$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aaf5e6b-1161-3340-b49a-e30753b858d7.roa File: 7aaf5e6b-1161-3340-b49a-e30753b858d7.roa (raw, json) Hash identifier: f8ws47BOoel8IG81Rqcm4IJNcRWVMQeZdcWFwzS3rTw= Subject key identifier: 6C:84:44:77:B3:0D:FC:A6:EB:ED:C8:40:82:28:34:D2:37:9B:D2:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA854B4A7A52C2F7B5431500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aaf5e6b-1161-3340-b49a-e30753b858d7.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.69.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:4b:4a:7a:52:c2:f7:b5:43:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=a1d2fdd6-2f36-45b1-8c9e-35ecb7d60b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:b1:fd:bc:6b:72:5f:38:2a:1f:7e:6b:49: 7e:96:62:c9:69:75:70:e0:16:08:59:a5:39:1f:81: 8a:24:11:8e:47:d8:28:43:03:6e:0e:86:1a:35:13: a9:35:7c:be:e1:23:ed:5f:e8:3b:dd:2f:90:de:4e: 23:0c:14:80:b9:e4:02:30:89:6d:a7:02:7c:21:c1: 65:2d:61:73:63:b5:f7:68:84:d6:92:f4:44:d1:39: e7:e2:d7:4f:a2:20:6a:7e:35:3e:26:66:21:54:ca: 32:0f:d0:e1:5c:63:f2:93:17:e3:73:23:e6:a1:44: 09:ff:61:13:1a:18:cb:ec:27:ad:09:24:45:ce:b3: 25:35:2f:4a:3c:50:42:1e:f5:2a:58:b2:b2:1f:bb: ca:a4:da:0e:d6:db:df:f7:0d:15:44:cb:7a:af:ba: 05:f4:2d:d1:24:17:82:85:bb:31:a1:58:2d:54:3e: 22:7f:6e:d4:46:6e:c5:5c:ef:4b:40:96:03:4f:17: bc:7a:a8:16:3f:85:3a:fc:9c:5b:32:c6:44:a7:1f: 02:09:53:5f:06:1b:9c:0a:94:cd:1a:e6:62:ef:3d: 44:55:2e:4b:53:cb:c7:b5:3f:7e:32:ae:5e:8e:84: e8:02:ff:34:4e:5b:f6:47:2b:70:66:b3:99:20:70: ed:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:84:44:77:B3:0D:FC:A6:EB:ED:C8:40:82:28:34:D2:37:9B:D2:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7aaf5e6b-1161-3340-b49a-e30753b858d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:38:ee:93:af:9d:f6:be:9a:ce:e4:5a:4a:f2:6e:81:19:9e: fb:7d:6f:37:39:15:95:06:95:28:18:28:c7:9e:e7:38:69:97: d7:cf:a5:4c:56:f8:36:bc:84:f5:92:50:36:a6:a7:87:91:0a: 76:02:31:b9:d1:be:4c:70:36:85:57:ad:02:43:1f:e1:ff:3c: 9d:47:61:7f:17:6f:0f:58:f4:d9:c1:dc:77:5c:78:1c:f3:79: 05:bc:c9:73:3a:22:f0:42:fa:0f:80:d5:a0:67:05:b5:0b:6f: be:a1:be:48:ca:73:20:a7:f2:1e:f0:f0:ee:63:c3:a1:67:8b: ef:57:54:58:d7:44:2b:3c:b7:53:71:9f:67:aa:21:88:1e:65: 29:4d:94:9c:96:6b:69:7c:cb:32:1c:b4:6e:6a:2f:0c:ea:c2: fa:94:66:34:24:0d:73:06:14:37:95:21:b0:3b:4c:69:06:cc: b4:54:ab:a9:66:0d:65:a8:a4:d3:c3:ac:d2:15:f4:fd:60:ac: 91:f8:a5:ee:96:49:e1:05:af:f0:17:b2:92:d8:53:74:d1:ef: 32:a2:73:bb:88:49:51:8f:01:0e:32:a9:1b:c6:ac:02:8d:b9: b6:ec:9a:4f:be:38:b0:5d:7b:ac:90:5f:ca:a5:9e:a9:e4:0d: 1a:4b:c1:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUtKelLC97VDFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk YTFkMmZkZDYtMmYzNi00NWIxLThjOWUtMzVlY2I3ZDYwYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp12x/bxrcl84Kh9+a0l+lmLJaXVw4BYIWaU5 H4GKJBGOR9goQwNuDoYaNROpNXy+4SPtX+g73S+Q3k4jDBSAueQCMIltpwJ8IcFl LWFzY7X3aITWkvRE0Tnn4tdPoiBqfjU+JmYhVMoyD9DhXGPykxfjcyPmoUQJ/2ET GhjL7CetCSRFzrMlNS9KPFBCHvUqWLKyH7vKpNoO1tvf9w0VRMt6r7oF9C3RJBeC hbsxoVgtVD4if27URm7FXO9LQJYDTxe8eqgWP4U6/JxbMsZEpx8CCVNfBhucCpTN GuZi7z1EVS5LU8vHtT9+Mq5ejoToAv80Tlv2RytwZrOZIHDtfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyERHezDfym6+3IQIIoNNI3m9LdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2FhZjVlNmItMTE2MS0z MzQwLWI0OWEtZTMwNzUzYjg1OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc47pOvnfa+ms7kWkryboEZnvt9bzc5FZUGlSgYKMee5zhpl9fPpUxW +Da8hPWSUDamp4eRCnYCMbnRvkxwNoVXrQJDH+H/PJ1HYX8Xbw9Y9NnB3HdceBzz eQW8yXM6IvBC+g+A1aBnBbULb76hvkjKcyCn8h7w8O5jw6Fni+9XVFjXRCs8t1Nx n2eqIYgeZSlNlJyWa2l8yzIctG5qLwzqwvqUZjQkDXMGFDeVIbA7TGkGzLRUq6lm DWWopNPDrNIV9P1grJH4pe6WSeEFr/AXspLYU3TR7zKic7uISVGPAQ4yqRvGrAKN ubbsmk++OLBde6yQX8qlnqnkDRpLwY8= -----END CERTIFICATE-----Generated at Tue Jun 17 16:16:32 2025 by rpki-client