$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa File: 4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa (raw, json) Hash identifier: n+nRf5awpadSzoM9y07XDAd5QskPxu7nQdtPf3fCZ3o= Subject key identifier: A3:F4:6F:E8:2C:FD:63:B9:CD:3B:C8:0D:B0:74:DF:10:80:B6:9A:32 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA8BE46ECA54FACD90B800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.70.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:8b:e4:6e:ca:54:fa:cd:90:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=2e4aa4bd-e903-4345-9f3c-c238bf8f923c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e1:fe:7d:5a:87:47:7c:bb:70:5b:b5:ce:7d: 2a:60:c1:0c:fd:17:9c:dc:25:24:db:b4:ed:dd:da: 63:50:46:ec:f8:c4:9b:fc:bf:62:72:55:a4:b1:88: 8c:cb:c8:75:da:60:cf:02:8c:fd:2b:7d:fe:34:17: 88:71:9c:41:57:7e:1b:5f:14:a6:a1:40:50:df:72: 41:e8:a9:a2:d6:1e:0c:fb:6f:12:7f:d4:d8:a6:8d: 84:44:3f:e8:ba:7c:ab:d7:89:a0:01:c3:cc:1d:c0: 24:ec:21:19:80:24:61:13:1d:67:52:6e:9e:7b:aa: 24:d5:ad:bb:cb:86:e4:42:de:bd:1c:96:c5:b4:8f: 19:23:69:4f:88:12:39:70:7c:6e:05:7a:a3:17:50: dd:55:d8:48:7f:49:86:96:dc:25:d6:18:cd:72:78: 5b:f2:cf:92:33:a1:7a:ac:e3:8d:00:ac:a7:54:61: 69:b4:86:95:00:55:03:01:fe:78:2d:05:ea:98:13: 75:6f:8c:5f:5a:3e:05:ad:e6:1d:14:13:53:e4:7b: d8:1c:65:97:72:71:14:ae:28:a2:4b:72:46:91:51: a0:81:90:69:1e:21:1f:4f:69:aa:f6:91:4b:5f:8b: e6:05:69:78:3c:4b:44:55:06:ed:03:92:83:68:1e: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F4:6F:E8:2C:FD:63:B9:CD:3B:C8:0D:B0:74:DF:10:80:B6:9A:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:80:58:39:80:43:36:76:bb:cc:ce:5b:f6:26:1b:53:f3:c6: b9:1d:95:a1:f8:48:41:12:0f:6e:80:af:b1:ec:1b:f0:a4:47: 5d:ae:11:ef:0b:39:ab:10:93:23:13:68:39:bd:5c:62:d1:4e: 2b:85:65:10:ac:7d:d2:78:0a:c3:d0:ae:8d:d8:91:2b:51:b2: 0e:39:e2:80:b5:c2:bd:a7:e0:a3:57:ea:a5:3d:5d:ea:97:b3: 4e:c2:35:f1:26:82:fa:a9:93:4e:05:a6:a3:54:b9:85:27:6d: ff:8b:d9:67:a2:0a:79:88:7f:89:6f:55:45:11:16:6d:e4:64: 9a:07:ee:ad:23:35:e9:97:41:2d:67:ed:46:96:99:c6:92:1f: 5e:3c:3f:c6:41:39:ff:b7:a4:94:f0:c2:66:ca:79:35:9d:ac: cd:ee:4d:96:a9:4d:33:5b:d3:df:d1:8e:89:ef:87:39:fc:36: ff:ec:2e:f7:3b:a3:1b:0a:b6:00:04:2a:48:23:fc:9f:82:f2: bf:cf:93:21:05:cf:10:90:4c:1c:94:68:cb:a0:55:b3:79:c8: cc:50:62:f4:d9:11:b4:cf:0b:7c:c3:6a:33:d1:bb:1b:13:ce: 0f:c1:8b:fc:49:53:7a:36:3b:56:67:0c:7c:58:9c:ee:8a:b6: 7d:b0:5b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuovkbspU+s2QuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MmU0YWE0YmQtZTkwMy00MzQ1LTlmM2MtYzIzOGJmOGY5MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuH+fVqHR3y7cFu1zn0qYMEM/Rec3CUk27Tt 3dpjUEbs+MSb/L9iclWksYiMy8h12mDPAoz9K33+NBeIcZxBV34bXxSmoUBQ33JB 6Kmi1h4M+28Sf9TYpo2ERD/ounyr14mgAcPMHcAk7CEZgCRhEx1nUm6ee6ok1a27 y4bkQt69HJbFtI8ZI2lPiBI5cHxuBXqjF1DdVdhIf0mGltwl1hjNcnhb8s+SM6F6 rOONAKynVGFptIaVAFUDAf54LQXqmBN1b4xfWj4FreYdFBNT5HvYHGWXcnEUriii S3JGkVGggZBpHiEfT2mq9pFLX4vmBWl4PEtEVQbtA5KDaB6PpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP0b+gs/WO5zTvIDbB03xCAtpoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGYwYWFmNjctYWU4ZC0z MzVjLWEwYTUtZjAzODBhMjAxYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuAWDmAQzZ2u8zOW/YmG1PzxrkdlaH4SEESD26Ar7HsG/CkR12uEe8L OasQkyMTaDm9XGLRTiuFZRCsfdJ4CsPQro3YkStRsg454oC1wr2n4KNX6qU9XeqX s07CNfEmgvqpk04FpqNUuYUnbf+L2WeiCnmIf4lvVUURFm3kZJoH7q0jNemXQS1n 7UaWmcaSH148P8ZBOf+3pJTwwmbKeTWdrM3uTZapTTNb09/Rjonvhzn8Nv/sLvc7 oxsKtgAEKkgj/J+C8r/PkyEFzxCQTByUaMugVbN5yMxQYvTZEbTPC3zDajPRuxsT zg/Bi/xJU3o2O1ZnDHxYnO6Ktn2wW/g= -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:26 2025 by rpki-client