$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ef4d9f-13e5-3199-91f9-9122dad25524.roa File: 32ef4d9f-13e5-3199-91f9-9122dad25524.roa (raw, json) Hash identifier: 2V2UFTRgUaU+/Hzs9xXXVo3tegIv/ZA5ODvR6I0rw3o= Subject key identifier: F6:7F:40:9E:42:C4:15:AD:91:3D:24:E7:A0:40:FE:73:C8:EF:4D:15 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9D55BA25F36EFF6CBE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ef4d9f-13e5-3199-91f9-9122dad25524.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.64.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:9d:55:ba:25:f3:6e:ff:6c:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=e17e59eb-6b6c-4318-b68d-62cb6e07fa2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:a5:30:ed:8c:85:69:0c:c5:80:4c:39:19: 2c:f9:90:ef:93:4a:fd:4b:4e:60:10:a5:ad:cc:5c: f7:23:5f:f1:98:13:77:e5:29:4c:aa:0d:65:86:3f: d0:a8:d1:ee:97:cd:01:b3:c9:d9:30:6e:df:4b:4f: 0c:9a:1a:4e:5d:52:c5:16:11:7d:87:8e:52:9e:98: 66:ca:3b:f0:7b:d4:f5:df:68:62:3b:a4:2f:56:41: dc:04:fb:f1:f1:b7:76:97:37:70:16:e4:01:ab:b4: 07:59:85:5a:61:46:3f:2f:ee:13:e1:cd:a6:f1:e6: 1f:c3:5b:e5:eb:7c:36:f7:2f:5e:6e:30:b1:e2:88: 38:e9:7e:64:59:13:89:f3:e1:ec:56:c5:85:ff:33: 4d:bb:3e:1e:74:a9:76:ca:c1:78:c6:a9:f4:95:b4: d4:70:66:7b:91:2a:a3:f2:6f:fc:52:42:22:32:16: ae:8a:60:5c:5b:b3:ab:6b:2b:9e:cc:6f:2c:ab:8b: fe:bc:28:78:b4:ce:ab:9d:cb:1c:34:5c:39:b2:ec: 31:27:61:8f:ab:5a:23:9c:18:5e:dc:51:e4:81:e7: fe:49:f2:f0:c3:45:85:78:85:6d:b5:e9:9a:11:64: d1:b4:5d:3e:67:01:89:60:d8:0c:02:48:13:4f:b3: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7F:40:9E:42:C4:15:AD:91:3D:24:E7:A0:40:FE:73:C8:EF:4D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/32ef4d9f-13e5-3199-91f9-9122dad25524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:95:e2:5b:38:a5:e4:a0:5b:69:3a:34:1b:cd:ff:aa:79:73: b4:fe:3d:d0:50:21:f5:d5:ea:a8:8a:91:9f:0f:cb:2a:06:d5: 4d:fa:1c:69:4f:63:a9:00:4d:dd:5c:7b:e2:dd:03:a9:01:5d: 33:db:d1:5f:9f:83:20:45:d8:52:20:55:2d:e5:12:a2:1c:2c: 9c:f7:ed:95:ce:36:58:ae:b9:f3:12:99:5b:2d:22:67:e9:b3: 8d:65:96:25:17:f4:d4:56:df:1e:be:5a:b2:7c:a9:53:65:6f: 34:5b:0b:bc:3e:bb:b1:bb:1b:f1:ed:d1:33:26:a5:77:41:8e: 23:3a:37:a2:92:f7:7c:58:1a:76:83:d6:23:c7:85:c8:b4:96: 98:ff:b8:b9:bd:86:3b:29:bd:3f:60:f0:cb:1e:91:39:76:ff: bd:f0:63:30:a1:ab:b8:c4:11:73:c1:bc:ed:e3:06:11:07:2e: 12:65:29:9b:de:67:29:07:90:fe:56:97:32:fd:96:85:68:ce: 40:62:cd:82:cf:94:d5:3b:82:0a:8c:13:61:f8:66:35:a0:03: f7:35:c1:81:2c:02:58:5e:d9:93:f6:fd:42:1c:7c:98:28:f1: 0d:27:17:e2:c2:da:e6:fc:04:6a:8a:e4:61:2b:a2:30:8f:4e: 42:e6:93:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnup1VuiXzbv9svoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZTE3ZTU5ZWItNmI2Yy00MzE4LWI2OGQtNjJjYjZlMDdmYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha2lMO2MhWkMxYBMORks+ZDvk0r9S05gEKWt zFz3I1/xmBN35SlMqg1lhj/QqNHul80Bs8nZMG7fS08MmhpOXVLFFhF9h45Snphm yjvwe9T132hiO6QvVkHcBPvx8bd2lzdwFuQBq7QHWYVaYUY/L+4T4c2m8eYfw1vl 63w29y9ebjCx4og46X5kWROJ8+HsVsWF/zNNuz4edKl2ysF4xqn0lbTUcGZ7kSqj 8m/8UkIiMhauimBcW7OrayuezG8sq4v+vCh4tM6rncscNFw5suwxJ2GPq1ojnBhe 3FHkgef+SfLww0WFeIVttemaEWTRtF0+ZwGJYNgMAkgTT7MEOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZ/QJ5CxBWtkT0k56BA/nPI700VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzJlZjRkOWYtMTNlNS0z MTk5LTkxZjktOTEyMmRhZDI1NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEAhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqV4ls4peSgW2k6NBvN/6p5c7T+PdBQIfXV6qiKkZ8PyyoG1U36HGlP Y6kATd1ce+LdA6kBXTPb0V+fgyBF2FIgVS3lEqIcLJz37ZXONliuufMSmVstImfp s41lliUX9NRW3x6+WrJ8qVNlbzRbC7w+u7G7G/Ht0TMmpXdBjiM6N6KS93xYGnaD 1iPHhci0lpj/uLm9hjspvT9g8MsekTl2/73wYzChq7jEEXPBvO3jBhEHLhJlKZve ZykHkP5WlzL9loVozkBizYLPlNU7ggqME2H4ZjWgA/c1wYEsAlhe2ZP2/UIcfJgo 8Q0nF+LC2ub8BGqK5GErojCPTkLmk1w= -----END CERTIFICATE-----Generated at Mon Jun 30 21:06:18 2025 by rpki-client