$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/9e2e267d-e461-34e3-95c1-8dfb6824798a.roa File: 9e2e267d-e461-34e3-95c1-8dfb6824798a.roa (raw, json) Hash identifier: sCfGQRemNT+wQdS8Mw+i49SFaQlAHiyuBtHHOGe7lkE= Subject key identifier: D8:6E:9C:25:48:18:91:0B:E1:9B:FB:D2:1D:B4:66:16:01:90:28:45 Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Certificate serial: 010D0C9F4328584A1465655A5120FE9A0760A940 Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/9e2e267d-e461-34e3-95c1-8dfb6824798a.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 16509 IP address blocks: 172.82.212.0/24 maxlen: 24 172.82.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:65:5a:51:20:fe:9a:07:60:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=078cb09e-42af-4965-a813-943cce78488d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:95:94:25:e8:aa:76:21:34:ed:1c:26:a0:29: af:ed:9d:ca:27:dc:93:e0:94:1c:6e:b1:f3:ec:28: ba:8d:4c:9f:56:b5:3e:d3:00:fd:e9:89:61:72:8f: ba:38:89:b3:a7:95:e4:aa:8c:1a:b2:81:56:b8:f4: 45:e2:84:19:f2:c4:ad:b9:6c:77:a0:4c:7d:84:af: ca:f4:c7:3f:da:53:81:a8:d6:86:e8:8f:ad:37:94: 2b:b8:90:29:3a:c8:87:b4:62:be:86:8f:51:29:4c: 20:ce:3e:9b:af:66:1d:0e:a4:b2:02:9f:e0:d1:fc: 9b:bd:68:b1:3f:ad:74:0b:0e:ab:c3:f0:14:ae:c9: 6f:5c:b8:d4:d6:91:d9:76:5a:b3:3f:22:d3:34:58: be:e2:1c:3d:48:55:8a:e3:c2:9e:4f:d4:6e:b7:8b: aa:b6:b5:90:b1:8d:84:e4:84:d1:ea:4d:62:86:38: 67:e4:85:bb:6d:15:04:10:64:dc:cb:10:0e:ba:10: 3b:20:d3:59:54:76:66:d0:11:68:fb:fb:fb:84:36: b0:9b:87:b3:db:ed:94:20:1f:cb:c6:7f:e5:29:14: 12:4c:14:f0:89:27:5d:a9:c5:d6:fe:d6:94:0a:71: 5e:cd:4f:81:cd:c1:de:96:76:08:20:61:3b:37:71: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6E:9C:25:48:18:91:0B:E1:9B:FB:D2:1D:B4:66:16:01:90:28:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/9e2e267d-e461-34e3-95c1-8dfb6824798a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl X509v3 Authority Key Identifier: keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer sbgp-ipAddrBlock: critical IPv4: 172.82.212.0/24 172.82.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a4:08:6d:f2:80:42:2b:a3:79:ae:c9:5d:ae:8a:cc:2b:46: c6:08:cf:25:72:0c:86:b0:2a:0c:df:72:34:ce:7a:d1:68:53: 1a:1d:07:fa:60:08:a6:c8:68:a6:a7:20:78:57:38:42:2c:1a: ce:a5:f0:2b:26:3a:1b:61:f5:cc:8c:49:3d:05:de:99:5b:8c: c1:6a:ac:b3:04:de:8a:63:35:59:88:b7:d0:95:96:4c:93:07: ed:40:db:e9:af:ee:8f:1b:c3:4a:23:b9:a5:ca:02:d3:07:57: 3c:a0:3e:fb:58:b4:22:c3:4d:88:74:49:2d:5e:8b:8a:5a:5c: ba:24:5b:06:22:17:e7:6e:5b:6a:1d:de:04:47:ec:3e:36:b6: d3:4a:59:12:8a:7d:18:cd:0c:ed:69:48:51:b3:49:5a:e5:c5: ae:b3:b3:82:ae:17:66:a8:06:42:0e:7b:4c:51:c9:c5:e4:8f: 58:49:1b:51:14:d2:83:40:d0:20:af:7e:37:79:8d:55:15:b7: e6:c1:33:13:89:d8:fb:0b:ef:97:13:d8:83:68:13:4c:70:50: 23:a6:7d:f0:d0:29:f0:bb:15:72:a0:2d:e5:d3:17:79:a2:b1: d3:32:c6:b0:7b:5d:fd:e2:85:53:71:65:f1:cf:0d:2e:44:14: 24:27:83:07 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoUZWVaUSD+mgdgqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5 ZWE5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk MDc4Y2IwOWUtNDJhZi00OTY1LWE4MTMtOTQzY2NlNzg0ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZWUJeiqdiE07RwmoCmv7Z3KJ9yT4JQcbrHz 7Ci6jUyfVrU+0wD96Ylhco+6OImzp5XkqowasoFWuPRF4oQZ8sStuWx3oEx9hK/K 9Mc/2lOBqNaG6I+tN5QruJApOsiHtGK+ho9RKUwgzj6br2YdDqSyAp/g0fybvWix P610Cw6rw/AUrslvXLjU1pHZdlqzPyLTNFi+4hw9SFWK48KeT9Rut4uqtrWQsY2E 5ITR6k1ihjhn5IW7bRUEEGTcyxAOuhA7INNZVHZm0BFo+/v7hDawm4ez2+2UIB/L xn/lKRQSTBTwiSddqcXW/taUCnFezU+BzcHelnYIIGE7N3EnxQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNhunCVIGJEL4Zv70h20ZhYBkChFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvOWUyZTI2N2QtZTQ2MS0z NGUzLTk1YzEtOGRmYjY4MjQ3OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz MjkyMTllYTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArFLUAwQA rFLXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHOkCG3ygEIro3muyV2uiswrRsYIzyVyDIawKgzfcjTOetFo UxodB/pgCKbIaKanIHhXOEIsGs6l8CsmOhth9cyMST0F3plbjMFqrLME3opjNVmI t9CVlkyTB+1A2+mv7o8bw0ojuaXKAtMHVzygPvtYtCLDTYh0SS1ei4paXLokWwYi F+duW2od3gRH7D42ttNKWRKKfRjNDO1pSFGzSVrlxa6zs4KuF2aoBkIOe0xRycXk j1hJG1EU0oNA0CCvfjd5jVUVt+bBMxOJ2PsL75cT2INoE0xwUCOmffDQKfC7FXKg LeXTF3misdMyxrB7Xf3ihVNxZfHPDS5EFCQngwc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:26:19 2025 by rpki-client