$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa File: a12efd23-1da3-3127-950e-d6f4cfde3c50.roa (raw, json) Hash identifier: zZCd7pPZgGvyd1M47etDkSEnay59x4cncqrjdAXG71c= Subject key identifier: F0:6A:AB:45:FB:E7:D7:AB:F3:AD:CE:E3:CF:3C:A4:69:E1:E8:3E:58 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9221781EDA9086863480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.64.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:92:21:78:1e:da:90:86:86:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=4eea69c2-dcbc-43f2-86ba-e54752fa4b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:47:d8:92:c4:85:e4:c0:09:d0:6b:89:1a:7d: a0:8d:f0:52:b3:5f:2e:b0:fe:dd:1c:4a:3e:cb:c4: a4:86:5f:8f:d2:90:9f:5c:b9:4f:9c:c4:4f:81:8c: 6d:7e:ad:ea:ab:d6:a9:e9:fc:72:10:d7:74:74:0a: fc:45:02:2c:31:ba:bb:50:b9:40:9d:40:ed:90:b3: 49:ec:7a:b7:6e:03:11:b7:0f:07:76:f4:5d:94:43: ea:dd:0a:06:78:ea:cf:de:0c:62:f9:82:d9:3c:d5: d1:92:ca:4b:89:90:c0:db:2c:af:36:36:74:9d:c6: f8:4b:40:26:e3:8f:02:cc:cb:45:00:b1:c7:cd:7a: 14:5e:91:c9:07:af:7e:17:ab:99:31:eb:af:83:1c: ee:4e:23:9c:43:c8:95:42:a4:3e:99:f0:00:99:36: bb:eb:ab:3e:50:2d:7a:af:48:be:2f:58:30:ba:5e: c3:eb:9d:56:89:00:79:51:19:3d:aa:96:9d:44:83: 0b:0a:b7:1e:47:a7:8e:44:d7:f3:1a:74:52:fa:f4: c8:4d:9a:4c:99:a0:2d:73:52:0d:d0:c1:db:ae:d7: 53:7d:c1:eb:67:76:ed:3f:60:8a:20:02:df:24:34: fe:90:48:c3:f4:3f:bf:ca:c5:b2:12:3a:36:8f:79: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6A:AB:45:FB:E7:D7:AB:F3:AD:CE:E3:CF:3C:A4:69:E1:E8:3E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a12efd23-1da3-3127-950e-d6f4cfde3c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:19:5c:76:4c:0f:d1:2a:07:c8:65:9b:51:f5:e5:b2:7f:2c: dc:93:10:16:e4:51:96:c3:4e:6e:a0:9a:69:14:5b:80:e3:25: 25:fd:88:1a:87:85:09:67:2a:95:f7:7e:ea:92:2d:6a:33:52: 3a:4d:35:01:1d:48:eb:8b:3f:df:8c:ff:dd:db:74:99:fa:c7: 03:e4:0a:f5:26:2d:ce:60:c0:25:c4:f1:c3:96:0f:cf:f6:2b: a8:16:42:72:32:03:65:8e:6d:17:38:fd:a5:d2:9b:6a:35:83: c6:cc:34:66:df:52:07:d3:6d:20:8b:a6:96:89:56:fd:57:ab: e4:03:6e:17:0f:44:2c:6d:0a:1b:7c:77:1b:d2:a9:46:2e:ce: 21:23:2f:4a:55:ff:95:b5:25:3c:79:fc:f3:ba:cb:35:3d:95: b6:ad:af:26:48:79:ad:27:2c:8b:91:a2:bb:32:f5:2b:48:a2: 09:06:eb:0a:01:49:2c:0b:c2:e7:67:b3:e7:22:d6:4e:93:f7: e4:77:62:fc:46:a5:09:71:ef:e5:a4:bf:cb:4d:3b:69:d7:a5: 16:f6:6a:a8:b3:75:6a:89:f1:cb:98:f0:75:df:08:b5:42:ab: 4e:dd:b6:a8:f6:b3:43:bc:ff:80:92:a8:b3:13:18:d6:c8:5a: fe:7b:9d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupIheB7akIaGNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NGVlYTY5YzItZGNiYy00M2YyLTg2YmEtZTU0NzUyZmE0YjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEfYksSF5MAJ0GuJGn2gjfBSs18usP7dHEo+ y8Skhl+P0pCfXLlPnMRPgYxtfq3qq9ap6fxyENd0dAr8RQIsMbq7ULlAnUDtkLNJ 7Hq3bgMRtw8HdvRdlEPq3QoGeOrP3gxi+YLZPNXRkspLiZDA2yyvNjZ0ncb4S0Am 448CzMtFALHHzXoUXpHJB69+F6uZMeuvgxzuTiOcQ8iVQqQ+mfAAmTa766s+UC16 r0i+L1gwul7D651WiQB5URk9qpadRIMLCrceR6eORNfzGnRS+vTITZpMmaAtc1IN 0MHbrtdTfcHrZ3btP2CKIALfJDT+kEjD9D+/ysWyEjo2j3kC9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBqq0X759er863O4888pGnh6D5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTEyZWZkMjMtMWRhMy0z MTI3LTk1MGUtZDZmNGNmZGUzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgZXHZMD9EqB8hlm1H15bJ/LNyTEBbkUZbDTm6gmmkUW4DjJSX9iBqH hQlnKpX3fuqSLWozUjpNNQEdSOuLP9+M/93bdJn6xwPkCvUmLc5gwCXE8cOWD8/2 K6gWQnIyA2WObRc4/aXSm2o1g8bMNGbfUgfTbSCLppaJVv1Xq+QDbhcPRCxtCht8 dxvSqUYuziEjL0pV/5W1JTx5/PO6yzU9lbatryZIea0nLIuRorsy9StIogkG6woB SSwLwudns+ci1k6T9+R3YvxGpQlx7+Wkv8tNO2nXpRb2aqizdWqJ8cuY8HXfCLVC q07dtqj2s0O8/4CSqLMTGNbIWv57nQY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:56 2025 by rpki-client