$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b91f8282-6184-342a-9741-5fbdb9352f81.roa File: b91f8282-6184-342a-9741-5fbdb9352f81.roa (raw, json) Hash identifier: Qjx6E8XBIvLj/wsJUAJzpseAm6hR83M9psGjFApVFts= Subject key identifier: AC:BD:6B:75:0F:E0:42:AD:59:58:DE:AA:86:2F:FF:DD:26:41:75:F7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A878408810C143D2B6BC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b91f8282-6184-342a-9741-5fbdb9352f81.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:87:84:08:81:0c:14:3d:2b:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=f96d38fe-d2ba-489f-8a7a-92124309ad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:c9:41:d5:a4:eb:7b:98:79:55:33:9f:f2: 22:25:cb:d1:0d:ff:8e:50:f8:08:01:8b:24:96:25: df:1a:06:0f:c4:de:fa:ea:1a:94:08:33:b6:08:56: 72:28:6f:c1:b6:a6:39:6a:ce:a0:0c:db:71:e5:79: 1d:63:24:a4:37:ff:82:70:6e:39:32:d1:61:a6:9e: 69:3b:be:ba:97:32:7d:20:7b:35:f5:23:70:88:31: 5c:8c:7b:bf:8c:dd:f0:04:77:c5:9b:fd:1f:58:2a: d8:18:f7:01:98:cd:4c:ff:9e:bc:3b:30:ab:78:50: df:91:e9:8c:1a:5a:00:17:75:7b:13:f3:b0:e1:1d: fb:26:7a:37:b0:a6:77:c8:9c:31:87:b3:63:e5:16: 68:31:67:57:8d:b7:36:9b:a6:84:a7:40:18:d5:68: 93:94:70:26:33:5b:ee:2e:d1:68:93:1d:50:9c:2a: 89:8b:7a:f9:2d:a9:f5:63:8f:63:50:77:b5:71:c3: e9:38:4a:c2:a0:18:b0:db:02:de:4e:86:de:2a:5f: 9e:17:6a:5e:3e:84:23:dd:4b:1b:d9:44:e7:2d:f0: 0d:53:f7:16:38:23:a2:f6:e1:2b:bd:7e:cf:30:ac: f2:16:6b:b4:74:35:39:6b:9a:66:33:35:1b:02:e5: 49:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:6B:75:0F:E0:42:AD:59:58:DE:AA:86:2F:FF:DD:26:41:75:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b91f8282-6184-342a-9741-5fbdb9352f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e1:f5:3e:27:14:f4:7b:e6:72:8e:10:d6:bc:6d:6d:46:33: 21:84:76:99:00:a4:3d:2a:12:66:e5:a7:05:7c:e9:3d:b6:f6: 83:c0:41:74:ba:f6:72:c3:6f:c1:ab:68:29:80:70:83:75:59: df:c0:ad:ee:ed:1b:91:36:20:dc:02:07:cc:3c:9c:c0:62:4b: 99:1b:7f:79:a6:7d:5e:3f:a7:4e:1f:ed:4d:39:db:b8:3a:dd: ac:69:70:00:69:b8:80:5c:34:92:95:68:d1:5b:c7:74:99:67: 02:ff:76:2e:11:cf:a1:68:52:78:57:9d:dd:5e:88:81:2b:87: b3:d6:0b:c0:1a:61:0a:ad:94:ac:67:c8:ab:c9:29:9a:95:3b: e2:d0:e4:47:9e:6d:45:6b:86:da:52:02:5a:61:c1:85:34:d1: ba:a5:c9:81:98:05:b7:da:ff:61:11:bb:db:8f:18:a5:86:6c: a4:8a:43:cc:a0:0d:20:84:4b:17:18:4f:25:92:3f:f2:f1:20: ad:01:45:1b:67:09:2a:bd:b5:5b:0e:72:6f:0d:01:66:fd:ae: 1a:69:e6:ac:af:40:de:04:d2:e0:99:36:ee:38:13:f5:94:4d: 33:64:fa:da:d4:ce:ff:a3:99:67:34:ad:a5:86:ee:c1:af:0c: 33:8d:54:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoeECIEMFD0ra8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk Zjk2ZDM4ZmUtZDJiYS00ODlmLThhN2EtOTIxMjQzMDlhZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sXJQdWk63uYeVUzn/IiJcvRDf+OUPgIAYsk liXfGgYPxN766hqUCDO2CFZyKG/BtqY5as6gDNtx5XkdYySkN/+CcG45MtFhpp5p O766lzJ9IHs19SNwiDFcjHu/jN3wBHfFm/0fWCrYGPcBmM1M/568OzCreFDfkemM GloAF3V7E/Ow4R37Jno3sKZ3yJwxh7Nj5RZoMWdXjbc2m6aEp0AY1WiTlHAmM1vu LtFokx1QnCqJi3r5Lan1Y49jUHe1ccPpOErCoBiw2wLeTobeKl+eF2pePoQj3Usb 2UTnLfANU/cWOCOi9uErvX7PMKzyFmu0dDU5a5pmMzUbAuVJ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy9a3UP4EKtWVjeqoYv/90mQXX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjkxZjgyODItNjE4NC0z NDJhLTk3NDEtNWZiZGI5MzUyZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPh9T4nFPR75nKOENa8bW1GMyGEdpkApD0qEmblpwV86T229oPAQXS6 9nLDb8GraCmAcIN1Wd/Are7tG5E2INwCB8w8nMBiS5kbf3mmfV4/p04f7U0527g6 3axpcABpuIBcNJKVaNFbx3SZZwL/di4Rz6FoUnhXnd1eiIErh7PWC8AaYQqtlKxn yKvJKZqVO+LQ5EeebUVrhtpSAlphwYU00bqlyYGYBbfa/2ERu9uPGKWGbKSKQ8yg DSCESxcYTyWSP/LxIK0BRRtnCSq9tVsOcm8NAWb9rhpp5qyvQN4E0uCZNu44E/WU TTNk+trUzv+jmWc0raWG7sGvDDONVEA= -----END CERTIFICATE-----Generated at Sat Jun 7 05:04:46 2025 by rpki-client