$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d8297d4-2dda-3b3b-a4ae-f16bb8fc068e.roa File: 6d8297d4-2dda-3b3b-a4ae-f16bb8fc068e.roa (raw, json) Hash identifier: rkY8qJ4KWp9yefBnzfOgyYCM0xSrO6d0rbLZPbq/vKo= Subject key identifier: 62:49:48:A3:CB:D5:3A:81:8F:3E:81:13:D2:D6:EA:A3:30:2F:6F:0F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550E3B7A83F92A855AC680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d8297d4-2dda-3b3b-a4ae-f16bb8fc068e.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.69.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0e:3b:7a:83:f9:2a:85:5a:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=890b2df7-fd32-46f3-b0a9-b9dcaee2c60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:11:ed:5a:15:a8:56:69:c8:64:14:13:cc:e1: 1e:c8:b8:b6:8b:f6:47:4c:ad:0b:1e:29:fd:3e:a7: ce:f2:e8:aa:75:c9:e7:e1:b3:5a:e6:77:13:47:18: e3:ba:de:41:69:43:c1:b6:7f:7e:5b:27:75:98:d0: 9b:0c:f0:26:15:84:6a:bf:a2:67:87:46:c9:85:a5: 8e:d3:2c:59:c9:87:db:a9:4c:f7:b6:b6:21:55:9c: ef:c3:54:cb:d7:83:65:1d:2b:c1:62:a2:49:2e:3a: cb:b5:9f:f0:5a:f0:bc:8b:50:f5:6b:84:b6:09:6b: c3:e3:1e:bb:3a:06:7e:8f:0e:c4:46:da:84:b7:55: f8:e2:11:b1:34:27:34:62:46:f1:e6:13:92:b8:df: 2a:c0:e7:e8:d1:38:e6:7d:e2:28:7d:9d:6a:17:f1: 40:36:ed:a5:3c:e6:8c:9a:0c:f6:b2:ff:a0:84:09: 47:77:2a:d1:bc:f3:9b:c5:3f:f6:55:0b:b2:cf:58: ca:a8:c8:6e:a5:da:87:b8:38:a7:fb:ee:be:47:26: 76:e8:aa:54:52:dd:ce:0a:83:d0:2b:37:a0:bb:67: eb:30:83:f8:12:94:0e:4d:3d:19:cc:2e:dd:7d:90: c1:32:f6:5e:16:d1:8f:b7:c6:f7:d9:f8:38:6e:d5: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:49:48:A3:CB:D5:3A:81:8F:3E:81:13:D2:D6:EA:A3:30:2F:6F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6d8297d4-2dda-3b3b-a4ae-f16bb8fc068e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:80:2f:0e:21:34:53:09:fc:cb:db:a2:20:03:22:d6:2c:ab: 41:10:05:55:35:15:1d:24:9f:3c:11:41:7b:04:a6:94:a8:78: d4:80:aa:08:eb:1c:75:c8:75:39:20:7d:57:fa:3a:b1:8b:17: ff:7f:35:5e:0a:55:63:d4:e0:08:34:e9:13:7b:0c:c8:24:d2: 6a:73:9c:1e:83:ac:94:a8:c7:88:ce:3e:b9:d5:a9:96:6c:e8: 50:7b:ea:9e:80:b6:13:56:e6:3c:24:47:bb:f2:70:4a:b7:4a: fb:13:05:bb:6d:41:88:1f:70:a7:48:d4:db:9d:0c:58:83:58: 88:a4:d6:da:2a:cd:7b:1d:e4:df:25:30:ed:d4:63:e7:75:8e: d3:d2:9d:0b:63:09:a3:f7:78:a5:d3:f6:ec:6c:22:fa:a4:01: a1:e3:f4:d8:b1:92:a0:75:84:5b:5c:30:20:60:2f:80:67:31: c9:af:95:6b:9d:cb:0c:bf:e6:34:57:0c:a0:1e:8b:80:c2:a6: f8:15:50:e5:78:18:2e:61:8b:ae:60:0b:25:08:10:47:5b:91: 34:c3:9d:8b:da:3c:2a:ce:2c:44:54:d0:32:95:e4:bf:db:8b: 4e:59:65:01:64:95:da:05:63:d4:fd:90:db:5d:88:d3:ae:00: 12:df:d8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQ47eoP5KoVaxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk ODkwYjJkZjctZmQzMi00NmYzLWIwYTktYjlkY2FlZTJjNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBHtWhWoVmnIZBQTzOEeyLi2i/ZHTK0LHin9 PqfO8uiqdcnn4bNa5ncTRxjjut5BaUPBtn9+Wyd1mNCbDPAmFYRqv6Jnh0bJhaWO 0yxZyYfbqUz3trYhVZzvw1TL14NlHSvBYqJJLjrLtZ/wWvC8i1D1a4S2CWvD4x67 OgZ+jw7ERtqEt1X44hGxNCc0Ykbx5hOSuN8qwOfo0TjmfeIofZ1qF/FANu2lPOaM mgz2sv+ghAlHdyrRvPObxT/2VQuyz1jKqMhupdqHuDin++6+RyZ26KpUUt3OCoPQ Kzegu2frMIP4EpQOTT0ZzC7dfZDBMvZeFtGPt8b32fg4btWb5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJJSKPL1TqBjz6BE9LW6qMwL28PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmQ4Mjk3ZDQtMmRkYS0z YjNiLWE0YWUtZjE2YmI4ZmMwNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGALw4hNFMJ/MvboiADItYsq0EQBVU1FR0knzwRQXsEppSoeNSAqgjr HHXIdTkgfVf6OrGLF/9/NV4KVWPU4Ag06RN7DMgk0mpznB6DrJSox4jOPrnVqZZs 6FB76p6AthNW5jwkR7vycEq3SvsTBbttQYgfcKdI1NudDFiDWIik1toqzXsd5N8l MO3UY+d1jtPSnQtjCaP3eKXT9uxsIvqkAaHj9NixkqB1hFtcMCBgL4BnMcmvlWud ywy/5jRXDKAei4DCpvgVUOV4GC5hi65gCyUIEEdbkTTDnYvaPCrOLERU0DKV5L/b i05ZZQFkldoFY9T9kNtdiNOuABLf2Is= -----END CERTIFICATE-----Generated at Thu Jun 5 18:37:35 2025 by rpki-client