$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa File: d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa (raw, json) Hash identifier: jfyBVE2CJTkEcnjKTvQrnV6upUhk8aPrVpXiTxYZf0U= Subject key identifier: 4C:6B:B4:58:A4:EF:AF:F5:75:68:BA:8F:79:8E:81:54:A1:35:83:21 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9DC813A719984A0C1160 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.64.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:9d:c8:13:a7:19:98:4a:0c:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=3b2e463d-4640-451c-85e1-fc3b703972d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:97:54:1d:65:e7:53:ec:71:dd:dc:57:41: d5:8b:64:e9:ce:cf:f0:68:fe:4f:a9:86:4e:91:42: b7:51:05:ce:67:39:45:35:20:95:56:00:9e:bb:fd: 0a:5a:71:b3:d8:67:b0:ed:b2:97:f3:e5:18:86:02: 3a:fa:ce:8e:40:e3:63:b5:2f:0c:e2:4e:e1:0d:8c: 5f:2b:f0:e5:6a:43:9a:9c:25:81:db:3c:9d:bd:1c: 97:a5:37:29:58:ba:c9:4e:36:94:81:07:1b:9a:9f: 8f:a6:3d:4a:84:c9:55:5e:55:71:97:a7:3f:f3:3e: fd:ad:e3:41:be:02:55:74:44:08:fb:37:4d:e8:27: ee:45:5b:44:2d:23:54:ff:b8:d1:d0:f3:30:09:65: 44:82:e3:12:66:c9:52:13:10:4e:cd:12:d9:6f:0b: 0f:cb:a3:e0:61:92:e2:fc:72:21:a5:9b:89:0c:d6: 13:df:f0:fe:8d:a4:a0:30:25:b9:b1:6a:47:2f:7d: d2:51:e2:30:ed:04:bc:63:c5:bd:b1:4f:b2:15:37: 60:48:5f:d4:30:2a:4d:1f:1e:82:24:16:45:21:76: 9b:3c:29:aa:ea:02:ae:b7:ce:9d:0f:67:fe:6c:4d: c8:88:4d:c3:6c:e1:f9:61:d1:3a:a9:af:7e:63:40: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6B:B4:58:A4:EF:AF:F5:75:68:BA:8F:79:8E:81:54:A1:35:83:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2c0f41e-f72f-30d5-9058-84029b6d64e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:82:55:fa:10:b3:ea:82:df:10:32:5e:89:ac:9e:94:40:60: 0e:4c:28:fb:e2:5d:04:09:b5:4c:45:f9:ec:85:37:f5:2a:94: 2a:3a:48:9e:21:72:42:52:99:e2:39:0c:be:96:41:ec:99:2a: 2e:a7:f1:80:e4:7e:d5:b9:0d:6a:46:60:2a:55:8b:28:2d:50: 20:8f:cd:3c:fb:d7:74:a4:70:81:cd:55:4b:d4:16:d1:03:0a: 58:4d:9f:5f:77:f5:a8:f7:9c:a0:c2:59:02:e2:ab:eb:65:03: 7e:8b:93:34:0d:f0:f2:b8:78:98:e5:80:aa:ad:35:ae:27:d8: e4:6b:ce:50:7c:91:73:c7:9d:6b:ce:76:8f:8f:d6:10:10:26: 60:e6:94:38:7f:c4:bb:c1:4e:d8:9e:73:89:47:3c:79:24:46: 02:f9:0a:44:6e:3f:f6:b4:1d:70:1b:a9:e1:49:b9:b5:d5:24: cc:74:12:22:96:ad:aa:49:70:f2:b6:da:b4:70:f4:22:4e:42: 2e:24:53:90:f1:50:cf:a7:a0:3f:fb:e2:6d:58:da:e5:24:37: 12:14:64:29:88:84:eb:8d:d3:10:84:6c:74:f2:4e:ad:13:98: 8a:8a:32:60:57:01:73:45:e3:c9:ca:5e:cc:6d:d8:4c:b9:a7: dd:24:4a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnup3IE6cZmEoMEWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk M2IyZTQ2M2QtNDY0MC00NTFjLTg1ZTEtZmMzYjcwMzk3MmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkGXVB1l51Pscd3cV0HVi2Tpzs/waP5PqYZO kUK3UQXOZzlFNSCVVgCeu/0KWnGz2Gew7bKX8+UYhgI6+s6OQONjtS8M4k7hDYxf K/DlakOanCWB2zydvRyXpTcpWLrJTjaUgQcbmp+Ppj1KhMlVXlVxl6c/8z79reNB vgJVdEQI+zdN6CfuRVtELSNU/7jR0PMwCWVEguMSZslSExBOzRLZbwsPy6PgYZLi /HIhpZuJDNYT3/D+jaSgMCW5sWpHL33SUeIw7QS8Y8W9sU+yFTdgSF/UMCpNHx6C JBZFIXabPCmq6gKut86dD2f+bE3IiE3DbOH5YdE6qa9+Y0DtMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExrtFik76/1dWi6j3mOgVShNYMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDJjMGY0MWUtZjcyZi0z MGQ1LTkwNTgtODQwMjliNmQ2NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCCVfoQs+qC3xAyXomsnpRAYA5MKPviXQQJtUxF+eyFN/UqlCo6SJ4h ckJSmeI5DL6WQeyZKi6n8YDkftW5DWpGYCpViygtUCCPzTz713SkcIHNVUvUFtED ClhNn1939aj3nKDCWQLiq+tlA36LkzQN8PK4eJjlgKqtNa4n2ORrzlB8kXPHnWvO do+P1hAQJmDmlDh/xLvBTtiec4lHPHkkRgL5CkRuP/a0HXAbqeFJubXVJMx0EiKW rapJcPK22rRw9CJOQi4kU5DxUM+noD/74m1Y2uUkNxIUZCmIhOuN0xCEbHTyTq0T mIqKMmBXAXNF48nKXsxt2Ey5p90kSr0= -----END CERTIFICATE-----Generated at Sat Jun 7 12:06:42 2025 by rpki-client