$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2baaa42-f7aa-3e66-a527-f7a41a923145.roa File: d2baaa42-f7aa-3e66-a527-f7a41a923145.roa (raw, json) Hash identifier: 1W9GarZjnEivpLA8wcd+PymZKAJFNsrG2gRuLfEofY4= Subject key identifier: FB:57:69:04:71:E1:6A:77:CC:49:15:EF:15:71:02:DB:A5:40:51:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A945A47C6C1A0F8D3A380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2baaa42-f7aa-3e66-a527-f7a41a923145.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.70.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:94:5a:47:c6:c1:a0:f8:d3:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=fffa9641-86ef-4367-bdd2-0cccc5dc15b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:c3:72:55:3b:3d:3a:81:56:e5:8e:a6:11: 0e:95:15:46:cd:42:a8:78:54:be:90:09:d5:e6:d1: 64:22:3b:be:49:bb:de:dd:77:6f:ab:cf:0a:b8:d6: c7:01:66:88:b6:52:9f:96:bd:06:28:01:35:cf:0e: e7:01:12:23:d7:0a:f3:78:5c:99:ba:57:f1:a3:38: fa:62:c7:cd:38:de:10:3a:e9:43:30:34:76:a1:a4: 56:47:9b:e6:90:bd:b4:4d:58:78:dc:4b:ea:a7:61: 05:83:28:da:29:40:32:a5:e2:7b:14:e0:d2:fa:f5: 82:eb:a4:51:93:45:06:7d:65:76:f8:11:0a:d5:a4: 2a:55:d6:c2:8a:40:ae:cf:4f:da:47:65:24:c8:31: ac:9e:86:a2:72:c7:41:65:1b:48:d5:3c:64:41:34: b6:fd:56:04:31:5f:11:db:a8:48:c6:3f:bc:73:fa: d2:40:0e:20:a0:f5:e4:f2:24:52:df:08:eb:19:95: b1:a5:13:2d:10:e3:d3:e0:ea:1f:34:50:eb:0a:76: f9:bd:84:af:a3:93:8a:95:69:4d:f5:84:af:89:ab: cf:22:98:1d:2c:f8:c1:aa:9a:33:1e:ee:42:ff:85: a5:f1:e5:85:fc:16:7d:96:86:d4:b8:19:17:7d:f4: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:57:69:04:71:E1:6A:77:CC:49:15:EF:15:71:02:DB:A5:40:51:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2baaa42-f7aa-3e66-a527-f7a41a923145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d0:a7:b9:47:1c:be:26:6c:44:3d:52:ab:a5:17:d8:4f:a9: 82:b5:b5:40:30:21:44:37:ee:fc:9b:97:82:1a:29:f5:55:73: d6:87:a6:f6:41:ff:7e:a6:74:76:00:a8:32:89:9d:60:65:8e: f7:a5:62:c3:b3:e3:cd:4f:60:7f:18:b4:af:7a:ec:3f:64:99: 85:94:d4:ef:b0:1c:d7:8b:bf:f7:a1:bb:e3:32:46:70:33:88: 0e:85:6e:f2:89:66:05:3a:b5:42:ce:4b:d5:8d:e1:82:7d:b7: 06:24:97:a4:29:9d:f6:35:7a:76:f0:52:3f:11:70:19:18:d0: 53:3b:2c:e6:0c:a7:b7:24:37:72:74:76:95:72:4b:d3:76:8b: 5c:af:c3:84:80:b0:94:4c:ec:c1:00:e6:1b:b4:3f:4b:6c:b6: 3e:2b:18:cc:28:43:80:24:1d:f3:51:86:50:c5:57:3f:ab:e1: b2:a7:cc:c8:c3:f0:70:cd:d4:4a:5c:d6:cc:6a:db:b8:49:a4: 16:96:3e:0b:e3:fc:59:ec:20:25:9f:fe:25:12:e7:90:b7:c4: 6e:76:49:c6:9a:b6:f9:e5:e5:ba:1b:a6:5b:d8:9e:68:d4:a5: 97:50:4a:db:cf:d3:c4:14:e2:26:c6:3a:f5:32:e4:53:ca:e8: a1:6d:e4:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpRaR8bBoPjTo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk ZmZmYTk2NDEtODZlZi00MzY3LWJkZDItMGNjY2M1ZGMxNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlALDclU7PTqBVuWOphEOlRVGzUKoeFS+kAnV 5tFkIju+Sbve3Xdvq88KuNbHAWaItlKflr0GKAE1zw7nARIj1wrzeFyZulfxozj6 YsfNON4QOulDMDR2oaRWR5vmkL20TVh43Evqp2EFgyjaKUAypeJ7FODS+vWC66RR k0UGfWV2+BEK1aQqVdbCikCuz0/aR2UkyDGsnoaicsdBZRtI1TxkQTS2/VYEMV8R 26hIxj+8c/rSQA4goPXk8iRS3wjrGZWxpRMtEOPT4OofNFDrCnb5vYSvo5OKlWlN 9YSviavPIpgdLPjBqpozHu5C/4Wl8eWF/BZ9lobUuBkXffRKyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtXaQRx4Wp3zEkV7xVxAtulQFF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDJiYWFhNDItZjdhYS0z ZTY2LWE1MjctZjdhNDFhOTIzMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/Qp7lHHL4mbEQ9UqulF9hPqYK1tUAwIUQ37vybl4IaKfVVc9aHpvZB /36mdHYAqDKJnWBljvelYsOz481PYH8YtK967D9kmYWU1O+wHNeLv/ehu+MyRnAz iA6FbvKJZgU6tULOS9WN4YJ9twYkl6QpnfY1enbwUj8RcBkY0FM7LOYMp7ckN3J0 dpVyS9N2i1yvw4SAsJRM7MEA5hu0P0tstj4rGMwoQ4AkHfNRhlDFVz+r4bKnzMjD 8HDN1Epc1sxq27hJpBaWPgvj/FnsICWf/iUS55C3xG52Scaatvnl5bobplvYnmjU pZdQStvP08QU4ibGOvUy5FPK6KFt5E0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:29 2025 by rpki-client