$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa File: 797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa (raw, json) Hash identifier: /q8q4XFN4l5afMEqgKhZKQDSOl2y6IVzHfjR5gBtOMs= Subject key identifier: 14:2D:A7:17:4F:6E:6B:03:E8:89:B7:2C:59:64:D3:15:0E:8F:68:F8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA854815BC075C52C29EEB60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:48:15:bc:07:5c:52:c2:9e:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=d34ac672-80bd-4be3-9370-a669b51a9efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:84:e6:5a:f7:e1:32:87:d6:53:72:f2:2a:32: c0:26:5a:7d:11:78:27:f0:d7:27:bf:2e:39:df:a3: 73:25:29:83:45:39:4e:63:5d:e8:bf:67:fe:c5:f1: d6:b0:40:ff:27:7c:14:40:c7:5d:70:d3:23:81:10: 96:c8:74:f9:16:be:c6:c9:67:9a:2f:a2:6f:d8:b1: cb:8a:98:de:1d:5b:29:0d:34:62:44:da:f3:11:dd: 59:fc:e5:22:fc:44:dc:ab:a6:6b:d7:72:ca:f8:24: e5:52:96:ab:aa:72:9b:b2:98:cb:da:98:70:79:25: 09:db:83:b0:81:4f:d2:1a:84:99:35:50:ae:b2:c0: a7:49:66:83:bc:30:61:93:d8:24:2b:47:7b:da:33: 9a:84:52:91:14:dc:4e:0b:84:34:6e:11:28:ce:23: 60:68:98:ad:ca:f4:67:b7:9d:30:d4:5a:85:89:d8: a9:17:a4:61:08:69:9b:d8:c0:3f:1f:82:e5:59:e5: 5d:33:0f:3c:ee:d3:5c:f0:58:9c:ca:5a:20:fc:b6: ee:25:54:c8:23:2f:de:91:d6:eb:c5:e8:75:86:1e: 0f:a5:06:1a:a8:ab:b2:a1:b9:06:eb:22:15:05:62: 61:11:90:b2:42:56:0b:fb:25:dd:b7:19:1f:a6:14: ba:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2D:A7:17:4F:6E:6B:03:E8:89:B7:2C:59:64:D3:15:0E:8F:68:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/797dc0f9-8fa9-347e-ab47-5a2d9cdc8fb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:db:f2:c6:85:7d:ff:61:8a:0e:07:33:b9:9c:56:c4:46:8d: 0d:33:11:83:6d:fe:7a:59:4d:28:b0:fc:25:54:78:fa:ba:61: 19:c6:7e:94:bb:42:de:6f:65:46:ec:85:34:71:83:00:67:7b: 33:c1:3d:f1:61:b4:3f:bc:b3:bd:f9:93:d8:7f:98:94:47:93: 12:9f:a6:4b:a9:43:d4:35:be:7b:b9:bc:2f:2a:47:d5:02:f4: 47:f1:48:18:b6:31:f6:c0:4a:16:52:06:d3:ba:1a:51:a7:46: 1e:21:f2:89:1f:d1:23:6f:34:95:31:82:c7:4b:b5:c4:69:d2: 14:4f:9c:a5:4c:c3:17:d7:e4:77:71:43:03:2e:27:9b:70:38: 3e:f1:b8:4a:fa:13:0e:05:64:28:50:bb:51:e7:03:74:7e:70: b3:cb:49:c2:e7:de:46:78:f7:cc:d0:82:64:24:12:37:38:a4: b9:6d:9c:07:13:8b:71:c5:88:e0:c5:4e:4d:04:ea:03:7a:2f: dc:a3:d8:b7:e0:a5:2f:2b:56:02:3a:7d:72:ae:f3:dc:59:1c: 1b:bc:ab:f2:5c:61:a6:7c:84:5c:7a:b3:a7:b3:7d:34:29:c8: d3:79:93:51:ed:1e:f1:02:19:a1:e7:b6:91:0b:0d:c7:cd:78: b6:26:07:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUgVvAdcUsKe62AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDM0YWM2NzItODBiZC00YmUzLTkzNzAtYTY2OWI1MWE5ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYTmWvfhMofWU3LyKjLAJlp9EXgn8Ncnvy45 36NzJSmDRTlOY13ov2f+xfHWsED/J3wUQMddcNMjgRCWyHT5Fr7GyWeaL6Jv2LHL ipjeHVspDTRiRNrzEd1Z/OUi/ETcq6Zr13LK+CTlUparqnKbspjL2phweSUJ24Ow gU/SGoSZNVCussCnSWaDvDBhk9gkK0d72jOahFKRFNxOC4Q0bhEoziNgaJityvRn t50w1FqFidipF6RhCGmb2MA/H4LlWeVdMw887tNc8Ficylog/LbuJVTIIy/ekdbr xeh1hh4PpQYaqKuyobkG6yIVBWJhEZCyQlYL+yXdtxkfphS64wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQtpxdPbmsD6Im3LFlk0xUOj2j4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzk3ZGMwZjktOGZhOS0z NDdlLWFiNDctNWEyZDljZGM4ZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTb8saFff9hig4HM7mcVsRGjQ0zEYNt/npZTSiw/CVUePq6YRnGfpS7 Qt5vZUbshTRxgwBnezPBPfFhtD+8s735k9h/mJRHkxKfpkupQ9Q1vnu5vC8qR9UC 9EfxSBi2MfbAShZSBtO6GlGnRh4h8okf0SNvNJUxgsdLtcRp0hRPnKVMwxfX5Hdx QwMuJ5twOD7xuEr6Ew4FZChQu1HnA3R+cLPLScLn3kZ498zQgmQkEjc4pLltnAcT i3HFiODFTk0E6gN6L9yj2LfgpS8rVgI6fXKu89xZHBu8q/JcYaZ8hFx6s6ezfTQp yNN5k1HtHvECGaHntpELDcfNeLYmB80= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:45 2025 by rpki-client