$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa File: dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa (raw, json) Hash identifier: 9Gaekbb79jXkT0Uxhm/7JG7av0xcmQP/VCtWHtpsN0U= Subject key identifier: 90:55:B7:4F:BA:C8:6A:F1:3F:F4:B4:9C:F2:33:42:DF:2F:79:84:57 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8549B01DAE9A2FDE030900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:49:b0:1d:ae:9a:2f:de:03:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=e3eadae7-f469-4031-934c-b16546ddc24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:7b:74:e5:b5:ad:b8:00:14:6c:3b:c1:8b: 68:90:92:87:ec:b6:aa:1f:69:54:74:51:7b:6b:18: ef:65:5f:e6:09:62:8e:9a:cb:db:89:75:9c:ea:24: 39:f6:8a:29:28:3d:e4:44:d7:8e:f9:61:ef:8c:f0: 54:d0:3c:9e:da:6b:d5:d1:78:08:64:c9:b7:2d:ed: 27:61:ed:61:9d:94:14:65:ce:0b:11:a9:bf:14:15: aa:56:f5:d5:d5:d5:40:03:86:d2:d2:26:f8:04:6f: ed:54:ef:64:4b:3c:8e:f0:59:3d:5e:2e:7e:c5:46: f1:4c:ea:09:b0:31:33:d4:85:e5:fd:cb:b6:1e:76: bd:25:15:5b:ca:5b:32:78:f6:95:78:69:27:a4:8c: d9:28:28:ab:6d:95:c3:e5:f0:e4:47:38:69:9f:95: 26:4c:e9:08:4e:6c:88:46:d9:f6:09:ef:29:ef:a9: e9:12:ee:29:de:dd:11:75:53:c2:21:f7:ed:4f:c6: 81:76:39:37:68:5e:3e:f5:78:f5:66:63:14:99:4f: 81:b0:c5:c5:a9:19:cf:fb:fc:0f:ae:27:04:d9:fa: 16:22:3d:3a:fd:08:34:8d:57:96:c6:0e:57:b9:2c: d0:17:29:37:c4:17:8d:73:74:0a:31:88:3c:1a:80: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:55:B7:4F:BA:C8:6A:F1:3F:F4:B4:9C:F2:33:42:DF:2F:79:84:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:16:d7:59:5a:e0:c5:16:1f:7f:80:7a:07:71:8b:87:59:31: ee:8c:1b:08:71:ba:e6:c0:eb:b8:49:12:34:b1:83:ed:fc:c4: b4:fc:bc:33:eb:4c:77:88:73:b2:5c:f8:4d:2d:6e:80:2d:a5: 5e:d7:09:35:62:c0:7b:37:08:da:63:63:59:b4:64:17:fd:f5: 47:e2:b9:5d:bf:de:87:d1:57:47:4d:42:f2:f4:49:55:ab:e8: c3:f6:d3:cb:10:9a:cf:6c:ae:2e:29:9d:8c:51:fa:55:d7:5c: 4e:78:8a:ae:6b:fa:f2:1a:8d:ed:95:16:47:67:b4:43:4c:d9: 86:d4:de:03:21:fa:0f:77:9a:2d:8e:89:a0:bb:b9:91:13:39: 29:f8:48:f5:7a:bd:82:3e:13:8f:84:54:61:fe:50:65:a0:d1: 57:98:21:fe:a1:6e:95:ca:1b:7a:42:cb:db:14:cd:16:b3:52: a9:e2:9d:b7:67:47:14:ad:4b:69:70:de:68:8c:e7:d7:06:7b: f6:07:1c:94:12:fb:a0:75:d2:89:7c:d7:1e:38:35:68:e6:f8: 1a:28:c6:20:42:6a:2a:bc:f9:be:57:76:50:60:1f:c8:5c:e1: ef:2f:56:bb:55:5f:64:cb:03:8f:47:1a:02:0c:64:b8:f8:39: fb:26:49:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUmwHa6aL94DCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZTNlYWRhZTctZjQ2OS00MDMxLTkzNGMtYjE2NTQ2ZGRjMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhh7dOW1rbgAFGw7wYtokJKH7LaqH2lUdFF7 axjvZV/mCWKOmsvbiXWc6iQ59oopKD3kRNeO+WHvjPBU0Dye2mvV0XgIZMm3Le0n Ye1hnZQUZc4LEam/FBWqVvXV1dVAA4bS0ib4BG/tVO9kSzyO8Fk9Xi5+xUbxTOoJ sDEz1IXl/cu2Hna9JRVbylsyePaVeGknpIzZKCirbZXD5fDkRzhpn5UmTOkITmyI Rtn2Ce8p76npEu4p3t0RdVPCIfftT8aBdjk3aF4+9Xj1ZmMUmU+BsMXFqRnP+/wP ricE2foWIj06/Qg0jVeWxg5XuSzQFyk3xBeNc3QKMYg8GoBqMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBVt0+6yGrxP/S0nPIzQt8veYRXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGJlNmFmMDgtZGMwOS0z NjA4LWE4NGQtZDgzZmZhOWUyZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsW11la4MUWH3+Aegdxi4dZMe6MGwhxuubA67hJEjSxg+38xLT8vDPr THeIc7Jc+E0tboAtpV7XCTViwHs3CNpjY1m0ZBf99UfiuV2/3ofRV0dNQvL0SVWr 6MP208sQms9sri4pnYxR+lXXXE54iq5r+vIaje2VFkdntENM2YbU3gMh+g93mi2O iaC7uZETOSn4SPV6vYI+E4+EVGH+UGWg0VeYIf6hbpXKG3pCy9sUzRazUqninbdn RxStS2lw3miM59cGe/YHHJQS+6B10ol81x44NWjm+BooxiBCaiq8+b5XdlBgH8hc 4e8vVrtVX2TLA49HGgIMZLj4OfsmSZg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:22:28 2025 by rpki-client