$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b08f71b5-8ce8-37ff-89ac-4d27726d6392.roa File: b08f71b5-8ce8-37ff-89ac-4d27726d6392.roa (raw, json) Hash identifier: UT0RPnCgKEp5apP7l7Q4AxCEBVucG0yhEmM00/TDdmw= Subject key identifier: 37:92:16:F0:D9:96:5D:38:9E:49:E8:91:5D:94:77:55:37:DD:E2:05 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EEB509EE96FB468E564BFB08 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b08f71b5-8ce8-37ff-89ac-4d27726d6392.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 13335 IP address blocks: 172.70.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:09:ee:96:fb:46:8e:56:4b:fb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=bc9a0ea2-82b2-49ff-bab7-3bf31e817ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9e:44:9e:59:2a:0e:e5:a7:d0:49:76:ee:6b: 92:bf:fd:31:b7:ff:7d:68:c2:c6:54:52:3a:93:d4: 6b:4e:b4:c9:4f:0f:3a:28:e6:20:20:7d:d0:b9:13: 9a:17:fc:f4:5f:d6:ab:41:26:b6:fd:49:b3:61:56: df:a2:fd:ee:95:ef:75:f8:c3:2c:f7:59:69:e1:06: 9d:d7:91:07:ab:9c:a3:e6:23:6e:13:26:dd:69:5c: 58:49:7f:b7:d0:b4:4f:b4:d8:f5:14:00:a0:e9:ef: a5:7a:ed:c1:40:0e:86:29:62:ba:67:6c:7d:ee:96: 9e:5b:37:ec:15:93:71:10:6b:fb:c1:e7:83:84:51: 55:ff:b1:6e:66:f3:4e:ac:8b:c7:71:60:7c:a7:47: af:fe:f0:b5:b0:ce:67:22:83:24:e6:14:c1:56:df: 66:ac:ad:18:43:df:34:84:aa:51:93:74:34:74:ba: 44:f1:4f:30:2d:a4:66:bd:78:85:6b:c7:49:23:30: 95:05:5a:bc:6b:e8:14:39:be:33:e2:11:97:9c:bf: ed:a6:56:74:38:9c:c6:3b:7f:c2:4c:b8:09:07:fd: 8b:0c:70:fc:24:24:73:fd:d0:aa:71:6c:e8:ba:0c: d8:7b:80:80:3f:51:f5:03:19:ad:a9:38:ca:72:da: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:92:16:F0:D9:96:5D:38:9E:49:E8:91:5D:94:77:55:37:DD:E2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b08f71b5-8ce8-37ff-89ac-4d27726d6392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:57:ed:8a:aa:d2:cc:bc:3e:75:bc:95:51:e6:a4:39:f4:a4: b2:78:d9:38:7b:37:9e:af:de:45:d5:d3:a5:d4:2d:98:66:6f: 04:b4:fe:ba:c2:67:ce:16:d2:01:52:14:67:43:02:35:09:6e: ef:ee:b5:c6:88:b7:81:e7:8c:84:08:45:5a:a1:72:c4:e2:20: fd:fc:5e:01:e3:4d:e6:c8:f7:08:8f:67:f5:ac:11:56:a9:99: f3:3d:d1:b6:44:7c:ea:99:3e:1d:24:a4:d2:4b:0a:69:be:45: 09:20:52:a7:d3:b2:bf:42:5b:8f:9e:cb:e5:34:9c:1d:9e:19: 83:95:ab:9d:a1:ad:7c:9e:0f:1c:fc:63:5e:86:5f:65:6c:22: 85:bd:4d:12:c0:2c:89:50:8c:6c:48:f3:df:d1:ea:d8:3d:8d: da:13:17:5c:2f:4d:e0:25:bf:38:28:1b:73:21:4e:90:31:4e: cb:7f:7b:21:14:6d:f3:50:a2:b0:5f:70:eb:fa:cb:e7:9b:3f: 47:1d:35:e7:95:f7:c1:ef:09:c0:28:d7:b4:9e:1e:38:88:50: a1:a1:de:17:b0:c2:c1:4e:86:1e:03:55:10:27:7f:91:24:35: 31:83:62:03:e8:8f:4d:cc:00:2b:ab:7f:ad:c1:5f:cd:1d:7a: 4a:7e:97:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQnulvtGjlZL+wgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk YmM5YTBlYTItODJiMi00OWZmLWJhYjctM2JmMzFlODE3ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp5EnlkqDuWn0El27muSv/0xt/99aMLGVFI6 k9RrTrTJTw86KOYgIH3QuROaF/z0X9arQSa2/UmzYVbfov3ule91+MMs91lp4Qad 15EHq5yj5iNuEybdaVxYSX+30LRPtNj1FACg6e+leu3BQA6GKWK6Z2x97paeWzfs FZNxEGv7weeDhFFV/7FuZvNOrIvHcWB8p0ev/vC1sM5nIoMk5hTBVt9mrK0YQ980 hKpRk3Q0dLpE8U8wLaRmvXiFa8dJIzCVBVq8a+gUOb4z4hGXnL/tplZ0OJzGO3/C TLgJB/2LDHD8JCRz/dCqcWzougzYe4CAP1H1AxmtqTjKctpzhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeSFvDZll04nknokV2Ud1U33eIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjA4ZjcxYjUtOGNlOC0z N2ZmLTg5YWMtNGQyNzcyNmQ2MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdX7Yqq0sy8PnW8lVHmpDn0pLJ42Th7N56v3kXV06XULZhmbwS0/rrC Z84W0gFSFGdDAjUJbu/utcaIt4HnjIQIRVqhcsTiIP38XgHjTebI9wiPZ/WsEVap mfM90bZEfOqZPh0kpNJLCmm+RQkgUqfTsr9CW4+ey+U0nB2eGYOVq52hrXyeDxz8 Y16GX2VsIoW9TRLALIlQjGxI89/R6tg9jdoTF1wvTeAlvzgoG3MhTpAxTst/eyEU bfNQorBfcOv6y+ebP0cdNeeV98HvCcAo17SeHjiIUKGh3hewwsFOhh4DVRAnf5Ek NTGDYgPoj03MACurf63BX80dekp+lwU= -----END CERTIFICATE-----Generated at Sat Jun 7 12:34:53 2025 by rpki-client