$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78682fb8-444e-3bcc-92fd-5c188484d002.roa File: 78682fb8-444e-3bcc-92fd-5c188484d002.roa (raw, json) Hash identifier: w6GWNGrb/yC5H8GjhiAEQQQZW66svR84rtsnD02R91Y= Subject key identifier: CB:16:68:C3:DA:60:E1:EA:F9:92:57:86:85:27:B0:46:DA:5C:37:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E654FCBC1CCA5C2200837680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78682fb8-444e-3bcc-92fd-5c188484d002.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.70.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:fc:bc:1c:ca:5c:22:00:83:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=24d1951e-38ef-4ea0-a7fd-3bf0b0a788f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:fd:99:ee:73:bd:35:f9:97:95:6a:e2:b9: 2e:0e:f8:fd:09:cc:78:c8:25:4c:74:7d:56:4e:b8: bf:8a:b1:b0:eb:7f:6e:d9:c0:dc:af:22:5d:3b:f2: 18:08:34:dd:54:52:a5:88:77:dd:c2:99:b9:c8:12: 51:c4:05:1d:1f:56:80:34:e0:5f:9e:8f:b4:45:d5: c9:f3:56:2d:c6:25:e5:c0:b3:5c:6f:dc:91:14:fb: 2a:18:7e:4a:d0:21:4d:dc:0b:12:80:7f:9c:cd:a5: 06:e9:4e:a4:5b:94:32:da:04:49:d8:6e:4e:58:18: 2f:ed:e0:cf:5d:03:cb:0c:6b:e0:ac:38:ba:4f:46: 9e:cc:9c:15:d9:df:e0:16:f2:db:53:09:16:d5:73: bb:f6:2c:56:64:19:a9:9d:c2:4d:93:f8:2d:13:4e: a3:a1:b0:85:99:6e:92:32:f6:50:d4:1a:c6:76:2e: ab:47:b4:b6:8c:a2:25:69:a9:06:f2:0a:3a:0a:9f: a4:49:82:d2:8c:93:24:da:95:cf:6d:bb:c4:56:6a: c5:42:fc:9c:b2:e8:da:b3:6c:79:25:55:46:21:06: 8c:59:b1:a0:49:8f:c2:7a:24:5d:12:27:6e:90:77: 1d:76:93:ce:8b:77:b1:ac:fe:f8:9c:a9:2a:27:60: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:16:68:C3:DA:60:E1:EA:F9:92:57:86:85:27:B0:46:DA:5C:37:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78682fb8-444e-3bcc-92fd-5c188484d002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:de:b4:03:3d:7a:6f:20:11:a3:e8:e6:53:49:7a:73:a3:2d: 3b:14:76:7f:7e:a9:0b:76:c0:06:0f:3a:59:97:77:04:bf:f9: 10:49:fd:21:12:34:83:c0:fd:60:c4:6c:24:26:c0:e4:a2:a0: d1:4e:c7:ab:23:5a:21:09:e0:b6:79:1b:23:2d:f8:c3:3b:42: 4b:c4:8e:be:af:fb:19:71:79:a7:d4:1f:c8:73:c5:40:e6:de: 76:5d:e1:6b:67:a1:89:7e:55:b2:54:de:c7:87:70:33:e2:14: 3a:91:2e:e5:0a:c3:22:a7:92:3a:22:77:9e:3f:f7:56:f7:87: 8b:45:88:97:99:e2:f5:a5:b7:1f:cb:e5:c7:44:2b:46:5b:6e: 1b:11:04:68:d5:7e:5c:f6:c2:da:69:30:80:95:d2:20:0c:ee: 18:43:97:9f:ac:83:8f:3d:e1:a8:c5:fb:fc:93:05:7f:dd:e2: dd:19:dd:c6:5c:ec:f4:dd:3e:8d:61:03:4e:40:d7:73:c1:ef: 57:a5:d6:b2:ff:25:a4:80:61:03:86:f5:a1:02:4c:f2:13:f9: 37:ca:a9:c8:d7:fd:f1:7b:de:0b:3d:a3:ee:e7:c2:b0:69:6d: b6:ff:c0:30:0f:a9:2a:4a:8f:03:a4:2c:9c:86:51:cb:8b:d3: a4:e0:0d:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPy8HMpcIgCDdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MjRkMTk1MWUtMzhlZi00ZWEwLWE3ZmQtM2JmMGIwYTc4OGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Sr9me5zvTX5l5Vq4rkuDvj9Ccx4yCVMdH1W Tri/irGw639u2cDcryJdO/IYCDTdVFKliHfdwpm5yBJRxAUdH1aANOBfno+0RdXJ 81YtxiXlwLNcb9yRFPsqGH5K0CFN3AsSgH+czaUG6U6kW5Qy2gRJ2G5OWBgv7eDP XQPLDGvgrDi6T0aezJwV2d/gFvLbUwkW1XO79ixWZBmpncJNk/gtE06jobCFmW6S MvZQ1BrGdi6rR7S2jKIlaakG8go6Cp+kSYLSjJMk2pXPbbvEVmrFQvycsujas2x5 JVVGIQaMWbGgSY/CeiRdEidukHcddpPOi3exrP74nKkqJ2AILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsWaMPaYOHq+ZJXhoUnsEbaXDcJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzg2ODJmYjgtNDQ0ZS0z YmNjLTkyZmQtNWMxODg0ODRkMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILetAM9em8gEaPo5lNJenOjLTsUdn9+qQt2wAYPOlmXdwS/+RBJ/SES NIPA/WDEbCQmwOSioNFOx6sjWiEJ4LZ5GyMt+MM7QkvEjr6v+xlxeafUH8hzxUDm 3nZd4WtnoYl+VbJU3seHcDPiFDqRLuUKwyKnkjoid54/91b3h4tFiJeZ4vWltx/L 5cdEK0ZbbhsRBGjVflz2wtppMICV0iAM7hhDl5+sg4894ajF+/yTBX/d4t0Z3cZc 7PTdPo1hA05A13PB71el1rL/JaSAYQOG9aECTPIT+TfKqcjX/fF73gs9o+7nwrBp bbb/wDAPqSpKjwOkLJyGUcuL06TgDao= -----END CERTIFICATE-----Generated at Sun Jun 8 23:27:19 2025 by rpki-client