$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b719df29-7e05-3aa8-b2e0-bfea56043e8f.roa File: b719df29-7e05-3aa8-b2e0-bfea56043e8f.roa (raw, json) Hash identifier: 76p9nWHkZUQHJwf7HNkGokxCYb/vK2RHwRzR93b21ko= Subject key identifier: 23:7E:AE:64:6B:B5:48:EE:4D:18:32:2C:E0:0C:A1:C8:F3:49:65:91 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A949C68E77033FB810400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b719df29-7e05-3aa8-b2e0-bfea56043e8f.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:94:9c:68:e7:70:33:fb:81:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=69f9b0e1-7891-4570-8806-1df8f2982790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:ac:fa:da:0a:f9:4f:31:1c:ba:f0:f2:96: de:78:29:4b:6f:c2:5f:42:e5:50:7a:a4:41:a8:8b: fb:d0:c1:f4:85:4c:cf:c7:b4:9a:d5:43:81:b8:40: b7:d6:09:3e:e5:69:3d:00:4c:b4:2f:20:d8:31:07: 2e:1b:6a:f6:73:61:5f:c9:f3:9a:3d:67:fb:98:94: 54:4a:60:ca:8d:d8:8f:92:ab:80:89:66:89:18:30: ab:b1:84:93:54:7b:42:4a:78:ea:9f:38:c5:0e:ce: 6a:6b:79:d3:9a:d2:97:cd:61:77:e6:ee:37:74:af: e2:ff:9b:6b:5d:f1:3c:d5:6d:91:df:5c:d0:70:cf: 98:65:ab:e3:d0:4b:73:4f:d9:b5:67:e8:51:d3:33: 2c:ed:5b:49:9d:70:67:36:0e:b1:56:e4:cb:54:9b: 89:de:8c:8e:74:54:8f:b2:8a:19:cb:06:e3:9a:60: 16:b8:10:a0:1a:f0:ca:4f:d0:7b:aa:6c:8d:f7:22: 76:e7:ef:f7:5e:6d:31:e3:ff:69:84:66:45:8a:1a: 79:9c:2c:08:07:7d:07:77:b9:e8:bb:42:c5:6d:2d: be:22:d4:a6:96:85:df:9a:7f:24:8f:88:b8:ac:cb: 0e:28:f1:2e:4a:4b:64:c9:ec:12:6c:6a:d7:51:68: 32:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:AE:64:6B:B5:48:EE:4D:18:32:2C:E0:0C:A1:C8:F3:49:65:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b719df29-7e05-3aa8-b2e0-bfea56043e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e3:ee:15:a8:1e:a8:fd:fc:85:bf:c7:60:f2:a3:54:a1:ce: 1b:91:df:4b:75:ba:e2:f3:f1:6a:9e:66:07:e5:6b:38:d2:c4: c9:27:d3:4a:f2:61:e6:1c:53:d8:11:88:a8:65:db:6d:67:af: 76:a8:75:de:36:63:9c:c7:fe:cc:15:c4:a9:c2:a7:55:19:af: 72:e6:40:67:f3:c2:63:b6:48:3c:06:f1:f8:d3:8c:d7:e1:4f: fc:c1:09:f7:f0:ab:8f:7a:f4:f9:df:f0:c7:ab:47:c7:93:03: c6:56:54:fc:cd:f4:9d:7c:b7:33:c9:23:7a:bc:32:32:00:e1: a1:8d:af:01:ea:23:38:e7:bf:0c:0a:f4:f1:2a:e0:e7:2d:70: 0b:b4:0f:68:a7:f9:f0:33:fd:f2:96:a6:ff:e1:0a:18:f0:dc: 0a:79:0f:df:37:f9:0b:b0:83:20:2e:fe:f5:15:3a:cc:eb:29: ea:c8:c7:0c:a7:13:d6:9c:4c:0e:e9:e1:0b:2e:30:bb:22:cd: 27:56:69:05:cf:29:78:03:25:93:15:70:37:05:8c:5b:f5:d7: 12:b7:c2:6d:42:21:47:da:d5:7c:58:b4:94:d5:2b:3f:90:99: 1c:1f:56:fc:6b:e7:93:74:4e:7a:c2:03:b9:d9:d5:5c:06:5e: 7f:47:15:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpScaOdwM/uBBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NjlmOWIwZTEtNzg5MS00NTcwLTg4MDYtMWRmOGYyOTgyNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeus+toK+U8xHLrw8pbeeClLb8JfQuVQeqRB qIv70MH0hUzPx7Sa1UOBuEC31gk+5Wk9AEy0LyDYMQcuG2r2c2FfyfOaPWf7mJRU SmDKjdiPkquAiWaJGDCrsYSTVHtCSnjqnzjFDs5qa3nTmtKXzWF35u43dK/i/5tr XfE81W2R31zQcM+YZavj0EtzT9m1Z+hR0zMs7VtJnXBnNg6xVuTLVJuJ3oyOdFSP sooZywbjmmAWuBCgGvDKT9B7qmyN9yJ25+/3Xm0x4/9phGZFihp5nCwIB30Hd7no u0LFbS2+ItSmloXfmn8kj4i4rMsOKPEuSktkyewSbGrXUWgyyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN+rmRrtUjuTRgyLOAMocjzSWWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjcxOWRmMjktN2UwNS0z YWE4LWIyZTAtYmZlYTU2MDQzZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnj7hWoHqj9/IW/x2Dyo1ShzhuR30t1uuLz8WqeZgflazjSxMkn00ry YeYcU9gRiKhl221nr3aodd42Y5zH/swVxKnCp1UZr3LmQGfzwmO2SDwG8fjTjNfh T/zBCffwq4969Pnf8MerR8eTA8ZWVPzN9J18tzPJI3q8MjIA4aGNrwHqIzjnvwwK 9PEq4OctcAu0D2in+fAz/fKWpv/hChjw3Ap5D983+QuwgyAu/vUVOszrKerIxwyn E9acTA7p4QsuMLsizSdWaQXPKXgDJZMVcDcFjFv11xK3wm1CIUfa1XxYtJTVKz+Q mRwfVvxr55N0TnrCA7nZ1VwGXn9HFas= -----END CERTIFICATE-----Generated at Thu Jun 5 18:49:46 2025 by rpki-client