$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c9ae45-ce1a-3eeb-a6cc-3791b457f8e6.roa File: b3c9ae45-ce1a-3eeb-a6cc-3791b457f8e6.roa (raw, json) Hash identifier: o9a3BwhyyA71FqsClAO+OQrIZ8NwxaftI98iK3LgIKU= Subject key identifier: E3:17:6B:D0:7B:D7:C7:DC:2F:77:29:95:D7:EF:22:D2:16:27:2F:42 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9E7AF7F9C08394AE6710 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c9ae45-ce1a-3eeb-a6cc-3791b457f8e6.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.65.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:9e:7a:f7:f9:c0:83:94:ae:67:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=85e9e8e5-3e1a-46ac-afb0-ffc969a643fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:49:b8:7f:06:33:6f:16:74:54:da:24:b1: c7:32:b6:b3:5e:7a:29:85:a0:74:7e:e8:f0:5d:a0: 86:05:c0:0d:80:98:31:72:fa:3e:91:cd:68:5e:cb: 15:88:7e:cb:31:ec:1d:0e:2c:45:92:31:3f:c1:cc: 98:1f:3d:ef:d0:d6:51:7b:64:94:72:4c:47:54:d0: d8:61:00:62:a4:99:60:cc:eb:54:00:d6:b9:61:11: 97:7c:d4:e8:44:34:33:ef:f3:40:d1:2f:a3:be:4b: 16:9f:df:6f:3c:d1:f6:06:07:94:48:bb:ee:e7:68: e9:67:be:a8:e7:44:f4:51:29:63:c1:b9:f4:f2:8a: 76:af:6a:7d:25:cd:07:9b:92:a3:b6:c7:32:fd:b8: 3a:53:ef:96:2d:75:1d:59:65:59:41:75:87:ea:38: de:ca:48:e9:be:06:1f:18:55:9b:47:68:16:29:aa: 29:9d:a9:da:a0:9b:b9:9b:6f:46:5f:b9:82:0a:44: 2f:b5:22:75:f7:c4:f3:21:62:2b:9c:b4:b4:ec:92: 4a:f1:76:55:6b:1d:e4:f5:a5:44:db:2e:0e:cb:07: 9d:e9:cd:c9:43:d2:0c:14:bd:09:26:80:fc:1b:18: 7a:98:ed:0e:ac:17:15:ac:90:89:42:1a:b7:13:f4: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:6B:D0:7B:D7:C7:DC:2F:77:29:95:D7:EF:22:D2:16:27:2F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3c9ae45-ce1a-3eeb-a6cc-3791b457f8e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4f:60:41:36:10:18:a6:98:17:dc:df:87:f5:04:6a:37:3f: d1:d9:b2:0a:66:6a:1e:17:a3:3c:ee:a1:18:c7:0d:5e:8e:00: 0f:25:d2:ef:b8:98:bb:0a:2f:29:b2:0b:30:a1:8f:42:84:c6: e2:c4:07:65:27:d5:b9:28:af:bd:10:9f:54:01:f0:3f:d7:fb: aa:be:84:ed:08:39:5d:16:38:cd:d1:fd:c0:d1:94:3b:69:b0: b4:82:5e:26:6d:bd:24:e8:16:09:9c:30:00:79:7b:4b:3b:2f: 67:70:76:87:17:43:a9:14:a0:7f:ee:64:f1:26:87:81:23:63: dc:43:41:ea:3c:e0:a2:67:a8:25:e3:97:a7:36:85:b7:75:15: ae:2b:0b:db:c8:97:43:53:80:2d:26:64:e5:4c:fc:b5:e3:81: 68:54:e5:06:02:f0:97:d4:21:9c:72:85:2c:4e:aa:47:03:76: c9:38:44:34:66:17:82:d3:99:d7:9c:38:f6:1b:0a:27:d5:eb: b2:73:e4:f4:ae:61:25:14:3e:75:7d:62:37:3d:82:f0:b9:3d: f5:81:88:2c:48:b0:69:57:ff:87:b3:ff:d6:bc:03:60:81:76: c6:1f:80:a5:d9:76:14:48:99:eb:bb:3e:16:3b:d1:d9:7c:53: e3:30:08:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnup569/nAg5SuZxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ODVlOWU4ZTUtM2UxYS00NmFjLWFmYjAtZmZjOTY5YTY0M2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFpJuH8GM28WdFTaJLHHMrazXnophaB0fujw XaCGBcANgJgxcvo+kc1oXssViH7LMewdDixFkjE/wcyYHz3v0NZRe2SUckxHVNDY YQBipJlgzOtUANa5YRGXfNToRDQz7/NA0S+jvksWn99vPNH2BgeUSLvu52jpZ76o 50T0USljwbn08op2r2p9Jc0Hm5Kjtscy/bg6U++WLXUdWWVZQXWH6jjeykjpvgYf GFWbR2gWKaopnanaoJu5m29GX7mCCkQvtSJ198TzIWIrnLS07JJK8XZVax3k9aVE 2y4Oywed6c3JQ9IMFL0JJoD8Gxh6mO0OrBcVrJCJQhq3E/Rm5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMXa9B718fcL3cpldfvItIWJy9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjNjOWFlNDUtY2UxYS0z ZWViLWE2Y2MtMzc5MWI0NTdmOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJPYEE2EBimmBfc34f1BGo3P9HZsgpmah4XozzuoRjHDV6OAA8l0u+4 mLsKLymyCzChj0KExuLEB2Un1bkor70Qn1QB8D/X+6q+hO0IOV0WOM3R/cDRlDtp sLSCXiZtvSToFgmcMAB5e0s7L2dwdocXQ6kUoH/uZPEmh4EjY9xDQeo84KJnqCXj l6c2hbd1Fa4rC9vIl0NTgC0mZOVM/LXjgWhU5QYC8JfUIZxyhSxOqkcDdsk4RDRm F4LTmdecOPYbCifV67Jz5PSuYSUUPnV9Yjc9gvC5PfWBiCxIsGlX/4ez/9a8A2CB dsYfgKXZdhRImeu7PhY70dl8U+MwCE0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:59 2025 by rpki-client