$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74eb1d1-e9e1-3ab6-a0a3-b7a3ead3cb45.roa File: b74eb1d1-e9e1-3ab6-a0a3-b7a3ead3cb45.roa (raw, json) Hash identifier: lJLF0PJHKgLxkpYwIjdR41Xm3fzPGNhifBqUwSWdyc0= Subject key identifier: 39:05:58:72:6F:E8:F9:56:C0:7B:21:97:8E:6E:3C:AE:1D:87:16:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA92FAD754DC9D8FDAD100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74eb1d1-e9e1-3ab6-a0a3-b7a3ead3cb45.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.64.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:92:fa:d7:54:dc:9d:8f:da:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=4c500906-f45e-4fb2-903c-4546c9bca7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:fd:c8:4d:96:96:1d:0f:c0:38:1a:22:89: c0:63:07:14:bc:45:69:2e:ec:19:50:8d:b1:c0:7e: 80:7c:0c:86:39:c6:34:64:1b:ab:8c:a6:f0:58:88: a2:b6:94:40:20:67:ef:5f:33:d8:48:38:ce:c1:8a: 31:3e:c8:10:5d:80:87:c7:96:30:a2:8e:1d:a7:df: 48:11:80:6e:31:da:47:bb:ba:a5:98:cf:b9:9f:bb: 2e:ad:93:72:60:d5:b2:bb:8a:a0:34:9b:56:f4:e2: f0:44:85:ac:26:03:33:2e:de:fc:c7:1b:36:4f:6d: 42:64:25:57:58:08:30:32:ca:7b:87:66:bd:a0:67: 89:30:3e:be:aa:a5:58:2e:00:06:aa:09:7d:af:78: 76:d7:bb:15:02:84:10:47:b5:ba:80:9c:83:4b:ba: 4a:88:6c:c9:7b:71:ae:f6:fc:f0:b3:7b:a8:e5:c3: 16:72:d9:de:7d:1b:61:1f:86:32:fc:da:8a:c7:77: d2:bd:27:7c:53:c8:7e:52:da:8b:65:3c:3a:1b:0a: a7:8e:df:f8:66:84:85:56:b5:cd:cf:4a:03:5d:5b: 4b:f1:9a:0d:bc:7f:fd:d5:47:47:cc:ea:3b:df:b5: e9:49:35:77:a4:84:8f:17:9f:9f:e6:d3:0c:f1:2a: 35:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:05:58:72:6F:E8:F9:56:C0:7B:21:97:8E:6E:3C:AE:1D:87:16:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b74eb1d1-e9e1-3ab6-a0a3-b7a3ead3cb45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:46:ba:3e:0e:25:41:34:bf:01:de:52:82:6a:2e:a6:79:df: 9a:5f:93:51:1c:6f:5f:2e:ca:41:9d:37:a6:91:df:88:85:3b: f1:45:ab:15:2b:2b:a7:fe:53:9b:24:8a:40:76:9e:7e:89:68: 4d:61:db:ac:79:e9:36:77:ac:3c:03:93:50:7d:fc:7a:25:f6: ca:c0:d7:21:60:c7:7e:be:d7:66:71:4b:80:4e:63:64:50:d1: b0:d9:f7:45:75:a2:20:46:fe:35:d3:64:d2:ac:9d:58:7a:29: 67:cb:06:7d:bf:56:f7:07:da:b6:1c:e0:f8:ee:06:f2:b3:3c: 41:a5:82:5d:64:bc:9c:42:29:0f:d3:84:53:50:37:6b:ca:41: fe:45:dc:a2:15:11:3e:a5:b1:e7:4e:e9:92:2a:4b:47:db:57: b2:a1:d4:73:f5:0a:7a:b5:74:88:89:bb:60:41:50:c1:66:26: 89:62:c8:64:95:48:19:b0:7a:80:c0:10:e8:0b:8e:91:eb:80: a8:97:81:54:a8:8d:76:b0:ef:43:12:10:24:7a:90:ec:22:ef: 69:0f:2c:7a:97:cc:35:23:0b:07:da:f1:0d:64:04:3f:29:36: 2c:86:49:ab:67:4e:5e:5f:2f:51:18:3c:0b:f0:55:ef:dc:2d: 04:99:66:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupL611TcnY/a0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NGM1MDA5MDYtZjQ1ZS00ZmIyLTkwM2MtNDU0NmM5YmNhN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpL9yE2Wlh0PwDgaIonAYwcUvEVpLuwZUI2x wH6AfAyGOcY0ZBurjKbwWIiitpRAIGfvXzPYSDjOwYoxPsgQXYCHx5Ywoo4dp99I EYBuMdpHu7qlmM+5n7surZNyYNWyu4qgNJtW9OLwRIWsJgMzLt78xxs2T21CZCVX WAgwMsp7h2a9oGeJMD6+qqVYLgAGqgl9r3h217sVAoQQR7W6gJyDS7pKiGzJe3Gu 9vzws3uo5cMWctnefRthH4Yy/NqKx3fSvSd8U8h+UtqLZTw6Gwqnjt/4ZoSFVrXN z0oDXVtL8ZoNvH/91UdHzOo737XpSTV3pISPF5+f5tMM8So1HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkFWHJv6PlWwHshl45uPK4dhxbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjc0ZWIxZDEtZTllMS0z YWI2LWEwYTMtYjdhM2VhZDNjYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBGuj4OJUE0vwHeUoJqLqZ535pfk1Ecb18uykGdN6aR34iFO/FFqxUr K6f+U5skikB2nn6JaE1h26x56TZ3rDwDk1B9/Hol9srA1yFgx36+12ZxS4BOY2RQ 0bDZ90V1oiBG/jXTZNKsnVh6KWfLBn2/VvcH2rYc4PjuBvKzPEGlgl1kvJxCKQ/T hFNQN2vKQf5F3KIVET6lsedO6ZIqS0fbV7Kh1HP1Cnq1dIiJu2BBUMFmJoliyGSV SBmweoDAEOgLjpHrgKiXgVSojXaw70MSECR6kOwi72kPLHqXzDUjCwfa8Q1kBD8p NiyGSatnTl5fL1EYPAvwVe/cLQSZZro= -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:02 2025 by rpki-client