$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa File: 6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa (raw, json) Hash identifier: kVvZ0QMeZziXEm9tMBax26vh7jDAXVWRyYhTrKaOSY0= Subject key identifier: 71:28:3C:64:30:C3:78:A3:A2:21:1A:90:1B:57:BB:E7:02:8C:A7:14 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA854B00C983AFE5F0D17180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:4b:00:c9:83:af:e5:f0:d1:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=4dea0ac4-1302-4dc7-ba89-2c33e2599fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9c:3c:d4:82:6d:5a:af:34:15:2f:4a:43:28: 56:86:aa:28:9a:de:cb:3d:64:53:02:07:ed:32:f3: 6b:f0:b1:e0:12:27:ec:ff:bf:93:e2:13:fc:cb:ad: d7:58:b8:f0:b0:2b:25:5e:5c:58:71:1c:90:d8:44: c8:82:8d:f2:b2:2a:b2:49:f0:b7:91:f9:7c:8f:08: 89:ca:2e:7f:36:c0:e3:e1:2d:8e:a4:40:c9:1e:61: 9e:df:0a:5e:82:ee:00:a7:eb:e7:33:08:50:70:0f: e6:0a:be:bc:dc:7c:a9:3c:69:1e:63:fe:10:cb:70: 9b:bb:3d:5b:71:b5:be:c6:ea:d7:80:b8:8d:15:07: 19:1c:7d:85:3e:51:13:aa:55:00:87:5b:18:26:55: a5:06:a7:12:83:70:7b:34:77:63:42:d6:bf:16:96: df:6c:79:5b:0b:c1:6c:5b:f4:64:bd:29:60:ae:0d: 7c:92:14:c0:a0:2e:a3:4f:47:6c:0e:62:64:d6:87: 59:be:7a:ed:65:b8:cf:f5:ab:76:07:44:69:d9:b2: d9:83:38:d3:bb:20:1f:d6:e9:07:3b:26:6f:ca:3e: 6d:2c:52:03:69:e7:ec:2f:4e:c0:be:b0:31:8b:56: e6:28:84:5a:bc:fc:05:c6:4b:d0:fc:a7:00:bd:d2: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:28:3C:64:30:C3:78:A3:A2:21:1A:90:1B:57:BB:E7:02:8C:A7:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:fd:4c:c1:34:ee:33:e2:52:76:86:5e:32:cc:88:e0:71:d9: f3:ce:e0:2c:a9:e6:7e:27:3c:c7:80:41:d6:4f:cf:53:4e:22: 80:95:a4:69:09:ec:74:6a:d6:67:d6:67:e8:96:ba:bf:a2:6e: 1a:07:cc:b8:0b:5a:be:fe:2d:5b:4b:c3:29:ea:2c:a8:34:60: 38:42:32:d0:2e:be:a0:4a:03:90:53:1d:09:50:95:98:07:83: 11:cc:cf:5d:c6:88:dd:3b:fd:82:c7:70:12:25:89:49:69:4d: 3e:79:f4:6c:52:d2:7e:0a:1d:c2:e7:e8:97:26:c6:c7:75:a9: 66:8f:a1:c0:78:79:4c:11:1a:6b:4f:c9:bd:a1:37:cc:44:2a: 98:22:87:12:ad:db:a1:a4:38:46:12:91:6a:92:e8:b9:66:3c: 50:56:72:ad:8f:2b:32:a8:09:cf:f0:20:cf:2d:3a:d7:6e:70: 16:12:09:a2:f2:ec:7c:ef:5a:39:da:17:4c:ed:55:99:77:b7: 2c:90:ec:55:97:2f:68:8e:5e:b7:a0:be:fe:cd:28:13:5a:bb: ad:56:c4:1d:9f:e7:95:76:4d:3b:4a:92:1f:84:e2:45:02:2a: cb:0d:e7:22:7b:4f:94:e9:11:b7:78:4f:7c:87:05:84:63:1a: 74:a0:6c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUsAyYOv5fDRcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NGRlYTBhYzQtMTMwMi00ZGM3LWJhODktMmMzM2UyNTk5ZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55w81IJtWq80FS9KQyhWhqoomt7LPWRTAgft MvNr8LHgEifs/7+T4hP8y63XWLjwsCslXlxYcRyQ2ETIgo3ysiqySfC3kfl8jwiJ yi5/NsDj4S2OpEDJHmGe3wpegu4Ap+vnMwhQcA/mCr683HypPGkeY/4Qy3Cbuz1b cbW+xurXgLiNFQcZHH2FPlETqlUAh1sYJlWlBqcSg3B7NHdjQta/FpbfbHlbC8Fs W/RkvSlgrg18khTAoC6jT0dsDmJk1odZvnrtZbjP9at2B0Rp2bLZgzjTuyAf1ukH OyZvyj5tLFIDaefsL07AvrAxi1bmKIRavPwFxkvQ/KcAvdIDjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEoPGQww3ijoiEakBtXu+cCjKcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmM5NjRmMTctZGQ5ZS0z MDVhLWI0YTMtZWZkOGU0M2QzYTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/9TME07jPiUnaGXjLMiOBx2fPO4Cyp5n4nPMeAQdZPz1NOIoCVpGkJ 7HRq1mfWZ+iWur+ibhoHzLgLWr7+LVtLwynqLKg0YDhCMtAuvqBKA5BTHQlQlZgH gxHMz13GiN07/YLHcBIliUlpTT559GxS0n4KHcLn6Jcmxsd1qWaPocB4eUwRGmtP yb2hN8xEKpgihxKt26GkOEYSkWqS6LlmPFBWcq2PKzKoCc/wIM8tOtducBYSCaLy 7HzvWjnaF0ztVZl3tyyQ7FWXL2iOXregvv7NKBNau61WxB2f55V2TTtKkh+E4kUC KssN5yJ7T5TpEbd4T3yHBYRjGnSgbKA= -----END CERTIFICATE-----Generated at Fri Jun 6 16:46:08 2025 by rpki-client