$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa File: 86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa (raw, json) Hash identifier: jxB6RmoeK9XyW0PiXhUw1o/0ZVFOoKFLZvc+agEJSj4= Subject key identifier: E6:BC:61:A3:89:AB:F3:17:9F:4F:2A:56:89:78:37:6E:D6:AF:B4:F3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A96222D98F99677DE00C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:96:22:2d:98:f9:96:77:de:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=5bf741e8-bbe5-4213-96a0-407574acc56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:f8:c6:42:11:8b:c8:23:72:f5:5b:a4:81: b3:11:0c:d1:6b:af:23:94:e2:d0:64:82:21:a9:6f: 3f:75:bf:1f:9b:cc:4e:c5:08:38:71:30:ec:80:9d: ec:f7:7d:82:e3:13:f7:5f:cf:01:f3:1c:e6:24:11: b2:ce:a9:f8:a6:fa:33:21:43:0a:d2:49:c9:cc:94: cd:a7:08:21:c3:ba:d3:a7:ba:df:89:0f:e4:18:7e: eb:e7:63:65:a1:c5:a3:94:43:2f:59:cd:ba:2d:07: e9:2b:df:bd:20:4d:e7:8b:5b:04:f4:d2:3f:16:5c: 06:28:8b:18:06:45:c6:15:cf:33:97:20:09:c2:ff: 4a:2f:58:c3:be:6a:4a:d0:5d:0f:6d:8f:1b:e8:48: 21:84:88:9a:3c:90:b0:8e:d9:57:ad:9a:b4:ee:03: 66:0c:6e:b3:a3:73:e1:36:e3:9f:07:23:9f:e0:2f: 1a:9e:91:a2:3e:25:47:4d:44:51:62:49:8b:5a:cd: 3f:63:34:19:65:89:1b:61:81:fa:33:dd:a6:98:36: d7:c6:d2:18:d4:f1:07:49:aa:98:b8:97:1d:ec:fa: 4e:f0:74:2e:e8:d2:ed:8a:34:17:3c:be:d7:8b:e6: 66:2d:3d:c9:92:e8:32:8c:de:c2:54:31:aa:a2:ca: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BC:61:A3:89:AB:F3:17:9F:4F:2A:56:89:78:37:6E:D6:AF:B4:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86f9b11a-4004-373f-9ca7-6b36b0ad8258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1a:77:96:20:06:40:72:e2:6c:30:ad:a1:cc:ea:f6:77:73: f2:10:36:36:6a:0c:59:48:ee:1e:0a:be:1b:90:c4:d9:2a:3d: 35:19:df:82:b3:60:0e:54:05:ac:82:ea:d2:d2:74:d5:2d:0f: a9:c9:e1:6c:42:d8:64:f8:64:11:d8:75:c5:58:09:b4:79:85: d5:e6:84:d5:e5:a2:a5:75:55:b6:15:36:8d:11:d0:34:18:5f: 34:50:a0:f9:fb:77:33:8a:92:be:10:d7:78:ff:22:68:c7:a8: dd:44:85:51:69:36:18:e8:be:8f:c5:7d:b6:d0:91:03:19:df: db:bb:04:ce:bb:8e:fb:a3:34:aa:dc:65:1a:a5:07:4e:23:a5: a6:7b:d4:43:b4:0d:2b:74:63:74:06:a3:64:25:8b:da:3a:34: 6c:fb:c3:c4:d6:8b:51:bf:ad:be:41:e9:b7:00:4d:ab:c5:a6: 2d:ea:eb:29:c1:a3:8f:8f:dc:00:ea:b1:04:8b:62:9a:1b:b2: 57:6e:21:11:93:f2:21:91:da:75:eb:e6:d6:2b:43:ee:31:7f: 93:ac:7a:82:08:2b:f3:f8:fe:46:5f:c6:0a:11:e1:1b:c5:cd: 32:49:ca:04:de:2d:5e:d7:c2:8c:7e:53:fd:95:dc:f1:3a:5c: 1c:34:1f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpYiLZj5lnfeAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NWJmNzQxZTgtYmJlNS00MjEzLTk2YTAtNDA3NTc0YWNjNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXv4xkIRi8gjcvVbpIGzEQzRa68jlOLQZIIh qW8/db8fm8xOxQg4cTDsgJ3s932C4xP3X88B8xzmJBGyzqn4pvozIUMK0knJzJTN pwghw7rTp7rfiQ/kGH7r52NlocWjlEMvWc26LQfpK9+9IE3ni1sE9NI/FlwGKIsY BkXGFc8zlyAJwv9KL1jDvmpK0F0PbY8b6EghhIiaPJCwjtlXrZq07gNmDG6zo3Ph NuOfByOf4C8anpGiPiVHTURRYkmLWs0/YzQZZYkbYYH6M92mmDbXxtIY1PEHSaqY uJcd7PpO8HQu6NLtijQXPL7Xi+ZmLT3JkugyjN7CVDGqosqzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa8YaOJq/MXn08qVol4N27Wr7TzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODZmOWIxMWEtNDAwNC0z NzNmLTljYTctNmIzNmIwYWQ4MjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoad5YgBkBy4mwwraHM6vZ3c/IQNjZqDFlI7h4KvhuQxNkqPTUZ34Kz YA5UBayC6tLSdNUtD6nJ4WxC2GT4ZBHYdcVYCbR5hdXmhNXloqV1VbYVNo0R0DQY XzRQoPn7dzOKkr4Q13j/ImjHqN1EhVFpNhjovo/FfbbQkQMZ39u7BM67jvujNKrc ZRqlB04jpaZ71EO0DSt0Y3QGo2Qli9o6NGz7w8TWi1G/rb5B6bcATavFpi3q6ynB o4+P3ADqsQSLYpobslduIRGT8iGR2nXr5tYrQ+4xf5OseoIIK/P4/kZfxgoR4RvF zTJJygTeLV7Xwox+U/2V3PE6XBw0H9M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:09 2025 by rpki-client