$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6074414-f9ff-3c9b-a364-683163bd465e.roa File: f6074414-f9ff-3c9b-a364-683163bd465e.roa (raw, json) Hash identifier: qOnzZGi7Il/6hMv2bdZZdPJBJU4J07HvygfzY1SBVQU= Subject key identifier: 3B:27:61:00:9C:1F:FB:9E:0D:B7:38:19:88:BF:C7:E3:B1:60:1F:75 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD32409A37E166BBEF600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6074414-f9ff-3c9b-a364-683163bd465e.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.64.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d3:24:09:a3:7e:16:6b:be:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=49ae269d-d068-4f6e-a3d5-aca1e949e0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9e:c9:ec:d5:7f:66:59:30:47:17:cb:c5:f6: c5:f4:03:d5:22:5d:e7:f9:19:87:7b:bf:52:e8:9b: 5e:80:1b:49:c8:9b:d0:f1:19:af:9c:17:00:7c:89: 01:82:d2:a4:66:d7:42:79:81:66:cd:da:e5:1f:45: a0:0a:3d:22:c0:24:3a:f5:01:50:ea:09:0b:fe:72: e4:cf:83:fc:ad:cf:40:04:c2:ed:21:f0:1c:19:05: 4c:be:2c:e8:bf:5b:5e:96:74:f9:d5:2b:75:3f:94: 7c:9e:d8:b1:08:29:af:6a:81:14:5f:29:9d:68:b8: df:6d:c1:1b:b4:c7:c1:2b:79:5a:80:7e:12:98:f6: c1:e8:02:ef:56:62:f4:05:52:3d:94:ee:85:d8:0c: bf:78:44:d6:aa:aa:53:2c:3b:f9:14:24:ca:e9:96: d5:33:87:94:a0:d0:92:fb:59:a5:b0:ce:29:8f:c2: e9:0e:85:a9:6d:17:55:a7:36:61:31:15:e1:d4:a7: 1f:82:8c:55:c7:7b:9c:18:10:0f:86:08:6d:64:c4: a2:39:f1:67:30:4c:fd:a5:34:ea:3a:ea:a4:cf:16: 68:d4:b8:48:85:64:86:a5:d8:dc:30:b0:11:ce:40: ae:c7:02:ea:db:fb:02:9c:5b:f1:02:16:5d:a7:cf: ad:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:27:61:00:9C:1F:FB:9E:0D:B7:38:19:88:BF:C7:E3:B1:60:1F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6074414-f9ff-3c9b-a364-683163bd465e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f6:8a:11:81:6e:f1:64:ab:76:c0:c8:56:02:48:82:af:1b: 21:38:4f:df:e0:9a:bb:96:db:79:4f:22:a5:63:3b:a2:58:1e: fc:3e:fc:08:da:e7:38:fa:91:e3:69:f8:c6:fb:63:58:4f:fb: c6:56:3a:01:cd:48:60:68:15:26:db:c7:b1:be:5b:50:68:13: 27:da:25:cf:2c:c8:74:e4:6a:ef:09:e9:c7:74:48:a5:5e:78: d9:1c:f4:0a:75:70:53:36:a0:3e:53:9b:eb:85:95:fd:f1:55: a0:ca:71:3b:fe:6c:93:1b:5b:c9:ef:be:56:3b:ea:df:46:ec: 1e:0c:a7:bf:e0:88:bb:34:8e:78:72:f9:ea:b3:eb:c4:03:87: db:16:08:7c:7e:6d:3e:7e:8f:9f:6c:f4:0a:ca:34:3a:cf:26: 31:6b:25:c2:d2:ee:03:29:7f:0a:f5:d0:d3:3a:ee:4f:8f:b9: 56:07:61:74:0e:aa:95:a6:bb:6b:4e:97:62:aa:d1:b5:2b:52: a0:e6:fe:a4:4e:24:dc:57:76:ad:44:02:d9:f3:b2:4b:ea:4a: e8:16:f8:ef:cf:8d:3b:c9:d4:ab:b9:a1:3a:06:87:60:54:db: ba:a0:f6:50:2e:14:ef:e8:7e:5f:13:15:f5:38:13:9f:7d:d9: 5b:96:2a:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79MkCaN+Fmu+9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NDlhZTI2OWQtZDA2OC00ZjZlLWEzZDUtYWNhMWU5NDllMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ7J7NV/ZlkwRxfLxfbF9APVIl3n+RmHe79S 6JtegBtJyJvQ8RmvnBcAfIkBgtKkZtdCeYFmzdrlH0WgCj0iwCQ69QFQ6gkL/nLk z4P8rc9ABMLtIfAcGQVMvizov1telnT51St1P5R8ntixCCmvaoEUXymdaLjfbcEb tMfBK3lagH4SmPbB6ALvVmL0BVI9lO6F2Ay/eETWqqpTLDv5FCTK6ZbVM4eUoNCS +1mlsM4pj8LpDoWpbRdVpzZhMRXh1KcfgoxVx3ucGBAPhghtZMSiOfFnMEz9pTTq OuqkzxZo1LhIhWSGpdjcMLARzkCuxwLq2/sCnFvxAhZdp8+tUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsnYQCcH/ueDbc4GYi/x+OxYB91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjYwNzQ0MTQtZjlmZi0z YzliLWEzNjQtNjgzMTYzYmQ0NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD72ihGBbvFkq3bAyFYCSIKvGyE4T9/gmruW23lPIqVjO6JYHvw+/Aja 5zj6keNp+Mb7Y1hP+8ZWOgHNSGBoFSbbx7G+W1BoEyfaJc8syHTkau8J6cd0SKVe eNkc9Ap1cFM2oD5Tm+uFlf3xVaDKcTv+bJMbW8nvvlY76t9G7B4Mp7/giLs0jnhy +eqz68QDh9sWCHx+bT5+j59s9ArKNDrPJjFrJcLS7gMpfwr10NM67k+PuVYHYXQO qpWmu2tOl2Kq0bUrUqDm/qROJNxXdq1EAtnzskvqSugW+O/PjTvJ1Ku5oToGh2BU 27qg9lAuFO/ofl8TFfU4E5992VuWKlw= -----END CERTIFICATE-----Generated at Fri Jun 6 16:52:44 2025 by rpki-client