$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c411adeb-7dc7-3c74-ba66-74a28916c12b.roa File: c411adeb-7dc7-3c74-ba66-74a28916c12b.roa (raw, json) Hash identifier: oOeC/dxZI3QENI4Tu3LMvajOazlU6dQl1rDnrutrlU4= Subject key identifier: 40:43:57:95:79:55:39:FC:D9:BB:EE:EB:40:D4:83:C1:2D:E2:8F:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8883EE287C7B24782600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c411adeb-7dc7-3c74-ba66-74a28916c12b.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:88:83:ee:28:7c:7b:24:78:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=97334281-e047-43ff-940b-c9b852ef554d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:97:fe:da:62:cf:c1:2c:fa:b6:94:21:b7: 8f:cf:95:c8:dc:66:4f:e1:a9:fc:31:55:b6:57:88: 91:5e:62:f6:bb:1f:d4:03:83:a7:ee:b6:f1:4d:2e: e1:c9:3c:f7:ed:e2:d6:81:a0:37:8a:ec:52:9b:2c: 52:95:eb:b4:1c:42:1d:4a:12:ef:9e:f6:9a:13:d3: f0:e6:04:fc:35:e6:5a:6c:23:8a:f9:7f:27:17:0b: 5d:a5:fa:ee:80:64:fa:4e:92:1b:a1:a2:89:91:86: 27:62:15:6c:79:c4:c6:3c:c6:39:12:02:67:59:ba: 19:5a:8f:3f:01:cf:08:98:04:1c:4e:fb:b7:3b:c8: 30:f5:99:44:6c:a5:21:71:be:73:a2:32:ac:94:00: 70:1e:73:68:43:3a:ab:8b:b4:91:2c:18:67:ec:90: 85:8e:a7:67:3a:da:1f:af:11:92:62:e5:1c:f0:0a: 6f:34:ac:37:28:0b:5e:f5:a6:c8:e5:e7:ba:71:6b: c0:42:17:97:4e:a0:b5:da:60:2e:47:47:93:e5:bd: 14:ce:7a:6a:0f:69:91:8f:c2:7c:2a:43:7b:1b:1d: da:08:60:de:e6:0e:56:a3:62:64:92:63:53:0c:55: 63:2e:81:47:ad:ff:b1:1e:94:84:61:d8:3d:cb:82: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:43:57:95:79:55:39:FC:D9:BB:EE:EB:40:D4:83:C1:2D:E2:8F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c411adeb-7dc7-3c74-ba66-74a28916c12b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:51:7f:83:46:22:af:b2:45:0d:f8:d7:0e:bc:31:8d:6e:5c: 35:d5:6f:0d:dd:a3:c4:58:75:65:67:ac:8f:23:62:4c:93:92: c9:d9:26:18:a6:8f:1d:83:dd:c8:f7:b0:9b:e8:c2:27:58:a6: 61:5a:d6:cd:a9:c2:75:08:7d:c4:8a:0f:21:fe:a4:0a:09:0a: 50:7a:d7:a7:7b:0a:45:12:3d:03:a2:e2:9a:38:cd:99:e9:da: 24:6c:02:82:6c:a7:c8:1e:40:17:13:07:a2:1d:b2:0f:e1:5c: 25:85:ed:2a:e6:6b:9e:96:60:e1:60:c8:40:b6:0c:e2:02:42: 90:4b:68:8c:78:f6:9a:7e:a7:ee:7d:74:b7:18:5e:c0:54:67: 85:73:46:49:45:fc:a4:a8:42:bb:24:e2:5f:31:4c:9a:2b:89: 8b:46:c6:05:95:5c:67:af:28:c7:3d:19:11:14:c1:2e:1f:8b: 15:5f:ab:e5:03:9b:6c:86:8a:13:8d:39:1b:2c:30:a6:d7:88: da:24:9f:58:e1:5c:d3:e6:d9:a3:c1:dd:07:dc:f3:da:08:a3: ac:e3:c2:8d:1a:b9:ec:c1:d5:26:5b:41:b1:08:b5:a7:25:a8: fa:c7:d1:6c:c8:e2:4f:5e:78:07:ee:73:60:37:56:61:e4:6b: 83:cc:ab:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoiD7ih8eyR4JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk OTczMzQyODEtZTA0Ny00M2ZmLTk0MGItYzliODUyZWY1NTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJSX/tpiz8Es+raUIbePz5XI3GZP4an8MVW2 V4iRXmL2ux/UA4On7rbxTS7hyTz37eLWgaA3iuxSmyxSleu0HEIdShLvnvaaE9Pw 5gT8NeZabCOK+X8nFwtdpfrugGT6TpIboaKJkYYnYhVsecTGPMY5EgJnWboZWo8/ Ac8ImAQcTvu3O8gw9ZlEbKUhcb5zojKslABwHnNoQzqri7SRLBhn7JCFjqdnOtof rxGSYuUc8ApvNKw3KAte9abI5ee6cWvAQheXTqC12mAuR0eT5b0UznpqD2mRj8J8 KkN7Gx3aCGDe5g5Wo2JkkmNTDFVjLoFHrf+xHpSEYdg9y4JCkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBDV5V5VTn82bvu60DUg8Et4o9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzQxMWFkZWItN2RjNy0z Yzc0LWJhNjYtNzRhMjg5MTZjMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9Rf4NGIq+yRQ341w68MY1uXDXVbw3do8RYdWVnrI8jYkyTksnZJhim jx2D3cj3sJvowidYpmFa1s2pwnUIfcSKDyH+pAoJClB616d7CkUSPQOi4po4zZnp 2iRsAoJsp8geQBcTB6Idsg/hXCWF7Srma56WYOFgyEC2DOICQpBLaIx49pp+p+59 dLcYXsBUZ4VzRklF/KSoQrsk4l8xTJoriYtGxgWVXGevKMc9GREUwS4fixVfq+UD m2yGihONORssMKbXiNokn1jhXNPm2aPB3Qfc89oIo6zjwo0auezB1SZbQbEItacl qPrH0WzI4k9eeAfuc2A3VmHka4PMq2U= -----END CERTIFICATE-----Generated at Fri Jun 6 16:54:31 2025 by rpki-client