$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa File: 24829d14-985d-3bf3-bc5c-2f773de283d5.roa (raw, json) Hash identifier: XdvTmSBRiyCWzC1QvWtmYh1nHdY3P7oaPsk8bzv5fAc= Subject key identifier: CF:F6:80:78:88:01:3D:28:F5:4F:EF:DB:D4:9C:F3:75:DB:E8:21:5E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA94390FE02E7DA3DB5900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.67.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:94:39:0f:e0:2e:7d:a3:db:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=8cf92095-f8f1-41b9-b5d0-6c5805a43b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:63:56:76:97:2e:68:56:fc:b9:bc:9c:5c: c6:e6:bc:26:e6:a0:b0:b4:ac:e2:62:f0:50:19:87: 0a:0b:c3:be:42:bc:02:1c:9c:26:4c:93:64:d6:b1: 7e:38:62:0b:6c:7e:83:0b:0e:f6:c6:f2:7c:16:66: fe:ba:eb:4f:ae:af:22:97:40:95:b8:37:1c:22:5b: 8c:91:f2:d1:0d:69:72:04:69:5a:5c:27:bc:5c:39: 2b:29:0b:5f:33:18:de:0d:80:c6:a9:84:62:b6:50: 94:9c:c4:a1:78:ed:bd:2e:75:29:62:b2:1b:16:c6: 1f:31:54:75:40:26:b7:76:fd:ee:f1:fa:f9:fa:5a: 7e:a9:24:87:c1:e4:60:b4:e9:1b:36:f7:46:ae:fe: 51:cf:91:93:87:26:56:98:70:b8:a9:74:5c:d0:24: 80:98:6c:ce:e7:81:92:e3:d8:3c:3a:0f:13:33:31: f3:b7:7f:e3:1d:3e:3c:f9:33:8d:02:0b:6f:1b:3c: 19:5f:09:17:d7:61:91:ea:c1:ce:dd:5d:6f:77:ff: bd:62:00:9b:11:e9:d2:7d:8d:c2:b9:15:5f:23:9d: 0e:65:e6:ac:47:90:8d:56:37:1d:d7:78:c5:12:9c: b7:bb:85:7c:0d:fe:9c:e0:8e:96:bd:2c:b2:b8:28: 6d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:80:78:88:01:3D:28:F5:4F:EF:DB:D4:9C:F3:75:DB:E8:21:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24829d14-985d-3bf3-bc5c-2f773de283d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:f7:d3:d6:05:95:fe:09:6d:32:a5:50:21:46:31:59:d9:ed: e7:5a:8c:0d:7e:2c:9b:cf:5a:97:6a:d6:f1:a5:ee:3a:b6:0a: d9:ff:a0:f7:f1:26:10:90:08:f5:80:a0:55:45:45:c3:d2:82: 38:90:2d:dc:46:8c:e2:fd:1d:42:ff:1d:6b:ed:de:8b:6b:0b: ce:d7:ca:89:4d:8f:22:7b:97:e8:0e:1d:c7:61:cf:ce:b3:6c: 9b:6f:66:6f:96:39:cc:6d:d4:2f:69:e1:6f:86:aa:4b:e9:6d: f6:c6:21:93:be:7d:61:71:dc:7d:a3:65:1a:6c:e3:84:60:16: dc:21:3f:94:60:01:96:bf:19:86:2b:87:4f:72:7d:d3:53:9b: a4:c5:24:32:df:90:8e:75:8c:43:1b:ce:73:05:84:c8:9d:a1: 79:a0:b8:fb:b7:0d:fb:44:09:13:9a:99:ce:5e:0b:3c:b4:8d: 91:5f:84:3a:32:24:53:69:2e:db:29:d4:5a:f8:b3:64:28:1e: 44:8d:4c:65:91:8e:12:83:2d:4f:44:fb:10:d3:01:8e:33:77: 82:bc:da:fb:45:6e:f6:bd:f5:9a:67:b7:b5:3a:7e:5b:28:cc: 9a:5c:dc:d0:cd:57:03:48:ad:1d:7b:ec:5a:12:4d:5f:c1:e1: 1e:b1:12:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupQ5D+AufaPbWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OGNmOTIwOTUtZjhmMS00MWI5LWI1ZDAtNmM1ODA1YTQzYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuopjVnaXLmhW/Lm8nFzG5rwm5qCwtKziYvBQ GYcKC8O+QrwCHJwmTJNk1rF+OGILbH6DCw72xvJ8Fmb+uutPrq8il0CVuDccIluM kfLRDWlyBGlaXCe8XDkrKQtfMxjeDYDGqYRitlCUnMSheO29LnUpYrIbFsYfMVR1 QCa3dv3u8fr5+lp+qSSHweRgtOkbNvdGrv5Rz5GThyZWmHC4qXRc0CSAmGzO54GS 49g8Og8TMzHzt3/jHT48+TONAgtvGzwZXwkX12GR6sHO3V1vd/+9YgCbEenSfY3C uRVfI50OZeasR5CNVjcd13jFEpy3u4V8Df6c4I6WvSyyuChtowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/2gHiIAT0o9U/v29Sc83Xb6CFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjQ4MjlkMTQtOTg1ZC0z YmYzLWJjNWMtMmY3NzNkZTI4M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMH309YFlf4JbTKlUCFGMVnZ7edajA1+LJvPWpdq1vGl7jq2Ctn/oPfx JhCQCPWAoFVFRcPSgjiQLdxGjOL9HUL/HWvt3otrC87XyolNjyJ7l+gOHcdhz86z bJtvZm+WOcxt1C9p4W+GqkvpbfbGIZO+fWFx3H2jZRps44RgFtwhP5RgAZa/GYYr h09yfdNTm6TFJDLfkI51jEMbznMFhMidoXmguPu3DftECROamc5eCzy0jZFfhDoy JFNpLtsp1Fr4s2QoHkSNTGWRjhKDLU9E+xDTAY4zd4K82vtFbva99Zpnt7U6flso zJpc3NDNVwNIrR177FoSTV/B4R6xEtA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:59 2025 by rpki-client