$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ce692489-16bd-3110-9ea1-fc66f9641029.roa File: ce692489-16bd-3110-9ea1-fc66f9641029.roa (raw, json) Hash identifier: zID1w7votcRujaZi4YoQl5VehL61HIx3WbaYJfDMn0g= Subject key identifier: DB:26:34:FC:01:98:3E:55:65:CA:5D:89:A0:A7:0E:3C:D8:63:DB:CE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA85375DDCA1F0E47849E880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ce692489-16bd-3110-9ea1-fc66f9641029.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:37:5d:dc:a1:f0:e4:78:49:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=99f08af7-a4ff-4398-a0bb-df76fc043cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:45:f5:3a:62:a0:ec:57:b2:d3:50:41:36: 04:f0:ea:6c:ae:b3:f2:b2:58:3f:2a:ec:8d:5a:81: 71:83:4f:84:84:7b:ab:80:61:3e:37:9f:7e:d6:d8: cb:79:a4:ab:54:26:56:5e:1b:4c:6b:ec:03:e7:40: 86:45:1c:f9:ac:f9:51:04:22:11:40:5c:95:ce:bd: e3:c3:c7:4b:83:8b:ec:5f:a8:45:d5:b5:78:dc:83: ee:d9:99:6d:5e:ab:72:ec:92:7a:13:e2:30:4e:ea: 76:7b:a1:59:07:bf:77:75:a4:74:65:32:dd:0d:b5: 1c:e8:79:5c:22:58:2c:5a:d5:46:2f:d1:70:7f:81: 04:b9:97:1a:2f:f3:d4:08:af:eb:51:24:ad:0c:98: 33:bf:ba:66:e7:63:f3:db:eb:0d:c1:b6:de:c1:45: 46:fd:2f:d7:ea:22:76:e1:ab:ee:b2:d3:82:56:47: d8:2f:99:0a:f2:70:ea:d0:0d:8e:19:ae:28:80:29: a9:fc:0f:61:c8:c0:c5:bc:07:d8:bc:6b:b6:6d:61: 9e:58:7e:e7:34:3f:bb:db:a3:76:21:14:7b:4a:31: 47:1e:ea:b4:73:29:ab:98:ca:ff:d6:10:fb:a3:9b: a7:72:a7:c0:8d:3a:a3:16:6f:5f:03:c4:26:98:11: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:26:34:FC:01:98:3E:55:65:CA:5D:89:A0:A7:0E:3C:D8:63:DB:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ce692489-16bd-3110-9ea1-fc66f9641029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:cb:9b:0c:5c:0f:13:73:30:3b:24:6c:36:f8:fc:f5:cd:a3: 75:cd:83:bd:ea:56:bb:57:6a:a6:70:c6:ca:6b:0f:30:73:09: 69:a9:74:d2:c3:62:e0:73:9a:8e:29:55:81:fa:9f:4d:e6:f6: 67:b2:d3:4b:4b:69:f3:6a:99:16:58:f4:29:18:3a:38:40:9d: 54:da:0c:d5:f0:e0:11:73:7a:85:6a:1e:ef:e8:ba:11:46:ed: bd:94:d6:ec:f9:ee:61:af:29:42:44:a5:21:73:3a:b2:07:33: 6a:93:f4:09:41:0f:45:ec:6d:54:b7:31:78:0d:41:d7:d5:bc: 39:7d:4f:c4:2b:f7:4f:85:df:0e:d4:cd:74:ba:2c:8b:f5:8e: 9d:01:20:36:7b:09:74:46:5a:ca:b4:18:ec:a5:26:b1:b6:8d: b6:26:a6:45:8f:d2:61:89:83:1a:0a:4e:40:ad:01:f4:61:14: 24:7f:69:64:53:99:19:92:b4:cf:ac:19:84:32:5c:a7:a8:85: db:ba:bf:90:83:04:6f:1e:56:7f:d5:41:46:97:3e:9e:19:3e: 02:ad:34:02:41:aa:d6:aa:8f:80:4b:31:29:49:56:64:e6:a0: d7:6f:04:c1:8e:12:63:17:1c:81:45:b4:64:5c:d1:6f:ca:87: 7e:00:bf:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTdd3KHw5HhJ6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk OTlmMDhhZjctYTRmZi00Mzk4LWEwYmItZGY3NmZjMDQzY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D5F9TpioOxXstNQQTYE8OpsrrPyslg/KuyN WoFxg0+EhHurgGE+N59+1tjLeaSrVCZWXhtMa+wD50CGRRz5rPlRBCIRQFyVzr3j w8dLg4vsX6hF1bV43IPu2ZltXqty7JJ6E+IwTup2e6FZB793daR0ZTLdDbUc6Hlc IlgsWtVGL9Fwf4EEuZcaL/PUCK/rUSStDJgzv7pm52Pz2+sNwbbewUVG/S/X6iJ2 4avustOCVkfYL5kK8nDq0A2OGa4ogCmp/A9hyMDFvAfYvGu2bWGeWH7nND+726N2 IRR7SjFHHuq0cymrmMr/1hD7o5uncqfAjTqjFm9fA8QmmBE1dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsmNPwBmD5VZcpdiaCnDjzYY9vOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2U2OTI0ODktMTZiZC0z MTEwLTllYTEtZmM2NmY5NjQxMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXLmwxcDxNzMDskbDb4/PXNo3XNg73qVrtXaqZwxsprDzBzCWmpdNLD YuBzmo4pVYH6n03m9mey00tLafNqmRZY9CkYOjhAnVTaDNXw4BFzeoVqHu/ouhFG 7b2U1uz57mGvKUJEpSFzOrIHM2qT9AlBD0XsbVS3MXgNQdfVvDl9T8Qr90+F3w7U zXS6LIv1jp0BIDZ7CXRGWsq0GOylJrG2jbYmpkWP0mGJgxoKTkCtAfRhFCR/aWRT mRmStM+sGYQyXKeohdu6v5CDBG8eVn/VQUaXPp4ZPgKtNAJBqtaqj4BLMSlJVmTm oNdvBMGOEmMXHIFFtGRc0W/Kh34Av4Q= -----END CERTIFICATE-----Generated at Sun Jun 8 21:34:47 2025 by rpki-client