$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa File: 8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa (raw, json) Hash identifier: paJNrn6aegB0/VrJcMEUaWZatBoGozdfld4dbldB1B4= Subject key identifier: 5A:F3:CC:69:2E:75:7F:54:11:F1:C8:7B:0D:B6:35:37:61:B2:00:56 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EEB50AE4B7BA83B77790E9C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 13335 IP address blocks: 172.70.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:0a:e4:b7:ba:83:b7:77:90:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=5bc09bef-8086-4b69-94a5-9951e84d56a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:8b:cc:a9:e1:d5:14:00:4a:01:a6:cc:1b: 7f:f6:4a:e8:ca:e9:3b:66:51:a7:f5:ec:60:81:c8: 89:96:42:3b:5b:8b:4e:e1:b5:63:e9:17:61:a7:4a: 1c:9f:15:d2:aa:d9:4a:fc:aa:9b:83:77:6a:6a:12: cf:37:22:84:f7:e3:3e:39:f2:aa:b3:ab:8c:34:5e: 42:04:b9:d1:50:86:06:42:53:eb:b7:52:6f:cd:2a: 76:a3:17:52:6d:a9:27:49:0b:73:83:7e:e5:ae:90: de:6a:a3:30:1d:b5:0a:75:2f:70:32:3b:7d:02:d5: d2:36:d2:10:fc:35:d5:4e:95:20:67:29:ca:95:fb: ef:1d:de:8d:a4:24:8e:2d:ba:c7:16:64:97:33:62: fa:cc:a6:46:dc:43:e8:bf:92:6f:c6:cf:82:f8:a5: 2a:da:17:74:40:62:c9:a5:dd:53:8e:4c:ac:b0:67: 6f:b9:b7:08:73:d8:08:14:7e:cc:4d:7b:10:8c:e1: 88:16:f9:76:a3:5b:1b:4a:bb:fc:20:f5:df:89:bf: 36:df:8d:54:47:6a:24:77:22:3c:0f:9a:0e:ac:ba: 0e:00:20:b3:e2:64:63:a6:2c:c9:67:c7:7b:a3:15: 37:44:2d:65:83:66:d1:b9:ae:8f:6b:b1:d7:ec:00: 3a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F3:CC:69:2E:75:7F:54:11:F1:C8:7B:0D:B6:35:37:61:B2:00:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8400bcb8-69f0-3aaf-9266-e93b38bf894a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:69:ae:2b:28:fb:2a:8d:2d:17:db:6a:57:98:cf:9d:c2:1d: 8c:03:75:27:63:4c:13:f4:6a:33:0f:c3:56:b9:9d:37:3b:f9: ff:43:f1:bc:87:f4:a6:8d:2c:e1:73:99:b1:59:17:63:7a:6e: 6d:76:63:50:1f:8b:82:34:a7:1b:e9:d8:c9:6a:68:25:90:42: 9e:56:3b:84:1f:d7:5d:c2:33:f4:c6:20:cb:44:36:4c:ff:ea: da:38:19:eb:0f:69:ea:24:a9:9b:75:c6:8d:b7:86:04:92:d3: 61:0a:40:12:20:6b:5b:2b:be:0c:9d:b3:fc:53:05:5d:df:53: 44:64:a4:37:ac:45:66:6e:3d:e4:22:75:2d:45:0b:e9:91:f2: 1d:04:80:17:73:4f:35:49:ae:b5:0e:5e:0f:5e:ed:8a:62:c1: 7b:1c:b5:66:13:cf:42:07:71:24:26:34:b4:7a:ad:47:9b:32: 91:79:70:90:aa:1f:5e:23:7f:82:10:39:8a:6b:c2:10:83:33: c0:35:a8:13:c6:25:d5:4a:ef:42:0d:49:99:4c:f6:d2:1f:9e: e2:23:56:b9:f4:0e:f6:9d:ca:35:99:21:6f:70:30:a9:ef:04: b0:40:3b:48:2e:fc:f1:b7:81:76:99:06:80:de:2b:3a:ac:1b: 29:3b:28:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQrkt7qDt3eQ6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk NWJjMDliZWYtODA4Ni00YjY5LTk0YTUtOTk1MWU4NGQ1NmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnOLzKnh1RQASgGmzBt/9kroyuk7ZlGn9exg gciJlkI7W4tO4bVj6Rdhp0ocnxXSqtlK/Kqbg3dqahLPNyKE9+M+OfKqs6uMNF5C BLnRUIYGQlPrt1JvzSp2oxdSbaknSQtzg37lrpDeaqMwHbUKdS9wMjt9AtXSNtIQ /DXVTpUgZynKlfvvHd6NpCSOLbrHFmSXM2L6zKZG3EPov5Jvxs+C+KUq2hd0QGLJ pd1TjkyssGdvubcIc9gIFH7MTXsQjOGIFvl2o1sbSrv8IPXfib82341UR2okdyI8 D5oOrLoOACCz4mRjpizJZ8d7oxU3RC1lg2bRua6Pa7HX7AA6ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrzzGkudX9UEfHIew22NTdhsgBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODQwMGJjYjgtNjlmMC0z YWFmLTkyNjYtZTkzYjM4YmY4OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlpriso+yqNLRfbaleYz53CHYwDdSdjTBP0ajMPw1a5nTc7+f9D8byH 9KaNLOFzmbFZF2N6bm12Y1Afi4I0pxvp2MlqaCWQQp5WO4Qf113CM/TGIMtENkz/ 6to4GesPaeokqZt1xo23hgSS02EKQBIga1srvgyds/xTBV3fU0RkpDesRWZuPeQi dS1FC+mR8h0EgBdzTzVJrrUOXg9e7YpiwXsctWYTz0IHcSQmNLR6rUebMpF5cJCq H14jf4IQOYprwhCDM8A1qBPGJdVK70INSZlM9tIfnuIjVrn0DvadyjWZIW9wMKnv BLBAO0gu/PG3gXaZBoDeKzqsGyk7KHw= -----END CERTIFICATE-----Generated at Fri Jun 6 17:02:14 2025 by rpki-client