$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa File: dbc3d250-01d9-3b52-8510-66a53acb449e.roa (raw, json) Hash identifier: lSCK2HtQZ84/DRTJ418LAgiK23+6UNRcK/fQfB02KLM= Subject key identifier: EF:0B:03:60:22:69:A7:24:27:A1:37:F7:DB:49:19:C6:3E:8B:6C:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E654FD172D9B7C75F1AD8600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.70.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:fd:17:2d:9b:7c:75:f1:ad:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=2bf05003-e5f7-46fc-aa6a-1ed7cf31183b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:1a:e3:c9:2b:50:9a:b2:52:25:ed:77:1a: 8a:82:82:29:23:76:fb:9b:31:a3:c7:1a:1f:75:d4: b2:93:b1:32:7d:51:58:13:43:25:b4:db:15:83:60: 85:f5:fc:ec:48:16:6a:bc:59:17:6d:9f:e6:a3:65: 54:61:18:03:97:19:ce:74:ae:d4:51:d6:70:ce:3a: 2c:f7:d5:34:ef:41:4f:d0:92:df:ae:dc:86:b4:70: ab:b7:90:90:95:5e:28:0f:24:57:ca:0b:d1:d3:ae: 70:4e:5a:29:81:d6:22:e8:1a:56:20:37:1b:ab:f0: 97:5e:97:8a:b5:83:64:f1:42:32:0c:f2:57:d6:3f: 08:20:ef:c1:c1:fe:b1:67:24:3f:01:c0:b6:4e:00: 7d:4f:00:da:54:10:bc:77:94:ee:c5:c7:f6:47:f3: bf:f0:26:cf:bf:af:a3:55:48:30:17:1f:2e:6b:c1: c6:ad:d0:c3:21:b2:c1:c6:8a:2f:0b:12:89:89:9f: e9:61:e0:81:78:c2:29:87:df:f6:5a:e9:83:61:5b: d5:38:a0:8f:9d:e5:fa:20:45:c6:4e:94:12:99:48: 1d:2b:92:db:fe:8a:80:77:74:65:3a:b7:00:69:c9: c4:f4:e4:11:88:6e:10:1c:34:ac:22:e3:75:82:aa: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0B:03:60:22:69:A7:24:27:A1:37:F7:DB:49:19:C6:3E:8B:6C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:59:5f:f3:6b:83:3f:c9:72:64:87:df:d7:52:4c:91:8f:5f: 60:70:bb:15:92:7e:91:6b:cc:a1:62:74:3b:1a:36:4b:5b:0a: 25:9d:a7:85:c4:40:0b:3f:37:f5:fc:a4:fa:12:99:3b:4d:c3: bf:48:59:61:44:92:24:d5:56:c5:23:8c:82:e7:ae:72:a3:1b: b0:06:75:b0:3b:e2:e1:42:b9:ba:ac:96:cb:10:54:6c:b5:ff: 66:a9:a6:23:e3:84:d5:63:67:1a:69:5e:e7:ea:b3:ac:48:9c: dc:69:cf:27:c7:da:9a:a3:13:3e:a6:ea:d9:90:0d:45:23:f6: 39:3b:82:fa:d8:b4:3a:67:57:5f:91:05:fc:5e:9f:3d:a8:ce: 6e:d0:d5:72:e6:bb:27:4e:76:32:25:d8:2e:4c:0a:8f:5d:f9: bc:2a:b3:67:e0:73:65:5d:d7:4e:25:75:7d:05:0a:7b:c3:d5: 01:8a:1b:13:f1:bc:9f:06:68:60:b7:6b:25:9f:5d:cf:ab:a7: f0:94:a6:2a:70:64:f3:a2:46:a1:d1:c2:8e:33:2b:25:01:42: c1:43:e1:aa:63:d9:97:9f:15:1f:0c:72:76:72:c2:5b:69:0a: c6:c4:ed:9b:c9:54:bd:ec:c9:ee:49:84:bd:4a:2d:31:d0:90: 2d:37:c4:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVP0XLZt8dfGthgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MmJmMDUwMDMtZTVmNy00NmZjLWFhNmEtMWVkN2NmMzExODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSsa48krUJqyUiXtdxqKgoIpI3b7mzGjxxof ddSyk7EyfVFYE0MltNsVg2CF9fzsSBZqvFkXbZ/mo2VUYRgDlxnOdK7UUdZwzjos 99U070FP0JLfrtyGtHCrt5CQlV4oDyRXygvR065wTlopgdYi6BpWIDcbq/CXXpeK tYNk8UIyDPJX1j8IIO/Bwf6xZyQ/AcC2TgB9TwDaVBC8d5Tuxcf2R/O/8CbPv6+j VUgwFx8ua8HGrdDDIbLBxoovCxKJiZ/pYeCBeMIph9/2WumDYVvVOKCPneX6IEXG TpQSmUgdK5Lb/oqAd3RlOrcAacnE9OQRiG4QHDSsIuN1gqqB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8LA2AiaackJ6E399tJGcY+i2zIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGJjM2QyNTAtMDFkOS0z YjUyLTg1MTAtNjZhNTNhY2I0NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1ZX/Nrgz/JcmSH39dSTJGPX2BwuxWSfpFrzKFidDsaNktbCiWdp4XE QAs/N/X8pPoSmTtNw79IWWFEkiTVVsUjjILnrnKjG7AGdbA74uFCubqslssQVGy1 /2appiPjhNVjZxppXufqs6xInNxpzyfH2pqjEz6m6tmQDUUj9jk7gvrYtDpnV1+R Bfxenz2ozm7Q1XLmuydOdjIl2C5MCo9d+bwqs2fgc2Vd104ldX0FCnvD1QGKGxPx vJ8GaGC3ayWfXc+rp/CUpipwZPOiRqHRwo4zKyUBQsFD4apj2ZefFR8McnZywltp CsbE7ZvJVL3sye5JhL1KLTHQkC03xCs= -----END CERTIFICATE-----Generated at Fri Jun 6 16:41:10 2025 by rpki-client