$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfe4e9a-6cd5-3d0f-b181-762aa566f354.roa File: 5bfe4e9a-6cd5-3d0f-b181-762aa566f354.roa (raw, json) Hash identifier: HZ2zJgDphEiqjo74rRUT+muC1FPtwc1Jn0DfvyuBYLE= Subject key identifier: B6:37:D9:5B:FA:16:AB:6C:B8:BD:79:29:CE:7D:6D:94:4E:DE:F9:70 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8548071D9D2386E3A11B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfe4e9a-6cd5-3d0f-b181-762aa566f354.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:48:07:1d:9d:23:86:e3:a1:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=ffd1c949-b8a0-467b-b782-b60dca111733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:c1:0a:c0:40:b1:f9:5b:44:01:64:e9:1a: 18:ad:fa:43:df:32:1b:30:e2:0f:1c:0a:27:c3:60: 50:15:2b:62:8b:1f:8e:b2:15:66:11:b5:71:89:ed: 34:39:fe:28:e9:78:4f:92:a6:aa:24:c1:73:ba:0e: d0:c0:78:54:c9:a7:d6:e3:c1:3c:f5:bf:bd:c8:a1: 39:73:09:9c:87:1b:01:74:c2:c7:38:ff:00:06:b0: 97:e1:6b:c3:4c:03:5e:4a:21:e0:e8:6d:6e:f8:c3: a9:14:6f:11:74:30:81:81:dc:8c:93:7e:e1:04:86: 0e:9a:8c:d5:1f:fe:50:cb:dd:f8:38:45:84:8e:84: ed:e2:3b:0a:8b:f4:e2:b6:e5:11:67:a0:38:e9:d3: 26:83:56:3a:8e:55:a0:5a:9c:40:57:81:66:be:80: c3:3f:de:eb:a6:64:ed:ec:54:b6:67:c5:8c:d3:f2: 74:f3:37:dc:d4:e6:94:34:f0:f4:4c:82:8b:52:22: c5:bf:5f:14:c7:21:ca:9d:36:71:43:35:3d:ac:15: f4:59:95:dc:92:17:42:2f:36:84:e2:5f:36:22:26: 2a:e2:76:24:62:a9:70:4c:1a:44:f4:9b:58:23:e0: 60:60:b3:6f:18:aa:7b:bc:29:f1:f3:74:43:53:1d: b6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:37:D9:5B:FA:16:AB:6C:B8:BD:79:29:CE:7D:6D:94:4E:DE:F9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfe4e9a-6cd5-3d0f-b181-762aa566f354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:4e:32:b6:b8:88:64:cd:5d:f8:b3:89:4c:4a:92:3a:8b:de: d0:6b:1d:dc:18:25:9d:80:eb:49:f4:d2:56:37:c6:5c:77:5b: 95:53:9f:17:4e:30:27:65:d0:b4:28:c1:b0:33:de:5f:30:4c: 93:01:2f:38:c9:b4:bb:19:7e:73:ee:33:f4:5b:eb:61:88:77: f8:27:b4:fe:ca:34:6b:81:fd:b3:4b:f5:29:a0:96:f5:1a:f5: 95:1c:d1:f0:53:6c:c3:c7:81:c5:2a:94:7a:a0:70:7f:91:a8: 93:8a:f7:08:6e:74:87:c7:9b:56:e2:31:74:e6:d7:9c:c5:fb: d2:55:00:91:0f:1c:b9:dd:bc:2f:70:77:90:80:13:b7:a3:0b: 69:8b:19:0d:ec:c0:40:40:f0:a6:94:10:5d:c1:5a:73:21:68: fb:4b:b3:06:85:17:a9:f4:ea:d8:6e:09:22:4e:e4:24:30:d8: 51:f9:4b:44:d1:e5:cd:c9:6e:1d:c9:df:64:fe:09:d9:47:8b: 40:f5:7e:70:6e:db:5b:73:86:e9:0e:78:7b:f5:ed:9f:91:17: 33:73:4b:0e:4d:16:fe:64:98:12:cc:52:8e:c3:69:b2:7d:5d: f3:55:9b:9a:50:96:91:58:20:36:e2:26:52:04:65:eb:55:89: 49:d9:78:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUgHHZ0jhuOhG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZmZkMWM5NDktYjhhMC00NjdiLWI3ODItYjYwZGNhMTExNzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE7BCsBAsflbRAFk6RoYrfpD3zIbMOIPHAon w2BQFStiix+OshVmEbVxie00Of4o6XhPkqaqJMFzug7QwHhUyafW48E89b+9yKE5 cwmchxsBdMLHOP8ABrCX4WvDTANeSiHg6G1u+MOpFG8RdDCBgdyMk37hBIYOmozV H/5Qy934OEWEjoTt4jsKi/TituURZ6A46dMmg1Y6jlWgWpxAV4FmvoDDP97rpmTt 7FS2Z8WM0/J08zfc1OaUNPD0TIKLUiLFv18UxyHKnTZxQzU9rBX0WZXckhdCLzaE 4l82IiYq4nYkYqlwTBpE9JtYI+BgYLNvGKp7vCnx83RDUx22kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY32Vv6FqtsuL15Kc59bZRO3vlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJmZTRlOWEtNmNkNS0z ZDBmLWIxODEtNzYyYWE1NjZmMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9OMra4iGTNXfiziUxKkjqL3tBrHdwYJZ2A60n00lY3xlx3W5VTnxdO MCdl0LQowbAz3l8wTJMBLzjJtLsZfnPuM/Rb62GId/gntP7KNGuB/bNL9SmglvUa 9ZUc0fBTbMPHgcUqlHqgcH+RqJOK9whudIfHm1biMXTm15zF+9JVAJEPHLndvC9w d5CAE7ejC2mLGQ3swEBA8KaUEF3BWnMhaPtLswaFF6n06thuCSJO5CQw2FH5S0TR 5c3Jbh3J32T+CdlHi0D1fnBu21tzhukOeHv17Z+RFzNzSw5NFv5kmBLMUo7DabJ9 XfNVm5pQlpFYIDbiJlIEZetViUnZeBs= -----END CERTIFICATE-----Generated at Fri Jun 6 16:48:04 2025 by rpki-client