$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa File: 5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa (raw, json) Hash identifier: QonvspQh0oEjjHVtHi2hw+Dn2aECoPF2Flj6RUZdl/w= Subject key identifier: 64:86:9A:7D:CE:45:EE:A9:46:0F:7C:64:6C:4D:94:58:AA:5B:ED:35 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8546179EE16F9DB14505C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:46:17:9e:e1:6f:9d:b1:45:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=87b6b255-998b-4335-adaf-8de174a7a942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:dc:66:11:c2:fe:46:83:f6:76:ad:41:e0: 5f:ce:94:b2:42:c1:e7:a7:dd:c4:fb:06:8b:6a:7c: 8c:f0:67:e2:35:ad:25:be:5c:64:59:a5:ca:7e:de: 4b:fa:56:8a:66:b9:34:bf:cf:ca:04:0b:06:42:44: 38:2e:d3:46:55:23:0e:ab:6e:1d:6e:07:a4:d7:89: 07:7f:2f:a5:c5:72:34:fc:0b:00:08:b9:b7:ec:31: 58:f0:7c:08:49:7e:5c:4d:c3:d5:6a:f9:1c:36:2b: c8:a0:19:3d:95:5f:26:f9:28:b6:a4:6b:81:d1:6c: 4e:a8:39:9e:88:91:64:6b:02:70:b1:56:8b:b0:bc: 3e:2c:25:a4:fb:32:0b:36:d2:11:01:a6:76:07:ef: 94:db:f7:24:07:a9:61:4e:d1:0c:01:36:b1:b4:65: cf:91:64:b8:ae:4c:04:8f:ae:e4:43:57:e9:97:cc: fb:45:e8:8f:0c:39:b4:23:38:c7:fd:f7:19:17:65: 19:ab:42:4f:44:0e:4e:cb:fb:f3:f1:f5:d6:87:02: 1d:77:0b:d6:d6:df:5c:72:1d:ac:3c:ac:83:ef:2c: ec:f7:29:e6:da:c4:05:60:8d:d4:94:c9:b7:73:30: f7:3c:09:98:b7:15:d3:06:a6:3a:cd:d0:a8:6b:50: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:86:9A:7D:CE:45:EE:A9:46:0F:7C:64:6C:4D:94:58:AA:5B:ED:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5130b2fb-8c38-345e-856b-12dd5ca7a4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ac:7c:29:b8:df:07:6c:23:50:f9:d1:46:b8:45:25:18:fb: 1e:04:de:da:fa:cc:cd:86:87:5e:1f:95:f5:1c:4a:20:94:5e: 85:87:f3:42:7c:22:1c:9c:05:9d:58:b7:77:02:61:4e:76:92: 65:72:7e:6b:5b:8f:dd:6f:58:b6:d3:b5:97:fc:c2:c3:5f:83: 6c:aa:57:73:48:96:78:14:5b:15:9d:e5:65:8c:71:8d:83:46: 58:23:d9:f9:45:2b:c6:8b:d5:bb:79:bd:ee:78:80:6e:88:be: 8f:ae:cd:ca:9a:5c:dc:bb:67:47:2b:a8:78:03:b0:72:53:59: d3:7a:09:e7:da:f2:9b:c9:da:40:5b:a7:8d:25:d3:fc:d3:1e: fb:cd:23:10:ec:63:7f:a3:d6:f6:3f:0e:2f:ba:3c:ae:70:dd: a5:9b:54:04:c0:a7:4c:9f:ef:19:6b:e0:e4:d6:fc:0d:ed:87: 9f:5a:13:72:56:3e:16:0b:ad:bf:5d:e9:aa:d6:96:27:ca:2c: 06:73:3e:08:31:66:bb:2f:70:c1:e9:30:9f:31:19:5a:c7:f6: 02:09:a0:04:3d:2d:1e:35:d5:43:79:43:3d:7f:a8:80:ad:cc: 02:de:12:58:29:e3:f0:04:da:11:22:ab:2f:7f:70:d3:04:7c: 11:4c:22:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUYXnuFvnbFFBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ODdiNmIyNTUtOTk4Yi00MzM1LWFkYWYtOGRlMTc0YTdhOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywncZhHC/kaD9natQeBfzpSyQsHnp93E+waL anyM8GfiNa0lvlxkWaXKft5L+laKZrk0v8/KBAsGQkQ4LtNGVSMOq24dbgek14kH fy+lxXI0/AsACLm37DFY8HwISX5cTcPVavkcNivIoBk9lV8m+Si2pGuB0WxOqDme iJFkawJwsVaLsLw+LCWk+zILNtIRAaZ2B++U2/ckB6lhTtEMATaxtGXPkWS4rkwE j67kQ1fpl8z7ReiPDDm0IzjH/fcZF2UZq0JPRA5Oy/vz8fXWhwIddwvW1t9cch2s PKyD7yzs9ynm2sQFYI3UlMm3czD3PAmYtxXTBqY6zdCoa1CELQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSGmn3ORe6pRg98ZGxNlFiqW+01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTEzMGIyZmItOGMzOC0z NDVlLTg1NmItMTJkZDVjYTdhNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2sfCm43wdsI1D50Ua4RSUY+x4E3tr6zM2Gh14flfUcSiCUXoWH80J8 IhycBZ1Yt3cCYU52kmVyfmtbj91vWLbTtZf8wsNfg2yqV3NIlngUWxWd5WWMcY2D Rlgj2flFK8aL1bt5ve54gG6Ivo+uzcqaXNy7Z0crqHgDsHJTWdN6Cefa8pvJ2kBb p40l0/zTHvvNIxDsY3+j1vY/Di+6PK5w3aWbVATAp0yf7xlr4OTW/A3th59aE3JW PhYLrb9d6arWlifKLAZzPggxZrsvcMHpMJ8xGVrH9gIJoAQ9LR411UN5Qz1/qICt zALeElgp4/AE2hEiqy9/cNMEfBFMIoU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:36:22 2025 by rpki-client