$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9908acc9-fba9-30fc-be05-88e39a368652.roa File: 9908acc9-fba9-30fc-be05-88e39a368652.roa (raw, json) Hash identifier: K5JZB7+HRy/xtDe8qTK0blSf7876/BiGhKBS3rqzZSU= Subject key identifier: 20:A1:9F:13:57:3D:74:82:55:5F:A1:C1:EA:4F:59:71:BA:3E:00:52 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8535B082C0FFCFFBBE0F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9908acc9-fba9-30fc-be05-88e39a368652.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:35:b0:82:c0:ff:cf:fb:be:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=5ffa1819-3ff2-43a4-b49d-bf6765419841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:03:57:6d:cd:0d:d2:d1:e8:81:21:43:ba: ba:51:be:9c:4a:0d:a0:01:71:a9:25:64:c1:41:74: fd:50:0f:61:5e:ad:28:43:b4:0c:e1:52:7c:38:35: 7b:12:5f:3e:e2:f2:42:da:94:09:44:cd:bd:b9:a2: c5:88:fd:26:30:20:cd:28:7e:a5:30:61:cb:cb:9d: fc:9a:cb:36:20:0d:24:de:f7:c2:a2:64:3f:c8:d5: 6a:36:e9:cc:64:cc:a6:96:8c:7e:e4:76:7b:2b:b0: 3d:0f:11:75:0b:f0:d0:87:4b:ff:83:87:93:6e:dd: e4:b2:30:c8:38:0d:11:ad:fc:df:a7:35:74:fb:95: 60:1c:77:98:92:8d:c6:bd:9d:f5:8f:9e:a3:ca:27: 6b:fb:c6:23:a1:01:1d:41:cb:2a:f4:82:08:c8:8c: 24:6c:cf:1e:25:3d:c4:a4:ff:58:cc:43:26:04:e6: b7:a0:9a:24:3d:0e:e8:a6:11:92:ec:6c:1e:a8:b8: d6:cc:63:fa:06:14:25:6b:4e:6f:96:70:c2:c4:1b: da:38:94:92:cc:10:2a:f1:51:52:00:8a:13:fd:3c: 97:a5:56:3f:af:3f:35:e9:69:73:4f:2c:00:0e:2a: bb:6c:b1:2a:1c:c4:b3:31:e6:92:48:d2:9f:38:e0: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A1:9F:13:57:3D:74:82:55:5F:A1:C1:EA:4F:59:71:BA:3E:00:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9908acc9-fba9-30fc-be05-88e39a368652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:cf:ed:2c:39:e9:8e:82:57:42:4c:27:07:b3:fd:09:0d:c6: 33:5a:43:d8:98:e5:3d:d8:76:41:7a:38:96:dd:44:82:3a:10: fd:f9:6b:a9:08:bc:0c:69:bd:8d:1c:40:a9:e1:44:19:99:6f: bd:f3:f4:8d:c4:7a:de:45:b2:a8:7b:e6:a2:49:69:74:4d:fe: 2f:1a:e6:92:72:16:af:a9:62:2b:b4:92:c0:ac:72:69:93:36: 8b:e0:1b:9a:6f:34:a8:8b:9f:77:d9:21:71:c1:fa:30:0d:bf: bd:aa:34:fd:22:de:01:ef:be:30:8a:58:27:3d:28:a0:fe:62: 5d:61:b2:fa:98:c5:b8:05:44:64:18:cc:d5:eb:d9:b5:bd:17: 3a:5e:1e:f5:72:69:80:2a:25:20:17:8a:4e:57:23:49:01:f0: 07:51:cc:92:93:1c:24:5a:b1:8b:92:22:9c:a8:ba:1c:c8:c0: 59:7a:85:27:e4:2f:9d:9d:59:06:b4:76:27:c6:5d:59:51:9b: 0b:e4:22:7b:2a:d9:56:34:2b:ef:bd:25:71:f7:92:65:81:21: 1a:59:ca:fe:50:64:2c:ff:fe:70:fe:48:7d:0b:8d:51:29:88: 7d:37:fc:b1:ed:31:c8:c2:9e:5c:86:1a:2b:10:60:b1:96:39: f7:58:30:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTWwgsD/z/u+D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NWZmYTE4MTktM2ZmMi00M2E0LWI0OWQtYmY2NzY1NDE5ODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ADV23NDdLR6IEhQ7q6Ub6cSg2gAXGpJWTB QXT9UA9hXq0oQ7QM4VJ8ODV7El8+4vJC2pQJRM29uaLFiP0mMCDNKH6lMGHLy538 mss2IA0k3vfComQ/yNVqNunMZMymlox+5HZ7K7A9DxF1C/DQh0v/g4eTbt3ksjDI OA0RrfzfpzV0+5VgHHeYko3GvZ31j56jyidr+8YjoQEdQcsq9IIIyIwkbM8eJT3E pP9YzEMmBOa3oJokPQ7ophGS7GweqLjWzGP6BhQla05vlnDCxBvaOJSSzBAq8VFS AIoT/TyXpVY/rz816WlzTywADiq7bLEqHMSzMeaSSNKfOOAwEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCChnxNXPXSCVV+hwepPWXG6PgBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTkwOGFjYzktZmJhOS0z MGZjLWJlMDUtODhlMzlhMzY4NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLP7Sw56Y6CV0JMJwez/QkNxjNaQ9iY5T3YdkF6OJbdRII6EP35a6kI vAxpvY0cQKnhRBmZb73z9I3Eet5Fsqh75qJJaXRN/i8a5pJyFq+pYiu0ksCscmmT NovgG5pvNKiLn3fZIXHB+jANv72qNP0i3gHvvjCKWCc9KKD+Yl1hsvqYxbgFRGQY zNXr2bW9FzpeHvVyaYAqJSAXik5XI0kB8AdRzJKTHCRasYuSIpyouhzIwFl6hSfk L52dWQa0difGXVlRmwvkInsq2VY0K++9JXH3kmWBIRpZyv5QZCz//nD+SH0LjVEp iH03/LHtMcjCnlyGGisQYLGWOfdYMNc= -----END CERTIFICATE-----Generated at Fri Jun 6 16:48:34 2025 by rpki-client