$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa File: 614204ac-6d1c-3957-aacf-46eaa6662605.roa (raw, json) Hash identifier: XYKfzoRaSAiLNdFKNzHwKdb8INh+wHlRaXaWSxKdXdk= Subject key identifier: B1:83:D1:9A:E7:B6:6C:99:43:15:A3:5E:13:73:D3:FE:96:A7:4F:5B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9461276545EABC0E6E60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.67.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:94:61:27:65:45:ea:bc:0e:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=2279bbc0-aed7-4b9b-a19c-a14700387984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f0:d6:3a:ad:14:eb:69:fa:38:29:c8:43:14: bf:39:31:73:68:63:44:d2:3d:24:04:4b:d7:c7:99: 3c:41:98:35:3a:1c:85:0d:49:31:75:f6:17:96:74: f7:29:d7:95:6b:6e:c8:e0:7c:43:ce:c2:48:76:c3: 4a:4f:82:de:63:2a:d8:f8:4f:e2:f5:f0:75:b0:ac: 43:f0:a9:ab:cc:df:f2:ed:da:b5:aa:29:f4:4f:c1: 01:6a:d7:1c:61:1d:22:df:ed:42:5f:5a:8d:9c:6e: 69:10:ee:3b:06:49:46:74:69:8c:ad:3d:ad:32:a0: 11:b6:f0:6e:68:36:2b:7e:9e:3b:14:7b:6f:22:09: 48:90:1c:7e:e9:40:db:41:69:dd:00:fa:f9:31:d4: 3e:c4:48:05:c9:47:83:ee:53:da:26:32:91:f1:b9: 21:c2:bf:08:3c:78:3b:20:c0:36:68:04:1f:d3:e0: 59:f0:72:b0:69:27:48:37:46:29:2e:11:e1:87:38: a9:9e:fc:b9:48:2b:f5:97:9a:d8:0a:f8:1f:91:b4: 13:36:a7:69:67:20:5a:dc:8e:b3:13:23:4e:09:e8: 84:87:7b:9a:79:96:f7:39:0b:a1:49:2b:41:46:d5: 63:30:35:d3:30:cd:84:8f:ab:56:66:15:7c:dd:33: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:D1:9A:E7:B6:6C:99:43:15:A3:5E:13:73:D3:FE:96:A7:4F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/614204ac-6d1c-3957-aacf-46eaa6662605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:6d:8b:9b:9f:aa:85:5e:06:ff:6a:de:78:cc:9d:14:04:e7: 3a:65:80:42:f0:5c:d5:c9:c7:fe:9f:58:76:bf:36:ea:7e:a5: 2a:d5:f6:ba:14:21:a8:a9:23:49:e1:27:8d:b4:41:ea:01:88: e2:e3:4d:b0:5d:8b:6d:23:63:9d:57:09:45:60:cd:f2:be:cb: 85:09:a9:78:47:ba:3c:98:61:bc:0e:22:d3:95:03:32:73:42: 45:2a:fc:83:1d:f4:2c:19:12:1c:d7:d8:d6:a9:40:7f:67:7c: d6:0f:5e:34:41:40:ce:b6:11:29:37:fa:13:b2:ed:c3:d3:c8: 40:a9:a7:34:84:e1:96:78:79:36:0f:30:86:0e:08:99:fb:3f: 8b:c0:22:c5:b6:06:fb:55:d7:6b:25:d9:e9:bd:27:a3:a5:f8: c9:e6:82:b8:d8:f2:b1:a0:d5:49:04:36:7d:79:5d:b3:dc:db: 35:c1:c2:7e:eb:b6:c5:53:86:32:d3:3e:97:0d:b9:f5:ac:be: fa:6e:81:ec:b6:ea:4d:4c:ee:83:f2:df:86:a2:e6:fc:74:f0: 6d:a7:c8:03:91:d7:4b:df:56:9a:ea:c0:45:b4:b5:aa:75:67: 61:84:d7:4a:79:17:55:a5:f8:7b:3c:56:81:2b:cf:04:ca:bd: 6c:f4:3a:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupRhJ2VF6rwObmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MjI3OWJiYzAtYWVkNy00YjliLWExOWMtYTE0NzAwMzg3OTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvDWOq0U62n6OCnIQxS/OTFzaGNE0j0kBEvX x5k8QZg1OhyFDUkxdfYXlnT3KdeVa27I4HxDzsJIdsNKT4LeYyrY+E/i9fB1sKxD 8KmrzN/y7dq1qin0T8EBatccYR0i3+1CX1qNnG5pEO47BklGdGmMrT2tMqARtvBu aDYrfp47FHtvIglIkBx+6UDbQWndAPr5MdQ+xEgFyUeD7lPaJjKR8bkhwr8IPHg7 IMA2aAQf0+BZ8HKwaSdIN0YpLhHhhzipnvy5SCv1l5rYCvgfkbQTNqdpZyBa3I6z EyNOCeiEh3uaeZb3OQuhSStBRtVjMDXTMM2Ej6tWZhV83TPrnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGD0ZrntmyZQxWjXhNz0/6Wp09bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjE0MjA0YWMtNmQxYy0z OTU3LWFhY2YtNDZlYWE2NjYyNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBti5ufqoVeBv9q3njMnRQE5zplgELwXNXJx/6fWHa/Nup+pSrV9roU IaipI0nhJ420QeoBiOLjTbBdi20jY51XCUVgzfK+y4UJqXhHujyYYbwOItOVAzJz QkUq/IMd9CwZEhzX2NapQH9nfNYPXjRBQM62ESk3+hOy7cPTyECppzSE4ZZ4eTYP MIYOCJn7P4vAIsW2BvtV12sl2em9J6Ol+MnmgrjY8rGg1UkENn15XbPc2zXBwn7r tsVThjLTPpcNufWsvvpugey26k1M7oPy34ai5vx08G2nyAOR10vfVprqwEW0tap1 Z2GE10p5F1Wl+Hs8VoErzwTKvWz0Oqo= -----END CERTIFICATE-----Generated at Sun Jun 8 19:19:41 2025 by rpki-client