$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5e1899f-84a5-372f-a092-9ddff4d8d9a5.roa File: a5e1899f-84a5-372f-a092-9ddff4d8d9a5.roa (raw, json) Hash identifier: cM2EqIBpphpfdB7bR+xxXWKhgTF+dfxgkV6CtGYbJHY= Subject key identifier: FF:9E:F1:40:F6:CF:03:47:87:8D:D4:35:22:D7:36:FD:E2:C9:3A:AA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8675850C23D10CC67BB0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5e1899f-84a5-372f-a092-9ddff4d8d9a5.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 395747 IP address blocks: 172.70.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:86:75:85:0c:23:d1:0c:c6:7b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=24b52bf4-6d34-44eb-b476-b597af3b744d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:9f:e5:cc:be:88:ea:00:63:d0:88:ee:7d: f1:25:b1:b9:07:70:11:72:3d:0d:3b:e8:48:8a:42: 1e:e7:ee:dd:b7:f8:5d:45:32:4c:e5:1c:10:12:4a: d6:3e:00:15:ad:3b:0f:0b:28:fd:94:0a:0d:0d:45: 40:af:aa:2e:11:2e:c8:fc:ad:15:fa:5d:1f:53:77: 8d:a0:63:69:84:af:2e:41:d7:75:b9:8a:e7:9a:05: 94:e6:c6:e4:d6:fb:ce:6e:70:5f:cb:70:bc:73:ec: f5:9d:80:fc:3c:6c:39:f4:f4:e1:41:36:d0:d9:16: 7e:8d:dd:1b:ee:d6:d4:6c:d5:e1:a7:fe:0f:dd:12: ec:8d:d9:c8:13:1a:66:fd:94:fb:97:90:47:18:8b: 26:9d:77:9e:4c:90:82:78:90:8f:ab:3b:48:8f:45: f4:df:df:05:48:48:8c:31:c2:10:68:f1:64:76:2e: 5d:7e:89:f6:f8:96:4d:5e:a8:b6:e0:e8:fb:bf:68: 65:1c:75:16:6d:10:f4:ff:c2:06:11:f8:e5:bf:17: ef:1a:05:1c:71:cc:9d:ad:ba:10:35:47:b6:bc:e1: dd:62:4b:13:e7:6c:1e:f3:89:a0:d4:4d:d9:4e:6f: 2f:c1:9b:63:e7:03:bf:e0:88:8b:29:2d:e2:4e:91: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9E:F1:40:F6:CF:03:47:87:8D:D4:35:22:D7:36:FD:E2:C9:3A:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a5e1899f-84a5-372f-a092-9ddff4d8d9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:f5:ee:0d:0e:01:3a:8c:e2:cb:e0:56:61:3d:6a:7e:d4:99: 65:9d:45:9e:7a:28:09:10:0f:a3:e2:5e:4a:d4:9e:ad:f2:db: d4:a5:68:66:71:6b:18:28:cd:ce:e3:d8:70:b7:26:0e:6e:fd: f1:27:e7:3d:a5:1b:42:58:ab:12:52:6d:77:21:c3:0e:03:49: 39:ca:bb:83:3e:2e:f8:cf:13:ba:28:74:34:34:2f:7c:c5:1a: e3:a5:fa:0b:b7:d1:67:b8:74:92:15:ed:68:42:35:d1:45:76: 58:60:b0:7d:e1:73:a3:0d:b0:f3:f4:23:49:29:a0:97:09:91: 34:24:d3:b4:73:0c:f7:77:26:e2:79:7d:17:2b:42:71:1b:55: 97:16:b1:4f:30:45:43:14:cc:06:8d:6b:c3:49:2d:b3:a9:6f: 14:1f:a1:cf:97:f6:38:ef:2f:59:ec:1c:0a:f9:34:36:2b:95: 4f:2b:4e:78:1e:d9:22:9e:48:ef:b0:32:dc:7b:97:cf:33:fa: 7f:49:d5:fb:1e:f2:cd:4a:38:da:cd:12:ad:76:b1:46:cb:51: 57:ad:e3:c5:de:78:3d:60:4f:df:9b:e0:0e:64:71:89:5f:fb: 54:b4:4b:3f:40:f4:18:b2:e7:0b:6b:6a:85:99:05:e4:e9:10: 77:d6:ab:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoZ1hQwj0QzGe7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MjRiNTJiZjQtNmQzNC00NGViLWI0NzYtYjU5N2FmM2I3NDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFyf5cy+iOoAY9CI7n3xJbG5B3ARcj0NO+hI ikIe5+7dt/hdRTJM5RwQEkrWPgAVrTsPCyj9lAoNDUVAr6ouES7I/K0V+l0fU3eN oGNphK8uQdd1uYrnmgWU5sbk1vvObnBfy3C8c+z1nYD8PGw59PThQTbQ2RZ+jd0b 7tbUbNXhp/4P3RLsjdnIExpm/ZT7l5BHGIsmnXeeTJCCeJCPqztIj0X0398FSEiM McIQaPFkdi5dfon2+JZNXqi24Oj7v2hlHHUWbRD0/8IGEfjlvxfvGgUcccydrboQ NUe2vOHdYksT52we84mg1E3ZTm8vwZtj5wO/4IiLKS3iTpHtFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+e8UD2zwNHh43UNSLXNv3iyTqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTVlMTg5OWYtODRhNS0z NzJmLWEwOTItOWRkZmY0ZDhkOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK717g0OATqM4svgVmE9an7UmWWdRZ56KAkQD6PiXkrUnq3y29SlaGZx axgozc7j2HC3Jg5u/fEn5z2lG0JYqxJSbXchww4DSTnKu4M+LvjPE7oodDQ0L3zF GuOl+gu30We4dJIV7WhCNdFFdlhgsH3hc6MNsPP0I0kpoJcJkTQk07RzDPd3JuJ5 fRcrQnEbVZcWsU8wRUMUzAaNa8NJLbOpbxQfoc+X9jjvL1nsHAr5NDYrlU8rTnge 2SKeSO+wMtx7l88z+n9J1fse8s1KONrNEq12sUbLUVet48XeeD1gT9+b4A5kcYlf +1S0Sz9A9Biy5wtraoWZBeTpEHfWq+k= -----END CERTIFICATE-----Generated at Sun Jun 8 00:47:01 2025 by rpki-client