2TYCnhMWQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:31:49 2025 by rpki-client