$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe777ccb-c736-30e8-ac43-1723815b6a4e.roa File: fe777ccb-c736-30e8-ac43-1723815b6a4e.roa (raw, json) Hash identifier: iPB05hqytiVt/IAfcguEjgEFT1e5CxKVh7ru4Nac7pM= Subject key identifier: 9C:43:B6:74:DE:BD:44:77:98:79:F5:F3:55:1B:83:E8:13:54:60:59 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9E86E3D787F69F266A50 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe777ccb-c736-30e8-ac43-1723815b6a4e.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.65.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:9e:86:e3:d7:87:f6:9f:26:6a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=7dfa406f-b509-49cf-85a0-56e0c68e414f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:f6:f2:89:4a:94:59:75:c4:a1:dc:b9:32: 42:54:9c:f9:4f:d8:54:7a:fa:ab:cb:5b:80:f0:b6: f4:da:c6:84:26:5c:2f:78:07:0b:e4:7e:2b:fa:b2: 1d:92:1d:b7:cf:1d:76:63:07:18:11:ca:4b:6b:f9: 25:b4:8b:35:72:19:42:f3:37:22:fe:87:c6:fa:0a: 29:2d:b0:80:89:d0:4f:04:22:e2:07:0d:f1:c0:b4: 00:4d:0a:0e:4b:dc:f6:3d:d5:e4:5e:87:6e:cf:d4: 82:b0:59:37:71:9e:04:11:14:68:2b:a7:0a:83:65: 5e:27:66:0b:e7:cc:4d:fd:39:32:bd:50:a3:2e:c3: 19:09:d9:b5:59:6d:c0:b1:d4:e3:d8:b3:6b:e0:12: 39:02:50:6f:92:27:3d:31:e7:1d:7c:96:ed:97:66: ba:43:f6:13:f7:e3:bd:25:54:97:38:3b:27:1f:8c: 40:bd:91:3c:82:2e:fe:97:2e:55:9b:bc:81:b6:fd: 09:aa:a3:fd:9f:7b:37:70:cb:d4:bb:c1:88:a1:1c: 47:2d:dd:a4:63:21:ca:1b:8e:4f:dd:86:70:da:73: a8:6f:9a:fd:af:41:2c:73:51:a5:8f:ee:87:2e:5f: 4a:85:f2:31:09:e7:3f:21:18:97:0e:70:5c:25:96: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:43:B6:74:DE:BD:44:77:98:79:F5:F3:55:1B:83:E8:13:54:60:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe777ccb-c736-30e8-ac43-1723815b6a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2f:37:e0:f1:af:57:e6:54:40:04:1e:46:ae:83:21:cb:09: bd:b5:2c:c0:43:1f:a5:d5:43:9d:a1:19:31:76:68:59:49:9c: 04:b8:99:fa:44:31:68:90:52:88:86:0a:44:a5:f7:af:e3:05: ae:40:05:11:82:21:ed:3b:86:6f:f9:8e:3d:f6:fb:62:69:b5: 28:bf:79:5b:f1:d2:22:e1:46:0a:28:4a:ed:14:5c:13:74:6a: af:9e:b0:f2:31:d8:ca:07:af:4b:35:78:07:93:4c:dc:5e:ca: cf:14:17:66:47:96:10:22:bc:f7:01:ee:d3:d1:7e:c9:95:9e: 09:09:21:b3:24:cf:40:3b:b2:2f:17:db:80:4e:67:3d:8a:4a: b6:92:d7:88:a3:7e:2c:ca:1e:17:d3:10:c3:6c:f8:9c:54:9e: 92:32:23:2b:7a:87:cb:c7:67:52:a6:3a:cf:fb:38:2c:c4:11: 92:39:9b:7d:04:fe:3f:30:3b:ce:f1:11:04:25:bb:11:01:58: c6:b6:5f:df:d8:ab:dc:76:39:c6:af:92:f4:65:a6:0b:d3:49: e9:35:f9:e0:7f:15:16:b9:2d:a3:e9:c9:3b:dc:cc:f9:d6:e5: cf:5d:3e:8a:b3:32:19:8b:26:98:d0:f8:b8:3d:fc:11:ab:ad: 52:c1:69:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnup6G49eH9p8malAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk N2RmYTQwNmYtYjUwOS00OWNmLTg1YTAtNTZlMGM2OGU0MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYf28olKlFl1xKHcuTJCVJz5T9hUevqry1uA 8Lb02saEJlwveAcL5H4r+rIdkh23zx12YwcYEcpLa/kltIs1chlC8zci/ofG+gop LbCAidBPBCLiBw3xwLQATQoOS9z2PdXkXoduz9SCsFk3cZ4EERRoK6cKg2VeJ2YL 58xN/TkyvVCjLsMZCdm1WW3AsdTj2LNr4BI5AlBvkic9MecdfJbtl2a6Q/YT9+O9 JVSXODsnH4xAvZE8gi7+ly5Vm7yBtv0JqqP9n3s3cMvUu8GIoRxHLd2kYyHKG45P 3YZw2nOob5r9r0Esc1Glj+6HLl9KhfIxCec/IRiXDnBcJZbapQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxDtnTevUR3mHn181Ubg+gTVGBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmU3NzdjY2ItYzczNi0z MGU4LWFjNDMtMTcyMzgxNWI2YTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEvN+Dxr1fmVEAEHkaugyHLCb21LMBDH6XVQ52hGTF2aFlJnAS4mfpE MWiQUoiGCkSl96/jBa5ABRGCIe07hm/5jj32+2JptSi/eVvx0iLhRgooSu0UXBN0 aq+esPIx2MoHr0s1eAeTTNxeys8UF2ZHlhAivPcB7tPRfsmVngkJIbMkz0A7si8X 24BOZz2KSraS14ijfizKHhfTEMNs+JxUnpIyIyt6h8vHZ1KmOs/7OCzEEZI5m30E /j8wO87xEQQluxEBWMa2X9/Yq9x2OcavkvRlpgvTSek1+eB/FRa5LaPpyTvczPnW 5c9dPoqzMhmLJpjQ+Lg9/BGrrVLBae0= -----END CERTIFICATE-----Generated at Sat Jun 7 12:25:30 2025 by rpki-client