$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9524676-d9ff-31c1-a3b3-a6ffd5faade0.roa File: a9524676-d9ff-31c1-a3b3-a6ffd5faade0.roa (raw, json) Hash identifier: jd6YHgTKlZ2400WCzCwlfkJZYpXKlKZjBvKPPg/cGz8= Subject key identifier: 1D:76:E7:16:2C:3F:D8:E1:17:D9:20:B9:21:8E:B7:FA:B0:FD:C8:BB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFC98CD389BB2CA0948EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9524676-d9ff-31c1-a3b3-a6ffd5faade0.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.64.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c9:8c:d3:89:bb:2c:a0:94:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=37046acb-9584-4c40-8dad-52bf26f7f4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c5:3c:24:e6:db:41:b2:dc:ff:19:4c:87:6f: 2e:31:17:e6:24:02:5a:16:bd:35:92:8c:13:4f:26: fd:f9:6c:93:0b:ec:11:f7:20:1d:bb:fa:e5:e1:c3: 6d:14:f0:6e:43:51:5a:4a:e2:2f:af:18:23:ac:c6: 04:63:5d:81:eb:24:e9:91:b1:74:ee:1e:6a:17:1e: 32:a4:82:29:cd:b9:92:07:68:c8:38:26:2e:1c:41: c9:59:42:ae:4d:3b:b4:01:bd:80:04:c0:a0:f5:81: 5c:96:37:f4:fa:df:95:dd:f2:ea:1b:0a:3c:10:ec: 0a:61:57:cd:19:5c:4f:40:1f:ac:d9:68:ae:83:85: 5a:5a:70:60:48:8b:6e:9f:32:fd:8e:ee:0e:8c:3d: 1c:cf:10:82:ac:e6:d0:b0:b8:02:63:76:0b:07:df: 56:b0:ed:c1:46:70:49:7d:56:c3:fc:10:07:ae:69: 43:a5:40:95:2d:27:a4:a0:8a:d9:81:a6:1d:f8:88: a5:0f:94:dc:6f:44:10:e2:1b:fc:e5:da:38:f7:01: 4e:50:bc:12:8e:98:fb:57:6c:17:52:53:2b:2f:6b: a2:a5:c2:0b:28:38:71:6e:68:c9:8c:af:cb:c5:9b: 58:04:20:6a:e3:a4:e0:e8:6d:32:be:70:a7:00:3a: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:76:E7:16:2C:3F:D8:E1:17:D9:20:B9:21:8E:B7:FA:B0:FD:C8:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9524676-d9ff-31c1-a3b3-a6ffd5faade0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:00:b8:0b:1f:16:7e:e1:2e:d8:5f:d2:04:61:4c:1e:81:b3: 4a:75:b8:10:3a:5c:66:0a:79:8e:4e:07:af:63:6a:0c:d0:87: 97:ce:2e:de:1a:a9:58:44:41:20:5f:39:52:13:3a:69:18:a3: 64:bc:a7:6e:bd:08:d5:38:fb:a1:82:c5:72:d9:2a:d7:78:3a: 55:75:5b:09:53:c3:11:4a:4f:2f:1f:87:67:ba:e7:a4:db:0b: 20:73:71:cd:63:ea:fe:66:c0:ed:f4:14:e5:07:45:f8:14:fb: 0c:b4:35:a8:10:04:9a:77:13:cd:2d:44:fe:07:57:ca:89:4e: 85:56:40:3e:0a:66:3e:39:07:d3:3e:4d:5c:68:e8:02:5c:bf: 65:35:d5:29:01:10:06:74:07:14:c7:e8:4d:c8:7d:e7:be:0a: 0a:55:f1:86:cf:f1:62:e7:d7:88:27:d4:92:f0:18:d5:f0:0a: 52:9e:a4:56:a0:1e:b6:1f:8c:cc:c1:b1:0d:78:2b:e3:87:5e: 7e:43:3d:65:bd:41:ae:16:03:26:65:51:e2:ab:5f:23:41:0b: 41:37:9f:22:85:36:98:f6:9a:db:8b:86:a8:24:ca:c7:84:13: c8:39:49:7e:3d:4e:b9:0e:07:f4:97:9f:53:e1:e6:55:f9:8d: 74:17:be:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78mM04m7LKCUjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzcwNDZhY2ItOTU4NC00YzQwLThkYWQtNTJiZjI2ZjdmNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMU8JObbQbLc/xlMh28uMRfmJAJaFr01kowT Tyb9+WyTC+wR9yAdu/rl4cNtFPBuQ1FaSuIvrxgjrMYEY12B6yTpkbF07h5qFx4y pIIpzbmSB2jIOCYuHEHJWUKuTTu0Ab2ABMCg9YFcljf0+t+V3fLqGwo8EOwKYVfN GVxPQB+s2Wiug4VaWnBgSItunzL9ju4OjD0czxCCrObQsLgCY3YLB99WsO3BRnBJ fVbD/BAHrmlDpUCVLSekoIrZgaYd+IilD5Tcb0QQ4hv85do49wFOULwSjpj7V2wX UlMrL2uipcILKDhxbmjJjK/LxZtYBCBq46Tg6G0yvnCnADrBCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB125xYsP9jhF9kguSGOt/qw/ci7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTk1MjQ2NzYtZDlmZi0z MWMxLWEzYjMtYTZmZmQ1ZmFhZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEAuAsfFn7hLthf0gRhTB6Bs0p1uBA6XGYKeY5OB69jagzQh5fOLt4a qVhEQSBfOVITOmkYo2S8p269CNU4+6GCxXLZKtd4OlV1WwlTwxFKTy8fh2e656Tb CyBzcc1j6v5mwO30FOUHRfgU+wy0NagQBJp3E80tRP4HV8qJToVWQD4KZj45B9M+ TVxo6AJcv2U11SkBEAZ0BxTH6E3Ifee+CgpV8YbP8WLn14gn1JLwGNXwClKepFag HrYfjMzBsQ14K+OHXn5DPWW9Qa4WAyZlUeKrXyNBC0E3nyKFNpj2mtuLhqgkyseE E8g5SX49TrkOB/SXn1Ph5lX5jXQXvqU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:32:49 2025 by rpki-client