$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f63d7787-fffd-3d30-9344-e3bddc802a79.roa File: f63d7787-fffd-3d30-9344-e3bddc802a79.roa (raw, json) Hash identifier: tfqSgDpWyBLzyZdVvxALvuFqhJ/0QgB7ilnxNEkh3WA= Subject key identifier: 49:8E:A7:CF:C7:49:FF:5B:C8:3C:3F:95:2E:2F:CE:1D:D0:E1:86:01 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EEB50B1C08628DA22FE64E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f63d7787-fffd-3d30-9344-e3bddc802a79.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 13335 IP address blocks: 172.70.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:0b:1c:08:62:8d:a2:2f:e6:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=a44fd94e-5bff-46e0-be36-376a16837e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:ee:df:90:8f:b4:4c:69:0c:a0:95:db:a8: 9a:7a:d6:e2:10:d5:62:3e:49:4a:54:84:76:68:c8: d5:cc:53:bd:64:29:48:21:96:47:93:4d:bf:fa:cf: fb:c8:2f:9a:15:e8:a7:30:22:97:ec:6d:31:db:87: 91:f3:b8:80:d1:74:eb:5a:69:39:39:38:89:50:33: c2:c4:bb:b3:ba:a8:d5:0f:39:04:47:cf:9b:09:41: dd:fc:e6:1e:5e:82:4b:65:a7:7d:25:38:41:a8:5d: 64:ce:28:c4:ec:4d:af:18:16:a3:a4:68:06:4e:e7: 7a:11:9e:ea:d3:0d:aa:81:1f:41:19:c0:37:9c:a7: 0d:ba:1b:46:1f:4b:32:2e:42:65:d5:80:02:ca:db: e4:a6:e0:d9:0e:52:7f:a8:c6:31:f2:cf:f4:44:7e: 7d:03:8b:84:67:88:53:5c:02:d4:e6:52:80:dd:52: 21:cc:64:08:54:0a:e0:4c:41:1f:da:97:84:43:63: 0a:15:2d:29:c9:cd:3e:ba:27:f5:fe:7f:58:3c:fc: 5c:f0:b2:ed:cb:38:ff:b7:4f:af:3c:e6:a3:33:34: f1:a8:b4:77:27:96:43:c1:6d:99:33:47:6b:c7:89: 32:fb:8c:de:34:9a:d5:7a:27:a9:b4:7f:38:49:ca: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8E:A7:CF:C7:49:FF:5B:C8:3C:3F:95:2E:2F:CE:1D:D0:E1:86:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f63d7787-fffd-3d30-9344-e3bddc802a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e6:3d:2f:e6:88:19:91:8a:de:26:14:d7:e3:5b:ab:2f:dd: ae:d2:e5:e4:4b:23:8a:21:a6:4c:67:c8:bb:11:8b:49:c7:36: 3b:09:a8:cb:6b:ca:ee:8e:4d:01:ca:e5:6b:6a:36:1f:b3:d2: dd:62:56:47:84:3e:81:5a:1a:38:46:03:79:15:8f:d5:27:90: d3:6e:9b:6b:84:ac:c1:cb:cd:62:ac:0e:f4:93:9f:a7:c4:1b: c8:ec:80:8d:af:36:18:f8:64:a2:cc:82:75:8a:6f:65:d5:df: 9c:94:1a:97:30:36:3a:ee:79:88:3b:29:8a:59:43:7b:65:20: b6:44:a0:09:6c:74:75:94:74:53:7b:51:72:ad:b9:c2:54:7c: 03:2c:6d:d2:00:e1:5b:63:ae:9d:c5:4d:21:80:ed:9a:e3:6b: 52:9d:76:5b:9b:76:93:1f:c5:85:be:e4:28:46:a4:fd:2f:e5: 7a:5c:c5:97:47:f5:77:95:78:f6:82:e3:38:79:33:3e:a2:61: 6d:de:54:fc:4d:aa:87:20:fb:db:a7:d0:f3:d4:bb:4d:05:9c: 7e:1b:b6:de:2a:7c:2e:a7:97:1a:d8:4b:66:9c:ce:f4:ea:f8: 76:9a:f6:bb:0a:9f:29:18:f7:78:08:a6:93:0a:c8:cd:a0:6e: 74:52:a4:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQscCGKNoi/mToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk YTQ0ZmQ5NGUtNWJmZi00NmUwLWJlMzYtMzc2YTE2ODM3ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUru35CPtExpDKCV26iaetbiENViPklKVIR2 aMjVzFO9ZClIIZZHk02/+s/7yC+aFeinMCKX7G0x24eR87iA0XTrWmk5OTiJUDPC xLuzuqjVDzkER8+bCUHd/OYeXoJLZad9JThBqF1kzijE7E2vGBajpGgGTud6EZ7q 0w2qgR9BGcA3nKcNuhtGH0syLkJl1YACytvkpuDZDlJ/qMYx8s/0RH59A4uEZ4hT XALU5lKA3VIhzGQIVArgTEEf2peEQ2MKFS0pyc0+uif1/n9YPPxc8LLtyzj/t0+v POajMzTxqLR3J5ZDwW2ZM0drx4ky+4zeNJrVeieptH84Scp09QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmOp8/HSf9byDw/lS4vzh3Q4YYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjYzZDc3ODctZmZmZC0z ZDMwLTkzNDQtZTNiZGRjODAyYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXmPS/miBmRit4mFNfjW6sv3a7S5eRLI4ohpkxnyLsRi0nHNjsJqMtr yu6OTQHK5WtqNh+z0t1iVkeEPoFaGjhGA3kVj9UnkNNum2uErMHLzWKsDvSTn6fE G8jsgI2vNhj4ZKLMgnWKb2XV35yUGpcwNjrueYg7KYpZQ3tlILZEoAlsdHWUdFN7 UXKtucJUfAMsbdIA4Vtjrp3FTSGA7Zrja1KddlubdpMfxYW+5ChGpP0v5XpcxZdH 9XeVePaC4zh5Mz6iYW3eVPxNqocg+9un0PPUu00FnH4btt4qfC6nlxrYS2aczvTq +Haa9rsKnykY93gIppMKyM2gbnRSpFs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:36 2025 by rpki-client