$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa File: cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa (raw, json) Hash identifier: fNnCUHM6UsEXrY2Of7S+RwrPJfyOYU/QCDnxS5SGh74= Subject key identifier: D8:CA:11:A8:77:09:E8:AE:4B:08:40:25:D9:88:7F:9C:ED:A6:B0:59 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8546AD3B18D2BA84668270 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:46:ad:3b:18:d2:ba:84:66:82:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=a14d3994-0d1d-4b26-9032-181947f1a328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:d9:4b:ef:d8:28:6b:a5:59:93:86:f7:41: dd:37:2a:8b:f4:f4:52:d0:36:76:79:64:fe:f4:c9: f6:a0:6d:06:1a:e7:29:51:74:17:53:aa:53:57:70: ea:90:bc:9e:6c:9f:3f:49:31:87:24:bb:bc:af:81: 23:99:dd:ee:e6:96:f3:1a:72:9e:67:cf:da:db:d5: 57:25:dd:b0:d0:7c:6f:ef:33:10:29:0a:c0:bd:9a: 45:9f:85:1f:ed:cd:76:8a:d1:0c:77:38:51:ba:c2: e5:9d:d6:bc:7f:57:97:1a:da:16:76:8c:41:49:8d: be:36:c2:c1:22:fa:97:e4:ad:de:21:69:94:c7:58: ee:7c:10:57:ed:c1:f8:a0:12:77:fa:b2:6d:e1:21: 1a:a2:4c:8e:4e:15:f0:1f:ce:93:d9:d7:0b:d5:e2: 9e:6d:f6:96:ac:76:4a:c4:60:b8:1b:b3:d2:39:7b: ff:10:3b:49:3f:4e:cd:7b:44:1c:8a:ee:3e:99:00: 68:3f:af:ef:53:ac:60:b9:32:d8:56:82:fc:ad:ce: 3c:dc:58:f8:57:73:70:cd:de:49:d4:8c:41:8c:12: a1:60:5d:dc:83:a4:fe:22:47:c2:ce:12:c7:99:bd: e8:7a:48:76:0c:52:a2:c6:8a:3a:9e:6e:cb:69:d1: 82:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CA:11:A8:77:09:E8:AE:4B:08:40:25:D9:88:7F:9C:ED:A6:B0:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:69:17:b3:25:76:9d:4a:35:43:a9:ed:de:f8:2f:fc:ff:33: b9:34:57:d4:b8:76:47:30:2b:fe:fe:6d:df:8f:3c:0e:9c:3d: 2d:20:af:bb:86:03:96:88:47:46:1e:4c:93:fc:56:a6:7b:a9: 2d:a0:bc:c0:87:4a:67:68:69:64:a0:3b:61:bf:f0:f2:78:fb: f0:9d:7e:42:a5:05:a7:4b:8b:46:05:84:6d:65:59:1a:f8:d3: 74:7d:80:91:5f:60:f9:f7:83:98:89:85:d9:6b:d6:a7:e7:b9: 2a:57:a7:75:72:8d:16:d9:df:19:08:89:a1:95:cd:a1:9c:30: 92:15:e0:79:d3:0b:f4:e0:e6:50:57:1a:06:43:d5:a6:85:d4: 70:68:b9:04:23:bd:65:18:74:72:43:73:5e:58:cb:58:15:5d: a5:60:56:2f:6c:b3:42:dc:b9:d4:b2:65:e6:57:6f:84:8b:ae: 0b:b6:a9:28:b5:d8:8e:55:82:d3:8a:59:e7:7d:fd:fb:98:99: 56:d3:f4:e9:2b:a0:fe:f2:eb:59:3a:58:a5:5f:02:1c:8f:91: b5:c9:d7:02:49:c2:91:cb:7a:9d:19:50:ed:0d:72:34:ab:0a: cf:71:12:a0:8c:e8:bf:38:2c:e3:23:5a:82:78:f1:a2:aa:87: 92:cd:d3:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUatOxjSuoRmgnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk YTE0ZDM5OTQtMGQxZC00YjI2LTkwMzItMTgxOTQ3ZjFhMzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRHZS+/YKGulWZOG90HdNyqL9PRS0DZ2eWT+ 9Mn2oG0GGucpUXQXU6pTV3DqkLyebJ8/STGHJLu8r4Ejmd3u5pbzGnKeZ8/a29VX Jd2w0Hxv7zMQKQrAvZpFn4Uf7c12itEMdzhRusLlnda8f1eXGtoWdoxBSY2+NsLB IvqX5K3eIWmUx1jufBBX7cH4oBJ3+rJt4SEaokyOThXwH86T2dcL1eKebfaWrHZK xGC4G7PSOXv/EDtJP07Ne0Qciu4+mQBoP6/vU6xguTLYVoL8rc483Fj4V3Nwzd5J 1IxBjBKhYF3cg6T+IkfCzhLHmb3oekh2DFKixoo6nm7LadGC3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjKEah3CeiuSwhAJdmIf5ztprBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2QyMGM0MDQtY2M2OS0z YmI5LWI0M2ItNDBlNWVjMTI1ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxpF7Mldp1KNUOp7d74L/z/M7k0V9S4dkcwK/7+bd+PPA6cPS0gr7uG A5aIR0YeTJP8VqZ7qS2gvMCHSmdoaWSgO2G/8PJ4+/CdfkKlBadLi0YFhG1lWRr4 03R9gJFfYPn3g5iJhdlr1qfnuSpXp3VyjRbZ3xkIiaGVzaGcMJIV4HnTC/Tg5lBX GgZD1aaF1HBouQQjvWUYdHJDc15Yy1gVXaVgVi9ss0LcudSyZeZXb4SLrgu2qSi1 2I5VgtOKWed9/fuYmVbT9OkroP7y61k6WKVfAhyPkbXJ1wJJwpHLep0ZUO0NcjSr Cs9xEqCM6L84LOMjWoJ48aKqh5LN02o= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:01 2025 by rpki-client