$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85d92fe7-e6e0-3987-ae01-d34c18f81325.roa File: 85d92fe7-e6e0-3987-ae01-d34c18f81325.roa (raw, json) Hash identifier: oQaK4PqSJyOdsG4Axmb9pW/jqXL+zdqjqGS+roeBldc= Subject key identifier: 39:56:F4:24:78:38:2A:CA:53:D1:42:13:4F:F7:09:D4:64:31:D6:16 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA92A981068CCA34013640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85d92fe7-e6e0-3987-ae01-d34c18f81325.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.64.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:92:a9:81:06:8c:ca:34:01:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=9a6146da-ebe0-4781-a9fc-00e60f49b111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:51:18:9a:78:d8:3c:2d:45:b2:3f:df:20:5d: ff:d7:21:dd:7a:62:fd:15:51:62:6d:08:bb:27:35: 56:1f:c0:cb:eb:bb:43:79:6a:e0:89:61:f9:56:17: 23:f3:2a:25:7b:c9:a4:be:8b:40:c8:e7:57:47:fc: 93:99:f3:3d:73:2f:03:0e:e3:eb:e3:bc:86:6d:f7: 6e:bf:76:b8:3e:db:e7:b1:48:12:27:65:21:83:3f: f3:81:fd:8c:12:06:30:f7:4f:30:08:ae:e3:30:9a: ad:05:93:25:9c:23:d4:27:6d:e3:7e:43:96:56:c0: ff:45:e9:59:5f:7a:e3:81:ca:b6:11:f5:9d:68:21: 4c:26:f9:ba:0a:60:a5:cf:f8:e1:58:b4:8c:5e:d1: ef:fc:b6:26:64:c6:3e:31:d4:0c:d7:a7:b3:fb:11: 18:6d:93:eb:4e:2b:dd:c3:ff:ef:a1:26:cb:13:60: 4c:b6:f5:7f:10:14:80:e9:fc:fb:6c:e3:3b:13:e8: 05:23:22:4f:8a:77:31:0b:57:72:26:6a:ea:7d:c1: 3f:e8:54:25:a5:5d:ab:e5:31:60:05:7a:49:22:f6: a2:72:ad:86:73:6d:0a:af:fe:53:a3:b9:64:92:df: 91:a2:04:11:c4:53:d5:3e:a7:dd:28:53:f9:16:df: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:56:F4:24:78:38:2A:CA:53:D1:42:13:4F:F7:09:D4:64:31:D6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85d92fe7-e6e0-3987-ae01-d34c18f81325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:09:21:a5:79:87:12:3d:bb:e4:70:fc:bf:0e:7a:db:a1:e8: 54:4a:6e:f0:e5:45:3e:92:0a:6f:97:46:11:ef:af:3c:b1:f3: 36:23:ea:6d:85:00:11:0e:de:75:2f:ac:a7:49:d1:33:02:85: 2a:ac:9f:27:4b:cd:c2:11:ac:17:3f:26:60:b3:fc:84:8b:24: 28:c9:00:a1:c0:21:fa:32:55:a8:dc:e2:f0:db:77:16:30:f6: 66:e8:7a:37:7a:cc:28:95:df:3c:4e:cf:9f:63:93:18:be:f5: f9:ee:59:f3:6c:60:91:28:87:6e:8b:99:2c:8f:10:b9:e5:bc: 16:28:ac:82:65:22:16:34:56:9d:6c:52:5d:ae:9c:28:ab:05: b2:b9:9a:b7:e1:75:f0:23:0c:3d:1f:cd:cb:f1:31:16:21:15: 63:6b:c8:e3:e5:66:33:82:e4:58:0e:d0:7f:95:75:51:bc:5e: 6f:b4:04:e3:23:00:f2:43:ba:12:a8:e4:bb:3d:df:c8:f6:e4: fc:94:a0:65:c7:46:de:95:c2:87:4a:46:27:a1:44:d6:95:fd: 86:15:b9:ac:47:0a:68:08:f7:b3:dc:27:be:84:0c:9f:94:92: ef:0b:fb:b8:b6:e7:c5:bd:15:c4:9f:7c:3c:61:0d:64:04:3c: 61:fc:d8:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupKpgQaMyjQBNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OWE2MTQ2ZGEtZWJlMC00NzgxLWE5ZmMtMDBlNjBmNDliMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVEYmnjYPC1Fsj/fIF3/1yHdemL9FVFibQi7 JzVWH8DL67tDeWrgiWH5Vhcj8yole8mkvotAyOdXR/yTmfM9cy8DDuPr47yGbfdu v3a4PtvnsUgSJ2Uhgz/zgf2MEgYw908wCK7jMJqtBZMlnCPUJ23jfkOWVsD/RelZ X3rjgcq2EfWdaCFMJvm6CmClz/jhWLSMXtHv/LYmZMY+MdQM16ez+xEYbZPrTivd w//voSbLE2BMtvV/EBSA6fz7bOM7E+gFIyJPincxC1dyJmrqfcE/6FQlpV2r5TFg BXpJIvaicq2Gc20Kr/5To7lkkt+RogQRxFPVPqfdKFP5Ft+OpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlW9CR4OCrKU9FCE0/3CdRkMdYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODVkOTJmZTctZTZlMC0z OTg3LWFlMDEtZDM0YzE4ZjgxMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkJIaV5hxI9u+Rw/L8Oetuh6FRKbvDlRT6SCm+XRhHvrzyx8zYj6m2F ABEO3nUvrKdJ0TMChSqsnydLzcIRrBc/JmCz/ISLJCjJAKHAIfoyVajc4vDbdxYw 9mboejd6zCiV3zxOz59jkxi+9fnuWfNsYJEoh26LmSyPELnlvBYorIJlIhY0Vp1s Ul2unCirBbK5mrfhdfAjDD0fzcvxMRYhFWNryOPlZjOC5FgO0H+VdVG8Xm+0BOMj APJDuhKo5Ls938j25PyUoGXHRt6VwodKRiehRNaV/YYVuaxHCmgI97PcJ76EDJ+U ku8L+7i258W9FcSffDxhDWQEPGH82Os= -----END CERTIFICATE-----Generated at Fri Jun 6 16:52:45 2025 by rpki-client