$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7433d8c-304a-38ff-b303-398cf74ad72d.roa File: a7433d8c-304a-38ff-b303-398cf74ad72d.roa (raw, json) Hash identifier: XleLm7bh5u3rUnxnKNUy6X4s4bSYbyE8HR2y8CFtkOI= Subject key identifier: CA:14:EA:39:DD:3F:1B:B3:B0:39:47:04:E8:43:A8:29:7D:31:A3:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EEB50A7735A57436F30B0260 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7433d8c-304a-38ff-b303-398cf74ad72d.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 13335 IP address blocks: 172.70.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:0a:77:35:a5:74:36:f3:0b:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=510adf4f-713b-435f-b9cd-917fbf8f6c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ae:09:89:b5:03:43:29:6d:b6:80:ed:a5:e6: 9c:36:1e:86:ca:85:17:f6:a1:a2:e8:d8:05:96:5c: cf:35:9b:d2:95:a9:a8:f7:5b:31:da:63:5f:24:0d: 19:f0:72:9b:87:36:7a:21:8b:a7:18:6d:e7:4f:0e: 8e:70:a5:7c:2a:60:6b:0f:18:ac:5a:cf:c5:87:51: 99:8a:98:2b:b7:69:eb:c7:95:fa:c1:9b:cf:0e:88: 52:80:b1:fc:2f:89:a8:42:46:2a:83:2b:44:a8:c8: eb:c1:d8:44:f7:99:88:37:bc:9a:d3:0d:49:4f:c2: 87:e9:fc:0c:72:32:1a:06:4a:5e:4e:66:b7:87:bb: 24:1a:6e:b6:c3:88:c3:b0:f2:ad:ba:e7:d7:15:a8: 01:c3:86:75:74:fb:c4:55:85:af:4a:51:43:26:f4: 28:eb:63:03:03:87:77:47:ef:b2:11:47:10:d0:5e: 06:aa:52:90:5f:b5:91:a5:52:4f:e4:15:63:c6:26: 56:dc:49:37:8a:12:88:2e:25:b7:6d:61:31:72:83: e4:e5:dc:d7:60:96:40:9c:b8:ae:b4:68:a1:75:0a: 9f:93:f8:8b:f7:42:55:9f:be:89:ca:e9:66:30:64: 0f:81:0b:ad:4c:4b:8a:32:67:0a:66:08:25:b6:47: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:14:EA:39:DD:3F:1B:B3:B0:39:47:04:E8:43:A8:29:7D:31:A3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7433d8c-304a-38ff-b303-398cf74ad72d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c9:24:8a:8e:6a:ce:e0:88:a8:33:9a:af:8d:72:78:d2:e7: db:c4:00:76:55:23:e3:6f:e0:92:89:44:b9:8d:e8:53:4c:e0: 99:06:58:7b:07:5c:99:1b:3d:a9:3c:18:23:e4:8f:d9:22:68: 2a:9c:67:3b:e6:0f:ea:0d:36:ee:90:b2:71:5c:71:1a:a0:5f: a3:45:49:0e:9d:8e:43:67:fe:7c:13:86:e2:03:3d:e2:d9:19: 3c:f2:1b:ee:28:e2:78:aa:dd:c0:36:be:cf:8a:8c:44:4d:be: 36:b4:0d:9e:2c:60:c2:fa:17:80:b2:d3:57:4f:24:3e:16:30: 41:c2:ec:c8:97:76:6f:02:de:9b:97:5a:fb:12:29:21:0c:8f: f1:9c:cd:9c:0d:15:07:24:75:ee:62:eb:fa:6e:c7:46:2d:c4: ad:52:93:2c:93:c0:8b:25:ab:5d:a3:2e:ff:7b:7d:22:91:1e: ed:c8:73:b4:da:8b:8a:16:00:b3:0b:62:d8:a4:82:3b:a9:a9: d2:c9:46:93:db:f8:1e:8e:cd:1a:6d:c0:f9:b3:16:fa:dd:eb: d3:b1:ef:64:b3:da:1a:8b:79:aa:6c:52:34:80:57:56:68:52: 00:89:9f:e9:38:20:b9:88:d4:47:6c:19:d8:8b:1c:59:c8:b6: f8:f2:c2:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQp3NaV0NvMLAmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk NTEwYWRmNGYtNzEzYi00MzVmLWI5Y2QtOTE3ZmJmOGY2YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7K4JibUDQylttoDtpeacNh6GyoUX9qGi6NgF llzPNZvSlamo91sx2mNfJA0Z8HKbhzZ6IYunGG3nTw6OcKV8KmBrDxisWs/Fh1GZ ipgrt2nrx5X6wZvPDohSgLH8L4moQkYqgytEqMjrwdhE95mIN7ya0w1JT8KH6fwM cjIaBkpeTma3h7skGm62w4jDsPKtuufXFagBw4Z1dPvEVYWvSlFDJvQo62MDA4d3 R++yEUcQ0F4GqlKQX7WRpVJP5BVjxiZW3Ek3ihKILiW3bWExcoPk5dzXYJZAnLiu tGihdQqfk/iL90JVn76JyulmMGQPgQutTEuKMmcKZggltkf+rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoU6jndPxuzsDlHBOhDqCl9MaPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTc0MzNkOGMtMzA0YS0z OGZmLWIzMDMtMzk4Y2Y3NGFkNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/JJIqOas7giKgzmq+NcnjS59vEAHZVI+Nv4JKJRLmN6FNM4JkGWHsH XJkbPak8GCPkj9kiaCqcZzvmD+oNNu6QsnFccRqgX6NFSQ6djkNn/nwThuIDPeLZ GTzyG+4o4niq3cA2vs+KjERNvja0DZ4sYML6F4Cy01dPJD4WMEHC7MiXdm8C3puX WvsSKSEMj/GczZwNFQckde5i6/pux0YtxK1SkyyTwIslq12jLv97fSKRHu3Ic7Ta i4oWALMLYtikgjupqdLJRpPb+B6OzRptwPmzFvrd69Ox72Sz2hqLeapsUjSAV1Zo UgCJn+k4ILmI1EdsGdiLHFnItvjywqI= -----END CERTIFICATE-----Generated at Sat Jun 7 12:25:38 2025 by rpki-client