$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c21bddb-7daa-34c4-b5a6-4bdeb7098fa7.roa File: 8c21bddb-7daa-34c4-b5a6-4bdeb7098fa7.roa (raw, json) Hash identifier: 5vuwZiWkavDVoDGpHax7KOTsSRNc7MActXXGA5kqGfA= Subject key identifier: 5E:B9:F3:93:65:A5:FA:8F:D6:EC:3C:E3:BA:60:64:82:AD:D4:CF:4E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8A5D304057762808CB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c21bddb-7daa-34c4-b5a6-4bdeb7098fa7.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8a:5d:30:40:57:76:28:08:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=d2a3cff5-1661-4091-aeb7-ab7a18201cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:36:d4:e7:00:a6:bd:6a:55:9f:26:e5:af: 8c:4d:83:c6:19:43:7b:ba:65:c5:ec:69:6d:33:9b: a7:ce:bb:f1:33:58:7e:82:58:d1:35:84:06:42:2d: db:05:9c:9f:1b:39:69:51:87:34:b7:8d:f2:1b:e8: ec:83:0e:f5:59:cc:74:f4:32:ac:9d:49:7a:88:e9: 4c:d4:95:c2:3c:b9:34:52:5f:57:6d:60:0b:60:70: 70:ac:68:16:40:28:ac:68:c5:9e:65:92:6f:dd:32: 6d:4e:65:2c:16:56:af:b0:4f:9d:38:78:86:6e:58: 37:75:75:22:fe:bd:29:84:91:f9:fb:58:dd:26:84: df:2d:c5:75:1c:cb:a7:ea:fa:75:f1:da:64:3d:79: 2f:a9:60:1e:c4:7c:c7:d5:ab:63:35:3c:bf:30:23: 19:b6:29:33:fa:cb:0f:7d:cb:00:fd:d0:39:fe:1e: 34:78:68:bb:50:e9:9e:0f:46:df:a3:8d:1b:f6:d5: bb:44:7b:28:13:46:9d:c4:41:61:1d:11:de:3e:af: f3:bd:02:66:1f:53:38:70:1d:ae:a3:c4:24:91:0f: d1:cc:a5:e0:c3:32:f2:3f:3c:71:c6:55:d5:00:09: 76:2f:30:0d:c6:fb:02:54:5c:9c:f2:d3:04:0f:74: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B9:F3:93:65:A5:FA:8F:D6:EC:3C:E3:BA:60:64:82:AD:D4:CF:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c21bddb-7daa-34c4-b5a6-4bdeb7098fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e5:b8:13:ff:9b:35:16:97:51:9c:3c:2d:3c:fa:87:d0:a1: af:62:f6:60:d7:4d:34:d0:b3:d0:47:0f:5e:cc:d1:bf:a3:42: 68:fb:3a:07:46:11:5d:7a:fc:74:e8:1b:d2:62:5b:a9:81:e9: a3:42:5f:7e:db:a1:0b:5e:13:0f:76:98:69:1b:e6:52:ec:aa: 79:ae:f0:dd:d7:35:d8:32:b9:03:ed:79:af:4f:8b:be:5e:84: 4d:9e:5d:de:33:f7:db:12:8a:84:d8:9c:e0:ae:41:97:eb:8a: fc:d5:75:cd:4f:40:b9:98:8c:d5:8f:4b:5d:dc:5b:89:5f:ed: b6:0a:75:fc:b6:a9:69:a5:1b:f2:4b:dd:02:3c:08:63:34:b9: 3a:42:54:a0:4b:38:c0:e5:cc:69:9e:4c:7b:35:93:85:70:46: f5:4e:15:e5:ce:c7:1c:30:75:ca:36:11:67:eb:48:d0:23:29: 5f:b8:96:aa:52:32:37:e7:40:4f:40:e1:bc:b1:8e:d3:e6:57: 6f:f3:19:e3:ac:fd:d4:dd:64:ab:4e:b5:5f:9c:75:5f:26:f7: 9c:4b:08:0c:d1:57:88:67:8a:75:e2:c8:02:31:a6:cc:c0:b9: 06:d9:16:6b:84:eb:a1:cf:70:89:37:6e:d6:fb:5c:68:3e:a2: cb:03:0e:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGopdMEBXdigIywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk ZDJhM2NmZjUtMTY2MS00MDkxLWFlYjctYWI3YTE4MjAxY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmc21OcApr1qVZ8m5a+MTYPGGUN7umXF7Glt M5unzrvxM1h+gljRNYQGQi3bBZyfGzlpUYc0t43yG+jsgw71Wcx09DKsnUl6iOlM 1JXCPLk0Ul9XbWALYHBwrGgWQCisaMWeZZJv3TJtTmUsFlavsE+dOHiGblg3dXUi /r0phJH5+1jdJoTfLcV1HMun6vp18dpkPXkvqWAexHzH1atjNTy/MCMZtikz+ssP fcsA/dA5/h40eGi7UOmeD0bfo40b9tW7RHsoE0adxEFhHRHePq/zvQJmH1M4cB2u o8QkkQ/RzKXgwzLyPzxxxlXVAAl2LzANxvsCVFyc8tMED3Ry/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6585NlpfqP1uw847pgZIKt1M9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGMyMWJkZGItN2RhYS0z NGM0LWI1YTYtNGJkZWI3MDk4ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzluBP/mzUWl1GcPC08+ofQoa9i9mDXTTTQs9BHD17M0b+jQmj7OgdG EV16/HToG9JiW6mB6aNCX37boQteEw92mGkb5lLsqnmu8N3XNdgyuQPtea9Pi75e hE2eXd4z99sSioTYnOCuQZfrivzVdc1PQLmYjNWPS13cW4lf7bYKdfy2qWmlG/JL 3QI8CGM0uTpCVKBLOMDlzGmeTHs1k4VwRvVOFeXOxxwwdco2EWfrSNAjKV+4lqpS MjfnQE9A4byxjtPmV2/zGeOs/dTdZKtOtV+cdV8m95xLCAzRV4hninXiyAIxpszA uQbZFmuE66HPcIk3btb7XGg+ossDDlk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:48 2025 by rpki-client