$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972449bb-7cee-3ab2-8b1b-a5de60bee399.roa File: 972449bb-7cee-3ab2-8b1b-a5de60bee399.roa (raw, json) Hash identifier: atl+H6Fjfop9PpeHzM38t24/atElF+SirGfK0yyISTg= Subject key identifier: 98:9C:1C:B0:39:F6:04:18:F5:08:2C:5F:46:32:48:E3:37:DA:BE:C3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9F2DDC95B29421B01C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972449bb-7cee-3ab2-8b1b-a5de60bee399.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.67.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:9f:2d:dc:95:b2:94:21:b0:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=ffe7b42c-f759-4a7b-b33c-f51b621535ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:84:c9:8b:d5:5d:8c:ec:69:bf:61:30:a6: dd:a4:7f:17:a9:79:8a:a2:3e:27:8b:37:0b:41:e6: 34:ab:6e:7d:9b:0b:02:ad:f1:31:05:37:e6:26:7d: 3b:43:59:0b:c8:94:86:54:47:be:6c:d2:00:b8:49: 4e:a0:4d:d5:87:39:bf:40:be:42:37:e0:13:7f:8e: 47:33:b4:10:8a:9c:8c:89:99:fe:fc:f2:9d:ef:16: a5:6f:54:26:18:c3:6c:01:e6:c0:31:46:d5:4a:0f: 55:f4:41:54:b0:12:fe:65:7c:2d:bb:11:88:00:9c: 2c:61:5f:38:75:c7:ca:2b:ee:e7:0d:49:2c:46:85: ff:b3:3b:6f:9b:10:e2:78:e3:15:d2:1e:32:bb:13: 40:5d:72:c0:dd:17:3d:65:88:4e:cc:bf:92:eb:c6: 6e:4a:d6:d2:a3:48:9d:bd:a4:9f:2b:d9:c1:c5:76: 66:ab:c6:0c:52:d2:ef:b2:1b:66:eb:df:86:50:bf: 82:9d:3c:c6:7e:df:8f:37:49:8c:33:5b:19:68:88: 07:6b:2c:a4:b1:53:17:84:c9:22:fc:4e:44:4c:fa: eb:f2:38:e0:32:7a:2e:4b:d7:30:92:83:c2:90:56: 51:52:e6:f4:17:7a:68:11:db:05:50:63:44:c6:c8: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9C:1C:B0:39:F6:04:18:F5:08:2C:5F:46:32:48:E3:37:DA:BE:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/972449bb-7cee-3ab2-8b1b-a5de60bee399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ae:8d:0a:e0:98:c0:33:cc:f2:59:9f:b2:a6:b6:5b:83:a0: 07:d8:9d:ff:14:4b:64:22:19:fa:19:2c:09:29:ff:fc:16:0d: 4a:1f:2f:4a:e3:b8:99:9e:2d:52:e0:09:47:52:57:27:d3:53: 08:5a:11:86:ec:ac:f7:85:06:5a:8b:c3:25:b3:91:fb:88:3c: 76:eb:b7:17:72:6a:97:10:e4:85:8e:bb:29:50:4b:3d:34:c7: 9d:e6:44:95:c4:5a:d4:cc:eb:15:07:8f:4d:32:a2:9c:ce:71: 21:64:c9:9f:a5:65:3f:02:7c:10:5d:ce:a3:7d:b5:17:ee:5a: 6c:9b:5b:6d:8a:61:79:e2:8e:de:ad:e6:57:8e:19:b3:e3:f7: 77:ba:ec:35:c4:db:fe:be:c5:3e:7d:b7:f6:ad:b4:87:89:99: a8:4c:40:f7:fe:9d:a0:ea:f3:65:87:20:04:c5:53:04:35:ee: 4d:97:62:ad:46:01:6a:95:57:9e:72:ff:77:19:53:13:d0:ad: d4:f0:4f:37:cd:69:87:11:67:d5:ab:af:d5:d0:d7:98:ef:33: 2a:48:a5:8b:29:a1:a5:bd:96:18:c5:b3:b9:9b:01:8d:ec:a4: e5:23:b2:8f:73:6c:39:76:11:50:9b:72:a2:5a:62:75:aa:f0: db:fd:1b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnup8t3JWylCGwHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZmZlN2I0MmMtZjc1OS00YTdiLWIzM2MtZjUxYjYyMTUzNWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPWEyYvVXYzsab9hMKbdpH8XqXmKoj4nizcL QeY0q259mwsCrfExBTfmJn07Q1kLyJSGVEe+bNIAuElOoE3Vhzm/QL5CN+ATf45H M7QQipyMiZn+/PKd7xalb1QmGMNsAebAMUbVSg9V9EFUsBL+ZXwtuxGIAJwsYV84 dcfKK+7nDUksRoX/sztvmxDieOMV0h4yuxNAXXLA3Rc9ZYhOzL+S68ZuStbSo0id vaSfK9nBxXZmq8YMUtLvshtm69+GUL+CnTzGft+PN0mMM1sZaIgHayyksVMXhMki /E5ETPrr8jjgMnouS9cwkoPCkFZRUub0F3poEdsFUGNExshNMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJicHLA59gQY9QgsX0YySOM32r7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTcyNDQ5YmItN2NlZS0z YWIyLThiMWItYTVkZTYwYmVlMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+ujQrgmMAzzPJZn7KmtluDoAfYnf8US2QiGfoZLAkp//wWDUofL0rj uJmeLVLgCUdSVyfTUwhaEYbsrPeFBlqLwyWzkfuIPHbrtxdyapcQ5IWOuylQSz00 x53mRJXEWtTM6xUHj00yopzOcSFkyZ+lZT8CfBBdzqN9tRfuWmybW22KYXnijt6t 5leOGbPj93e67DXE2/6+xT59t/attIeJmahMQPf+naDq82WHIATFUwQ17k2XYq1G AWqVV55y/3cZUxPQrdTwTzfNaYcRZ9Wrr9XQ15jvMypIpYspoaW9lhjFs7mbAY3s pOUjso9zbDl2EVCbcqJaYnWq8Nv9G7E= -----END CERTIFICATE-----Generated at Tue Jun 17 18:07:29 2025 by rpki-client