$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa File: 2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa (raw, json) Hash identifier: CN9xksbOBYk4N98EzuJmfL3BhZFlwnj6S/idFjYXBzU= Subject key identifier: 31:E3:20:7E:28:70:14:6C:1A:CB:06:89:0E:3C:88:EA:BC:D0:EA:A9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8547343E660E18A6C9A280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:47:34:3e:66:0e:18:a6:c9:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=42f11feb-ab43-498c-b885-5dd1daf4e2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2f:d6:61:bc:9d:83:0a:90:92:66:70:38:ad: ce:c1:b8:7f:54:04:55:ae:65:25:31:16:27:86:e3: ae:52:bc:00:84:ca:18:35:ac:2e:c2:2c:9d:1d:43: de:63:ca:4c:d2:b1:ef:d4:87:91:a3:7d:54:9d:a3: d1:28:ec:ad:37:84:87:02:7d:11:15:e3:c0:8c:93: b8:b8:55:2a:58:39:d9:72:00:c2:65:cc:ce:2e:1f: fb:6b:e7:30:77:7e:32:62:ce:b7:24:9b:80:fe:e0: df:eb:c0:84:07:dd:88:00:5c:f4:f0:45:57:c5:07: 8a:d9:59:c4:eb:26:fb:1c:be:ea:81:26:49:f0:2a: 3b:de:7f:98:52:60:ce:ba:08:65:70:64:0e:dc:13: 42:dc:6a:3e:77:1d:58:76:5e:b2:fd:83:39:40:39: fc:4e:1a:fd:95:27:83:c9:41:5c:b8:03:83:11:ca: e7:26:bc:b2:e5:20:f8:36:e6:b9:71:62:b8:c4:d5: 6f:8c:e2:72:dd:52:fa:2f:d5:c5:e9:d6:1b:64:09: c0:76:e8:1a:1d:21:48:d4:a9:bf:f7:4b:c7:d6:5c: 62:60:e5:f9:34:56:da:3c:56:09:09:c7:28:2e:64: 9c:97:11:6a:ea:ae:b9:6d:96:86:74:c6:d5:a4:47: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E3:20:7E:28:70:14:6C:1A:CB:06:89:0E:3C:88:EA:BC:D0:EA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2d572a85-d2e9-3c92-a7ea-9412eee9750b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6d:35:e4:83:98:ba:40:e8:ea:14:54:76:70:9c:e1:69:eb: 27:42:45:92:05:83:13:1c:bc:b6:ee:61:8d:5a:10:c6:8b:e4: 09:c7:8a:b4:63:2c:e1:68:13:9a:c3:2c:44:ec:b3:62:62:76: d2:d5:92:f8:79:ea:56:13:c6:80:0a:d2:bd:cd:8a:f6:6c:0f: ae:49:ea:46:eb:1f:f4:7e:68:4b:ab:71:eb:d7:fe:1c:3d:34: fe:e7:3f:03:c2:ae:f1:04:3f:f7:71:0f:f7:03:d8:eb:95:f3: 97:4e:4c:3f:92:6f:94:ef:2f:41:b2:31:d1:92:e7:19:c2:16: b5:cc:04:b4:ed:66:a9:69:e6:1d:90:04:0d:38:f8:ad:06:88: 93:3a:04:7a:65:29:e8:8a:f9:78:d1:57:7f:3c:65:6e:0e:c7: 96:43:55:bd:63:7e:a6:a4:a8:eb:fc:cf:b3:82:33:d7:6c:ba: 9e:62:9e:ff:4e:5e:b2:fa:22:f2:d1:c7:18:a9:3e:47:4f:14: 7d:89:07:cb:73:f6:d8:1d:37:21:b1:8b:64:55:d5:76:58:fc: a0:ce:a2:31:b0:35:0b:14:71:30:5a:fb:2e:4c:c5:09:0c:d6: 0c:84:ee:ac:de:a6:bb:e2:c6:6f:d5:af:9e:f5:75:30:f3:fc: 63:42:03:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUc0PmYOGKbJooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NDJmMTFmZWItYWI0My00OThjLWI4ODUtNWRkMWRhZjRlMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC/WYbydgwqQkmZwOK3Owbh/VARVrmUlMRYn huOuUrwAhMoYNawuwiydHUPeY8pM0rHv1IeRo31UnaPRKOytN4SHAn0RFePAjJO4 uFUqWDnZcgDCZczOLh/7a+cwd34yYs63JJuA/uDf68CEB92IAFz08EVXxQeK2VnE 6yb7HL7qgSZJ8Co73n+YUmDOughlcGQO3BNC3Go+dx1Ydl6y/YM5QDn8Thr9lSeD yUFcuAODEcrnJryy5SD4Nua5cWK4xNVvjOJy3VL6L9XF6dYbZAnAdugaHSFI1Km/ 90vH1lxiYOX5NFbaPFYJCccoLmSclxFq6q65bZaGdMbVpEebTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHjIH4ocBRsGssGiQ48iOq80OqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmQ1NzJhODUtZDJlOS0z YzkyLWE3ZWEtOTQxMmVlZTk3NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdtNeSDmLpA6OoUVHZwnOFp6ydCRZIFgxMcvLbuYY1aEMaL5AnHirRj LOFoE5rDLETss2JidtLVkvh56lYTxoAK0r3NivZsD65J6kbrH/R+aEurcevX/hw9 NP7nPwPCrvEEP/dxD/cD2OuV85dOTD+Sb5TvL0GyMdGS5xnCFrXMBLTtZqlp5h2Q BA04+K0GiJM6BHplKeiK+XjRV388ZW4Ox5ZDVb1jfqakqOv8z7OCM9dsup5inv9O XrL6IvLRxxipPkdPFH2JB8tz9tgdNyGxi2RV1XZY/KDOojGwNQsUcTBa+y5MxQkM 1gyE7qzeprvixm/Vr571dTDz/GNCA2Q= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:01 2025 by rpki-client