$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b647698-dc3b-37e0-bc14-db79221b9f0c.roa File: 6b647698-dc3b-37e0-bc14-db79221b9f0c.roa (raw, json) Hash identifier: HKsXKtZsfGnaWihqGYqPmIkn+kS472aXCmndhDIz+Bg= Subject key identifier: 74:C7:5C:48:D1:90:0D:C2:F3:01:C1:93:6C:69:58:DB:2C:77:7A:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A96DE4C54801588228F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b647698-dc3b-37e0-bc14-db79221b9f0c.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:96:de:4c:54:80:15:88:22:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=6d64744e-dbc9-483d-b3cd-4fe1cb9eccb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:c4:61:b8:3a:45:93:79:53:dc:1e:02:88: 33:ae:d0:44:5f:fc:c0:fd:be:09:8c:90:82:95:a1: cd:4e:54:d5:5f:df:c2:7f:0b:24:22:91:3c:2d:8c: d7:e5:e1:0b:21:79:76:9a:10:d6:61:be:71:a3:de: 49:3d:07:6a:bc:b3:82:bc:06:9d:07:93:aa:e8:90: 6b:a4:e4:06:64:c6:c6:7e:f6:4e:e2:8e:56:43:08: 13:91:7e:ae:3f:ad:51:61:7d:af:22:f4:a9:33:77: 8d:89:e3:45:d1:a2:87:f2:d2:3d:2b:16:e0:eb:c4: bb:97:35:cf:1b:dc:19:8f:9b:ac:45:e1:99:fc:ad: ca:6c:4a:20:48:05:32:b1:ea:f0:f5:4f:88:d1:0f: b7:5b:7e:76:20:53:49:35:81:f9:10:59:38:f1:63: 49:05:e4:61:f6:8f:4b:09:90:dd:03:f6:41:40:02: 6b:65:68:e3:ad:03:eb:4c:66:15:ca:c0:44:7c:b9: c7:89:00:a1:4b:46:0b:8f:39:f6:c7:aa:8b:85:76: 8a:88:6e:a4:1d:76:f2:67:9d:a1:51:d9:9a:5b:40: 61:7b:1c:81:86:0b:b4:85:ae:78:06:a5:0a:09:92: 4c:7d:4e:b0:02:80:ed:81:3b:5d:26:72:27:79:e5: bb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C7:5C:48:D1:90:0D:C2:F3:01:C1:93:6C:69:58:DB:2C:77:7A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b647698-dc3b-37e0-bc14-db79221b9f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:21:64:96:be:d0:ba:35:40:48:ad:20:b0:3d:e5:43:7d:30: 60:c8:b9:1f:94:8a:fa:13:de:27:ba:bd:7c:a4:09:ed:4b:27: 14:50:2e:71:91:76:a6:a7:14:10:78:fa:3f:65:46:46:68:a6: 49:85:14:2e:98:bd:76:3c:3d:cf:93:7c:e4:87:85:c8:42:5d: 8a:5c:a6:c5:b1:d7:97:e8:43:25:3e:33:00:1a:fd:91:58:d4: 00:bc:61:31:41:aa:b1:04:e4:97:bc:34:c7:80:dc:a5:09:27: a5:e5:ea:bd:fb:66:c4:ef:03:1c:45:57:4a:fa:7e:f1:38:cd: c2:01:5c:45:d4:b9:25:43:11:94:60:12:53:3c:37:d3:6c:96: f4:a6:67:3c:bc:80:f7:ea:c8:e8:e1:a5:96:04:75:99:2e:36: 9a:18:7c:8c:1f:a7:f6:2f:e2:8f:09:d4:55:b3:82:e4:3c:90: 0c:8d:25:66:93:f2:f0:d7:f5:fe:0b:58:d9:7e:bf:f8:85:d3: b6:9a:97:7d:a0:97:ac:21:83:0c:77:ce:fd:37:cb:6b:1d:c9: 64:07:05:5c:08:a5:0c:96:bc:f6:eb:58:69:46:6a:1f:d9:23: 7d:47:05:8a:67:2d:e0:e6:d2:fd:cb:a9:de:10:0d:ff:53:13: e7:60:b7:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpbeTFSAFYgijwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NmQ2NDc0NGUtZGJjOS00ODNkLWIzY2QtNGZlMWNiOWVjY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMDEYbg6RZN5U9weAogzrtBEX/zA/b4JjJCC laHNTlTVX9/CfwskIpE8LYzX5eELIXl2mhDWYb5xo95JPQdqvLOCvAadB5Oq6JBr pOQGZMbGfvZO4o5WQwgTkX6uP61RYX2vIvSpM3eNieNF0aKH8tI9Kxbg68S7lzXP G9wZj5usReGZ/K3KbEogSAUyserw9U+I0Q+3W352IFNJNYH5EFk48WNJBeRh9o9L CZDdA/ZBQAJrZWjjrQPrTGYVysBEfLnHiQChS0YLjzn2x6qLhXaKiG6kHXbyZ52h UdmaW0BhexyBhgu0ha54BqUKCZJMfU6wAoDtgTtdJnIneeW7uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTHXEjRkA3C8wHBk2xpWNssd3q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmI2NDc2OTgtZGMzYi0z N2UwLWJjMTQtZGI3OTIyMWI5ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABshZJa+0Lo1QEitILA95UN9MGDIuR+UivoT3ie6vXykCe1LJxRQLnGR dqanFBB4+j9lRkZopkmFFC6YvXY8Pc+TfOSHhchCXYpcpsWx15foQyU+MwAa/ZFY 1AC8YTFBqrEE5Je8NMeA3KUJJ6Xl6r37ZsTvAxxFV0r6fvE4zcIBXEXUuSVDEZRg ElM8N9NslvSmZzy8gPfqyOjhpZYEdZkuNpoYfIwfp/Yv4o8J1FWzguQ8kAyNJWaT 8vDX9f4LWNl+v/iF07aal32gl6whgwx3zv03y2sdyWQHBVwIpQyWvPbrWGlGah/Z I31HBYpnLeDm0v3Lqd4QDf9TE+dgt6g= -----END CERTIFICATE-----Generated at Thu Jun 5 18:32:57 2025 by rpki-client