$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8acdbfbc-1b71-3a17-998c-b1728d8a5a1d.roa File: 8acdbfbc-1b71-3a17-998c-b1728d8a5a1d.roa (raw, json) Hash identifier: FCusP8RAi8LKavZWMLLd6YibK9BWNcW5LtJ69KI37nU= Subject key identifier: 01:BD:0B:E7:EC:B5:3A:E0:E0:F2:B5:20:E0:37:AF:6B:D5:5F:B9:C2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8533DC29DF9129E021E780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8acdbfbc-1b71-3a17-998c-b1728d8a5a1d.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:33:dc:29:df:91:29:e0:21:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=3c8966e3-c99b-4517-a73d-a34bf034d639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:91:35:9c:86:3c:eb:05:f4:47:2d:09:27:11: cd:57:36:d5:67:ed:84:fc:42:b9:3d:86:02:26:72: c9:5b:fa:4f:45:37:5c:75:bb:16:ce:06:d9:5e:a9: 93:ba:ad:cc:eb:ee:ac:bc:41:37:1c:12:e6:2f:a6: 31:69:87:92:28:69:2c:af:d2:e7:8a:43:fa:ba:fc: 11:7c:dc:b0:3e:50:a3:6a:d2:e1:eb:61:b3:20:9f: ba:19:bd:f6:3e:d3:c3:33:a7:19:e1:34:ac:59:6f: 09:d4:ae:33:6e:92:02:c0:ed:85:90:7f:2c:54:bb: 41:94:2a:a3:23:65:9e:6a:24:fe:01:00:89:59:44: c7:2d:fe:6a:1f:67:ea:46:5a:35:57:31:d0:3d:3a: 4b:db:06:35:26:dd:11:46:cc:4c:2f:f4:13:79:77: 15:e8:ce:10:fe:15:41:ec:ed:10:b1:d0:46:29:5a: e3:7b:13:cb:41:16:97:ff:21:38:f0:a3:0f:4e:13: f9:92:88:70:7b:27:32:c6:25:f6:a4:42:f8:ad:11: 14:bf:eb:2d:0a:f7:f1:0f:82:ed:d5:13:a4:0d:d9: 32:67:86:d9:88:74:75:f1:87:33:01:cb:b5:67:8a: c6:9c:0d:90:f0:45:eb:5e:98:67:2a:1c:87:10:97: f9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BD:0B:E7:EC:B5:3A:E0:E0:F2:B5:20:E0:37:AF:6B:D5:5F:B9:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8acdbfbc-1b71-3a17-998c-b1728d8a5a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a9:86:ed:f0:e0:79:34:05:2f:a9:1c:a7:8f:6d:d5:bd:7a: d6:79:b6:d6:51:59:1d:0e:58:7f:26:32:05:36:21:e4:ca:71: 24:e9:47:e5:f2:48:53:1f:59:39:19:6a:a6:fb:a3:7b:d6:df: ad:2f:82:21:6e:8c:a0:7a:5f:03:56:91:59:0d:c8:49:a6:2d: a5:9b:12:19:ea:7a:45:ba:ac:dc:40:92:18:29:3c:a9:f9:1b: a1:b8:da:09:4d:44:3a:e5:48:4e:9f:4f:02:e9:a6:5b:bf:b2: d8:ac:ee:d3:f8:7c:13:01:9d:fb:f5:bd:f5:e7:f8:18:da:50: c0:9a:8d:f9:e0:28:71:7d:fd:e2:b4:69:9c:96:88:60:e2:0a: d2:c7:d7:ba:72:21:09:55:d1:64:54:f7:86:bd:f3:19:21:cd: f8:12:64:d0:33:d5:63:72:a0:13:66:7a:f8:05:69:95:9d:51: ff:1b:73:e3:d7:db:1b:82:93:fe:a9:9f:61:03:2f:eb:cd:72: d3:0e:4d:05:62:69:a1:e5:c7:34:ab:7f:66:17:41:64:90:3a: 72:df:27:d0:45:da:c5:45:2a:75:d1:66:8b:ba:a5:f0:dc:dc: 3c:68:99:a4:dc:b1:fe:a1:fe:1c:3a:1a:87:59:35:df:67:f4: 4c:08:9f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTPcKd+RKeAh54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk M2M4OTY2ZTMtYzk5Yi00NTE3LWE3M2QtYTM0YmYwMzRkNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5E1nIY86wX0Ry0JJxHNVzbVZ+2E/EK5PYYC JnLJW/pPRTdcdbsWzgbZXqmTuq3M6+6svEE3HBLmL6YxaYeSKGksr9LnikP6uvwR fNywPlCjatLh62GzIJ+6Gb32PtPDM6cZ4TSsWW8J1K4zbpICwO2FkH8sVLtBlCqj I2WeaiT+AQCJWUTHLf5qH2fqRlo1VzHQPTpL2wY1Jt0RRsxML/QTeXcV6M4Q/hVB 7O0QsdBGKVrjexPLQRaX/yE48KMPThP5kohweycyxiX2pEL4rREUv+stCvfxD4Lt 1ROkDdkyZ4bZiHR18YczAcu1Z4rGnA2Q8EXrXphnKhyHEJf5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG9C+fstTrg4PK1IOA3r2vVX7nCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGFjZGJmYmMtMWI3MS0z YTE3LTk5OGMtYjE3MjhkOGE1YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWphu3w4Hk0BS+pHKePbdW9etZ5ttZRWR0OWH8mMgU2IeTKcSTpR+Xy SFMfWTkZaqb7o3vW360vgiFujKB6XwNWkVkNyEmmLaWbEhnqekW6rNxAkhgpPKn5 G6G42glNRDrlSE6fTwLpplu/stis7tP4fBMBnfv1vfXn+BjaUMCajfngKHF9/eK0 aZyWiGDiCtLH17pyIQlV0WRU94a98xkhzfgSZNAz1WNyoBNmevgFaZWdUf8bc+PX 2xuCk/6pn2EDL+vNctMOTQViaaHlxzSrf2YXQWSQOnLfJ9BF2sVFKnXRZou6pfDc 3DxomaTcsf6h/hw6GodZNd9n9EwIn3E= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:39 2025 by rpki-client