$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/776a2b4b-403e-31ea-a6b8-ce646382e3fc.roa File: 776a2b4b-403e-31ea-a6b8-ce646382e3fc.roa (raw, json) Hash identifier: B8sam+zJTYze0OwvzD8XS5pqD5zJkphipYoD4XQJSLQ= Subject key identifier: 51:E3:25:B2:34:C2:34:AD:20:2A:21:76:96:2C:C2:B0:80:1E:73:DF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9EB60DF39BB7F24B6EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/776a2b4b-403e-31ea-a6b8-ce646382e3fc.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.66.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:9e:b6:0d:f3:9b:b7:f2:4b:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=34b48463-ceca-4bfc-b005-c32ea822d824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:58:50:2b:82:cd:2d:2c:51:98:02:63:16: be:4d:eb:f2:6c:0f:59:9e:c2:52:10:ce:cd:28:26: 01:41:36:eb:85:cb:95:b7:a2:1b:8a:d2:36:bb:9f: 8d:ef:67:61:a6:df:34:aa:65:d7:c9:cb:67:f8:13: 37:61:a0:62:2a:ba:5f:c8:c9:e6:d5:d6:9f:6a:20: 1d:d4:4c:17:a0:24:30:88:ac:2a:cc:f2:df:48:41: 87:2d:9d:13:dd:bf:b1:13:24:33:6f:a6:e7:72:53: 8e:4d:96:e9:07:43:c3:95:05:0a:24:f6:1f:01:2f: 0b:14:35:b8:69:07:5b:d0:17:71:5e:c0:a6:39:43: 50:31:fd:08:f7:3d:dc:4a:5d:ef:de:43:38:13:83: c2:ae:90:6b:9c:cf:41:3a:de:0f:78:59:1c:52:c1: 7a:35:e6:1a:30:8e:06:72:35:1e:e9:4a:aa:73:c9: 8c:8b:b3:6a:b4:3b:0f:23:7f:b6:6f:6d:5c:43:b3: 7d:f9:05:46:4b:85:41:29:6c:fc:c1:a4:bf:42:5f: 47:24:c0:79:e2:dc:b1:9b:4a:46:e4:53:ca:99:c4: e4:0b:05:26:d7:e4:84:f8:ef:a9:31:8d:05:ff:63: 24:ce:c1:6a:b0:06:b1:2e:b2:67:b6:71:89:6c:2b: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:25:B2:34:C2:34:AD:20:2A:21:76:96:2C:C2:B0:80:1E:73:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/776a2b4b-403e-31ea-a6b8-ce646382e3fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:e0:0a:52:97:b0:d0:35:ce:2c:31:da:f6:9e:82:65:db:16: e1:36:86:fe:1d:a4:e5:32:50:d5:42:25:52:16:79:b4:65:f5: 65:ca:2b:36:4f:1d:ce:5c:0e:0c:11:91:24:02:86:12:4b:e4: 20:bc:dc:4c:44:be:1a:15:1d:b5:f2:09:f2:85:64:85:3d:67: b2:11:55:b3:26:76:c5:fa:33:26:20:d4:eb:c9:fd:8d:fc:aa: 7b:7b:e2:0b:e8:a0:39:e0:fb:60:6c:9b:38:0a:6f:f7:22:20: d8:e1:74:eb:ad:fc:f3:6e:56:b4:bc:e9:a2:32:ef:a2:66:e7: 06:91:0f:f9:66:4f:f1:ac:e8:49:be:be:08:4b:9b:3f:1d:da: 4a:44:09:a2:34:75:74:0c:28:44:b9:06:56:b3:eb:aa:d3:47: 31:3f:e9:a2:8f:e8:f5:83:98:22:c3:a2:7a:40:7f:df:e3:41: 9a:e1:42:6e:08:82:fc:82:d5:44:53:c3:63:03:87:00:af:95: f6:e9:7f:4d:ba:1d:1d:4b:3a:a4:96:ef:f8:c8:59:bb:f9:eb: c4:c7:0f:be:e7:a1:c5:a5:95:26:32:ab:81:83:4e:1e:21:5f: 6e:88:da:09:35:6d:cd:a8:c5:0d:16:68:27:9c:65:aa:e8:37: 67:41:14:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnup62DfObt/JLbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MzRiNDg0NjMtY2VjYS00YmZjLWIwMDUtYzMyZWE4MjJkODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4NYUCuCzS0sUZgCYxa+TevybA9ZnsJSEM7N KCYBQTbrhcuVt6IbitI2u5+N72dhpt80qmXXyctn+BM3YaBiKrpfyMnm1dafaiAd 1EwXoCQwiKwqzPLfSEGHLZ0T3b+xEyQzb6bnclOOTZbpB0PDlQUKJPYfAS8LFDW4 aQdb0BdxXsCmOUNQMf0I9z3cSl3v3kM4E4PCrpBrnM9BOt4PeFkcUsF6NeYaMI4G cjUe6Uqqc8mMi7NqtDsPI3+2b21cQ7N9+QVGS4VBKWz8waS/Ql9HJMB54tyxm0pG 5FPKmcTkCwUm1+SE+O+pMY0F/2MkzsFqsAaxLrJntnGJbCtffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHjJbI0wjStICohdpYswrCAHnPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzc2YTJiNGItNDAzZS0z MWVhLWE2YjgtY2U2NDYzODJlM2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrEIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDgClKXsNA1ziwx2vaegmXbFuE2hv4dpOUyUNVCJVIWebRl9WXKKzZP Hc5cDgwRkSQChhJL5CC83ExEvhoVHbXyCfKFZIU9Z7IRVbMmdsX6MyYg1OvJ/Y38 qnt74gvooDng+2BsmzgKb/ciINjhdOut/PNuVrS86aIy76Jm5waRD/lmT/Gs6Em+ vghLmz8d2kpECaI0dXQMKES5Blaz66rTRzE/6aKP6PWDmCLDonpAf9/jQZrhQm4I gvyC1URTw2MDhwCvlfbpf026HR1LOqSW7/jIWbv568THD77nocWllSYyq4GDTh4h X26I2gk1bc2oxQ0WaCecZaroN2dBFCM= -----END CERTIFICATE-----Generated at Sun Jun 8 17:26:39 2025 by rpki-client