$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa File: 4702aa40-4077-3e55-a44b-27f1cb8e885d.roa (raw, json) Hash identifier: SYJcWmecGOkbcoyUhFQU7y3MT+4p9JFIpqyHZVqn2O8= Subject key identifier: BF:97:D8:C8:3D:4B:85:B4:88:73:F4:9A:26:BA:8D:D5:70:F7:26:7B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F715341C4F07699AE08E1474 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 132892 IP address blocks: 172.70.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:34:1c:4f:07:69:9a:e0:8e:14:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=5912db9e-f9be-4bb2-a44d-b72db4dc256e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7d:34:0d:07:b5:3e:08:b8:56:46:96:f7:14: 40:5a:a3:f7:0f:d7:87:84:69:f0:09:0d:b0:5d:c2: 07:dd:8b:28:5e:97:91:45:1a:cc:26:53:d5:e0:20: 1f:db:c7:55:55:1d:bb:db:62:15:2f:77:28:ba:8a: 2b:f3:b9:58:3a:45:8b:a3:de:66:a4:8a:7c:60:a0: bc:16:96:15:81:17:8a:47:11:d4:53:e9:71:5a:94: b6:31:bf:5c:cb:27:c3:58:95:d5:d2:0b:eb:64:f0: ff:50:6d:f3:ed:f3:d9:67:12:21:d3:40:a8:62:f7: f0:af:f3:2f:d1:5c:34:78:c9:13:5a:b6:f1:d4:41: a9:7e:3f:13:b4:ee:4b:88:33:f8:00:5a:1a:98:93: e1:f2:ac:53:3a:40:b2:7d:c8:4f:17:6e:9c:c0:b8: 9c:c0:df:d9:d9:28:f5:53:cd:90:70:70:ea:ef:4f: 71:66:f4:74:7c:3e:6a:0b:2a:1f:7c:8c:18:3d:c4: 7c:32:c6:48:2b:2c:2b:d4:79:24:1c:69:0e:1b:5c: cf:1f:e5:85:92:70:59:1c:2e:6d:c5:35:a0:63:f0: f6:ba:2a:87:46:33:75:c7:41:26:32:b9:2d:65:11: 73:d4:6b:7d:55:94:15:00:3b:04:6c:fd:7b:54:06: 62:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:97:D8:C8:3D:4B:85:B4:88:73:F4:9A:26:BA:8D:D5:70:F7:26:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a9:4e:d5:a5:bb:aa:00:86:c3:33:5a:79:6c:d9:d1:2d:e4: 82:03:e5:70:24:be:aa:a0:c7:76:06:6c:4d:55:72:07:94:43: 98:55:79:42:8d:20:5a:b0:7d:2d:06:33:7e:47:a3:70:e5:14: 2f:9c:43:8c:d1:01:78:04:66:6d:1f:a9:ab:0a:04:c9:66:86: 2a:7e:fe:ed:e8:06:7a:46:02:51:89:ca:50:81:08:c7:42:8c: 0d:a4:92:39:cb:1a:1a:4d:02:82:ac:0e:7d:0c:38:79:6a:49: 1d:de:6f:2b:58:0c:b0:39:69:fb:9b:fb:b4:d5:19:dd:e6:c5: e6:d9:bb:88:6b:e7:9e:99:3c:a8:d8:e7:09:74:21:b1:a7:77: 51:aa:c4:14:c1:f4:38:3a:53:f4:30:22:2b:47:24:55:cb:e7: ab:53:bd:4b:18:e2:6c:05:3c:7c:94:30:94:46:3f:9b:b5:82: 95:d1:9e:f8:de:61:5c:4c:0a:3c:15:dc:5e:b5:8f:a6:4d:3b: b6:d2:86:b8:a1:31:82:66:6e:53:42:cf:62:2a:08:fc:b1:26: f2:94:ed:e7:07:8f:8b:34:42:aa:2e:a2:6c:88:46:aa:b1:5b: 03:67:c8:45:2a:eb:4d:fe:9c:90:17:61:83:cc:96:91:56:4a: 1e:83:f3:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FTQcTwdpmuCOFHQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NTkxMmRiOWUtZjliZS00YmIyLWE0NGQtYjcyZGI0ZGMyNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X00DQe1Pgi4VkaW9xRAWqP3D9eHhGnwCQ2w XcIH3YsoXpeRRRrMJlPV4CAf28dVVR2722IVL3couoor87lYOkWLo95mpIp8YKC8 FpYVgReKRxHUU+lxWpS2Mb9cyyfDWJXV0gvrZPD/UG3z7fPZZxIh00CoYvfwr/Mv 0Vw0eMkTWrbx1EGpfj8TtO5LiDP4AFoamJPh8qxTOkCyfchPF26cwLicwN/Z2Sj1 U82QcHDq709xZvR0fD5qCyoffIwYPcR8MsZIKywr1HkkHGkOG1zPH+WFknBZHC5t xTWgY/D2uiqHRjN1x0EmMrktZRFz1Gt9VZQVADsEbP17VAZiyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+X2Mg9S4W0iHP0mia6jdVw9yZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDcwMmFhNDAtNDA3Ny0z ZTU1LWE0NGItMjdmMWNiOGU4ODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrEZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOpTtWlu6oAhsMzWnls2dEt5IID5XAkvqqgx3YGbE1VcgeUQ5hVeUKN IFqwfS0GM35Ho3DlFC+cQ4zRAXgEZm0fqasKBMlmhip+/u3oBnpGAlGJylCBCMdC jA2kkjnLGhpNAoKsDn0MOHlqSR3ebytYDLA5afub+7TVGd3mxebZu4hr556ZPKjY 5wl0IbGnd1GqxBTB9Dg6U/QwIitHJFXL56tTvUsY4mwFPHyUMJRGP5u1gpXRnvje YVxMCjwV3F61j6ZNO7bShrihMYJmblNCz2IqCPyxJvKU7ecHj4s0QqouomyIRqqx WwNnyEUq603+nJAXYYPMlpFWSh6D87I= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:10 2025 by rpki-client