$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/787e13ef-670b-3b46-a9b2-cff42b10266a.roa File: 787e13ef-670b-3b46-a9b2-cff42b10266a.roa (raw, json) Hash identifier: nNUeOVJ7BHok4GWxd3BnI3ABhz7911cTfqXifcnhlDU= Subject key identifier: 3E:B9:D7:46:76:0D:09:1A:E7:E7:B3:74:38:0A:96:0D:E4:B7:B1:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8546393C5A466ED94092C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/787e13ef-670b-3b46-a9b2-cff42b10266a.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:46:39:3c:5a:46:6e:d9:40:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=db698203-3323-46c2-a2a1-102f02e07d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f1:ad:ee:94:d7:9a:87:39:4c:16:5b:c9:c7: 37:d7:43:5c:86:0a:e3:0d:99:70:fc:e2:6f:00:77: 15:08:9d:be:9a:17:e4:88:43:a5:a5:da:d2:5e:f3: 52:36:d9:5d:ca:25:0d:40:5b:41:c7:fe:df:18:e0: 08:cc:a9:9e:3d:87:28:05:2c:f8:e4:dc:bc:79:7e: 59:14:f2:a5:de:9c:d6:c9:d7:b4:aa:1b:76:d1:e1: 4c:84:12:f5:57:78:6f:69:8a:58:38:5b:30:ae:09: 70:0e:ac:65:9d:0c:a0:bb:45:83:53:9a:f0:c7:e7: f6:a2:c6:d7:bc:36:41:81:25:6c:26:b9:17:a9:dd: 67:f1:01:26:6d:ce:d7:53:b5:ed:f5:1d:d4:4b:a7: 18:35:8b:8a:5e:39:a1:2c:46:b2:b1:f0:02:4a:82: ff:33:5a:0b:65:08:74:6f:e4:68:16:4f:5f:15:4f: de:e4:06:5a:25:8b:94:75:e5:29:b2:98:08:d6:3e: 1c:8f:74:45:cb:c9:35:2d:44:53:73:d7:cf:b0:b7: 2e:c3:18:e5:a0:e5:8c:cf:9b:7a:d7:3b:3e:f8:f3: 87:b7:93:3b:5b:b5:c2:41:d4:0b:b0:59:42:e0:4e: 7f:d8:28:1d:17:8e:b8:7b:5d:22:ff:d6:67:45:08: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B9:D7:46:76:0D:09:1A:E7:E7:B3:74:38:0A:96:0D:E4:B7:B1:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/787e13ef-670b-3b46-a9b2-cff42b10266a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:46:b7:c5:96:9b:3f:02:73:fc:7a:22:9d:1e:7e:b8:45:6b: 41:85:e2:36:d2:77:1d:95:39:77:93:d2:94:27:6f:c7:00:a6: 52:e8:e4:b2:6c:da:64:a2:d5:06:e4:e4:69:c8:10:3b:cd:e0: 2e:63:56:d6:d8:e5:af:62:89:3d:9b:e0:f4:f4:2b:73:ef:3c: 55:0d:37:46:dd:ad:fb:87:2c:ea:08:f2:6b:8c:f6:b6:2d:e4: 02:5f:db:18:48:73:bc:4d:15:7a:5b:2e:fd:b1:46:57:5f:83: 58:c1:2c:53:0b:e3:01:dc:cf:46:38:11:85:79:77:2b:a4:51: f9:35:f9:b5:5b:8b:19:7a:22:72:cd:bd:5c:73:76:e1:8f:25: 16:64:e8:f1:43:d9:02:59:39:5b:27:82:97:c1:83:f4:b3:b2: a4:8b:45:93:4b:aa:82:2b:4e:3a:f1:09:1b:3c:1a:8b:68:03: e8:56:9c:9c:a4:82:ce:c3:e7:9e:36:e9:f7:9e:ff:4b:29:bf: f6:4d:dd:31:ad:90:5e:5e:24:1c:7a:5c:e6:0e:4a:c2:56:f9: 75:0f:28:5d:b7:0d:c1:55:08:35:8e:b3:59:64:bb:d6:0c:a4: f3:ed:a6:01:4f:6f:93:c5:36:07:26:85:f7:27:ec:54:c6:64: 1a:e1:7f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUY5PFpGbtlAksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZGI2OTgyMDMtMzMyMy00NmMyLWEyYTEtMTAyZjAyZTA3ZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvGt7pTXmoc5TBZbycc310NchgrjDZlw/OJv AHcVCJ2+mhfkiEOlpdrSXvNSNtldyiUNQFtBx/7fGOAIzKmePYcoBSz45Ny8eX5Z FPKl3pzWyde0qht20eFMhBL1V3hvaYpYOFswrglwDqxlnQygu0WDU5rwx+f2osbX vDZBgSVsJrkXqd1n8QEmbc7XU7Xt9R3US6cYNYuKXjmhLEaysfACSoL/M1oLZQh0 b+RoFk9fFU/e5AZaJYuUdeUpspgI1j4cj3RFy8k1LURTc9fPsLcuwxjloOWMz5t6 1zs++POHt5M7W7XCQdQLsFlC4E5/2CgdF464e10i/9ZnRQjXZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6510Z2DQka5+ezdDgKlg3kt7GxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzg3ZTEzZWYtNjcwYi0z YjQ2LWE5YjItY2ZmNDJiMTAyNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtGt8WWmz8Cc/x6Ip0efrhFa0GF4jbSdx2VOXeT0pQnb8cAplLo5LJs 2mSi1Qbk5GnIEDvN4C5jVtbY5a9iiT2b4PT0K3PvPFUNN0bdrfuHLOoI8muM9rYt 5AJf2xhIc7xNFXpbLv2xRldfg1jBLFML4wHcz0Y4EYV5dyukUfk1+bVbixl6InLN vVxzduGPJRZk6PFD2QJZOVsngpfBg/SzsqSLRZNLqoIrTjrxCRs8GotoA+hWnJyk gs7D55426fee/0spv/ZN3TGtkF5eJBx6XOYOSsJW+XUPKF23DcFVCDWOs1lku9YM pPPtpgFPb5PFNgcmhfcn7FTGZBrhf7g= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:01 2025 by rpki-client