$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa File: 540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa (raw, json) Hash identifier: 5bi1/mEz1z6yEBYkljOLA2LhqUgQnZbSR4zWZAI+pw0= Subject key identifier: 4F:0A:E7:C1:56:87:DE:0F:FF:39:E7:B2:6E:1B:14:0F:E8:90:28:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8532331FBDF2656374DFE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:32:33:1f:bd:f2:65:63:74:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=7c6411a8-0d03-43e3-a642-43ea52f58c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:e9:59:55:5d:2b:0e:87:89:83:7e:8c:e0: f4:02:0e:55:38:20:de:34:9f:2f:52:3b:1c:40:87: 1c:01:03:88:d0:dd:ce:6a:c5:f8:fc:2c:18:1b:fa: ff:2a:c5:b2:88:68:d1:f2:96:d2:c3:39:67:e7:bf: 41:bc:25:7a:8d:6b:e8:49:06:7c:b7:ae:16:b7:9f: 5e:f9:bd:c6:3c:34:99:65:b6:db:3e:be:cd:6f:77: 50:14:db:b6:08:ec:89:2a:1b:68:22:6e:5e:37:4e: a8:27:c2:42:6b:98:ca:03:99:86:60:00:80:32:e0: 7f:af:2d:d7:dd:1b:af:5c:fb:d2:33:54:97:c1:7c: ef:f9:17:0e:0a:3f:6c:72:82:17:fe:6b:6e:3c:34: 02:bc:8b:1a:ec:56:e3:2c:54:50:f4:4f:91:50:0c: d7:f0:32:9c:8e:7d:77:80:b7:1d:ea:4c:f9:91:a1: ae:aa:82:1f:32:40:85:2d:f4:8f:0b:aa:cc:c9:07: e1:1d:8b:d3:01:93:c0:2c:0f:1e:5c:ca:95:a5:f9: 75:23:ec:40:26:a8:df:cb:fe:c7:00:19:bb:80:9f: 5e:99:08:26:c8:d9:a9:ac:16:76:88:a3:2e:bc:c4: 97:b7:93:f2:67:4e:ac:5f:1d:13:a5:61:c7:da:62: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0A:E7:C1:56:87:DE:0F:FF:39:E7:B2:6E:1B:14:0F:E8:90:28:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/540c9de6-ccf9-387c-9dc0-117d1911ac2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:30:05:5c:78:5c:c3:03:c8:dc:96:7d:4a:d3:fc:40:bd:e5: 80:14:64:54:08:1c:7f:d1:f4:b3:9a:a7:a8:79:36:18:50:bd: b4:9f:3f:89:fb:47:ae:5d:1b:ba:d8:ac:fb:b7:b9:5d:3b:4c: 1b:aa:b2:93:68:93:20:f0:0f:6a:2b:13:8b:81:c1:42:03:d2: 8c:00:24:02:e3:d4:3a:20:81:06:e6:e1:06:99:d3:ec:97:c4: a4:f3:82:04:19:24:0d:22:73:a4:03:6d:c9:e1:d2:4b:be:91: 40:83:c2:33:82:e1:23:1d:7e:7a:ab:2a:cc:bb:1b:7c:1f:7a: 25:4a:7c:e3:1c:99:1d:ac:9d:1d:6b:1c:83:de:7e:53:1f:ae: fe:93:d1:01:dd:1f:5d:34:70:80:02:e8:f4:60:d8:d0:bb:93: b0:b8:fd:23:20:95:d5:e6:fd:92:f3:cc:f4:39:6a:0f:6c:79: af:15:53:0b:43:e6:47:67:53:02:e0:99:17:45:c3:18:23:4e: cb:46:aa:c2:39:55:ad:c5:d0:fb:24:27:b0:91:59:eb:c4:67: 78:23:09:e9:85:79:59:9d:c1:59:44:40:43:2f:70:35:03:0d: 2e:4f:9c:8e:09:1e:aa:e6:cf:58:cf:14:61:7d:80:c9:51:78: 70:ed:95:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTIzH73yZWN03+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk N2M2NDExYTgtMGQwMy00M2UzLWE2NDItNDNlYTUyZjU4YzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowrpWVVdKw6HiYN+jOD0Ag5VOCDeNJ8vUjsc QIccAQOI0N3OasX4/CwYG/r/KsWyiGjR8pbSwzln579BvCV6jWvoSQZ8t64Wt59e +b3GPDSZZbbbPr7Nb3dQFNu2COyJKhtoIm5eN06oJ8JCa5jKA5mGYACAMuB/ry3X 3RuvXPvSM1SXwXzv+RcOCj9scoIX/mtuPDQCvIsa7FbjLFRQ9E+RUAzX8DKcjn13 gLcd6kz5kaGuqoIfMkCFLfSPC6rMyQfhHYvTAZPALA8eXMqVpfl1I+xAJqjfy/7H ABm7gJ9emQgmyNmprBZ2iKMuvMSXt5PyZ06sXx0TpWHH2mLf2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8K58FWh94P/znnsm4bFA/okCjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTQwYzlkZTYtY2NmOS0z ODdjLTlkYzAtMTE3ZDE5MTFhYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAwBVx4XMMDyNyWfUrT/EC95YAUZFQIHH/R9LOap6h5NhhQvbSfP4n7 R65dG7rYrPu3uV07TBuqspNokyDwD2orE4uBwUID0owAJALj1DoggQbm4QaZ0+yX xKTzggQZJA0ic6QDbcnh0ku+kUCDwjOC4SMdfnqrKsy7G3wfeiVKfOMcmR2snR1r HIPeflMfrv6T0QHdH100cIAC6PRg2NC7k7C4/SMgldXm/ZLzzPQ5ag9sea8VUwtD 5kdnUwLgmRdFwxgjTstGqsI5Va3F0PskJ7CRWevEZ3gjCemFeVmdwVlEQEMvcDUD DS5PnI4JHqrmz1jPFGF9gMlReHDtlR8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:57:31 2025 by rpki-client