$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa File: f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa (raw, json) Hash identifier: gEXO7moAkaufCbdWI1DhB3+kKz/ACnjP9frYE3fPjHE= Subject key identifier: 79:0A:E1:F1:EF:86:E7:6C:2F:06:74:09:D7:28:2C:A1:D6:6E:C4:D5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA939786B9EB3222C00E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.65.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:93:97:86:b9:eb:32:22:c0:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=58fd7d4c-d549-4b0d-aa9c-31d3dd0fb186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:a2:57:7d:67:eb:62:a0:05:f8:1b:6b:fa: 20:cd:d2:7f:cb:d4:a8:14:ef:8f:c3:be:43:88:d6: 1e:7b:6a:a8:fe:51:e2:60:25:a0:fb:9c:ef:3a:e2: a9:6f:5c:a8:0f:c7:fe:70:98:89:f5:e9:79:89:29: 7b:e2:9a:7e:c5:67:8b:76:26:f5:17:94:b4:45:44: a0:93:6c:68:a5:9e:81:7d:14:c2:ac:c4:c7:ee:2a: 54:b1:1d:7f:2c:58:05:27:3c:7a:32:ef:c0:0e:0a: 18:4a:4f:8d:c0:18:7f:be:52:b0:07:a9:cf:16:23: 84:45:d5:0d:ed:91:25:cf:68:a2:a1:5f:a2:cf:14: a5:24:3a:51:b9:81:fe:c6:95:4d:d0:2f:38:cf:1f: 4d:93:41:cb:28:14:50:81:69:e3:73:22:1c:d6:e9: 36:3c:dc:f7:ad:03:ee:2e:c9:1b:67:59:c5:48:ee: 38:91:20:2d:3c:90:df:ba:4d:8d:51:8c:e4:af:c7: 66:bd:ea:d0:df:a3:fe:96:e2:9f:28:8e:c6:2f:0f: 16:43:8b:7d:45:35:33:1a:0e:06:ac:f3:66:73:e2: 72:45:79:cd:56:04:72:7a:e2:8b:40:f6:b7:c4:e7: 5e:ca:94:6b:ac:08:1a:b6:93:ab:b0:c8:53:7d:ff: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0A:E1:F1:EF:86:E7:6C:2F:06:74:09:D7:28:2C:A1:D6:6E:C4:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f921c4e7-d789-3ab0-94ef-4eec694aefb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:93:02:55:6e:7c:03:aa:da:a3:8a:ed:e5:ad:ad:a1:0b:93: d8:ba:33:41:d4:c7:91:f4:d3:85:77:25:96:1c:9c:d6:c7:7b: 5d:11:15:dd:6f:56:47:03:ef:11:77:5e:99:f2:35:cc:da:a2: 98:39:f9:c6:01:7b:8f:c8:ac:fa:81:75:f9:91:ff:70:02:0f: cf:bf:10:a9:31:8d:37:05:cd:63:f3:16:f9:35:fc:28:c5:04: 1a:24:47:ac:30:33:b5:20:39:1a:66:d2:56:af:7d:ab:1a:12: af:39:68:eb:68:0c:e0:be:fa:1f:23:12:5d:e7:9c:cf:df:54: 35:a6:c7:9f:0f:42:40:bc:02:65:16:c9:cc:f4:47:5d:f4:e4: aa:1e:6b:c0:9d:40:92:71:f7:1d:6d:23:a7:4c:3d:c9:0f:02: 17:8c:72:57:02:4e:1b:ee:8e:a4:fb:6f:14:36:6b:6b:d8:4a: 8c:78:e3:95:3e:72:07:ca:77:4a:86:71:07:ed:9c:e1:0d:77: f2:3f:17:92:c9:20:c2:2c:74:60:d4:f1:ea:4c:23:fd:e0:07: df:bf:f8:a3:56:7e:2f:22:07:73:59:c4:78:c9:30:0a:48:ff: 33:0b:63:4d:53:c6:44:78:be:de:5d:95:67:9f:38:2c:24:74: 0e:59:6e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupOXhrnrMiLADoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NThmZDdkNGMtZDU0OS00YjBkLWFhOWMtMzFkM2RkMGZiMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRSiV31n62KgBfgba/ogzdJ/y9SoFO+Pw75D iNYee2qo/lHiYCWg+5zvOuKpb1yoD8f+cJiJ9el5iSl74pp+xWeLdib1F5S0RUSg k2xopZ6BfRTCrMTH7ipUsR1/LFgFJzx6Mu/ADgoYSk+NwBh/vlKwB6nPFiOERdUN 7ZElz2iioV+izxSlJDpRuYH+xpVN0C84zx9Nk0HLKBRQgWnjcyIc1uk2PNz3rQPu LskbZ1nFSO44kSAtPJDfuk2NUYzkr8dmverQ36P+luKfKI7GLw8WQ4t9RTUzGg4G rPNmc+JyRXnNVgRyeuKLQPa3xOdeypRrrAgatpOrsMhTff8gQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkK4fHvhudsLwZ0CdcoLKHWbsTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjkyMWM0ZTctZDc4OS0z YWIwLTk0ZWYtNGVlYzY5NGFlZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKTAlVufAOq2qOK7eWtraELk9i6M0HUx5H004V3JZYcnNbHe10RFd1v VkcD7xF3XpnyNczaopg5+cYBe4/IrPqBdfmR/3ACD8+/EKkxjTcFzWPzFvk1/CjF BBokR6wwM7UgORpm0lavfasaEq85aOtoDOC++h8jEl3nnM/fVDWmx58PQkC8AmUW ycz0R1305Koea8CdQJJx9x1tI6dMPckPAheMclcCThvujqT7bxQ2a2vYSox445U+ cgfKd0qGcQftnOENd/I/F5LJIMIsdGDU8epMI/3gB9+/+KNWfi8iB3NZxHjJMApI /zMLY01TxkR4vt5dlWefOCwkdA5Zbv4= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:11 2025 by rpki-client