$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa File: 0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa (raw, json) Hash identifier: SHWsOWcyfw8mvpyBPW7SYqMAFTaE4MbPtlsNbMOvYo8= Subject key identifier: 0A:A5:85:F4:54:38:F3:7F:74:F2:39:51:E2:C9:9E:97:0A:2A:35:95 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA85316CB88DE61BB06A03C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:31:6c:b8:8d:e6:1b:b0:6a:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=20d85fb4-f139-40aa-880a-8e2762ffae49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:65:b1:bb:6f:32:50:ad:66:44:16:72:39: da:33:ad:53:57:32:1f:90:47:04:ca:a2:c2:35:73: bc:81:80:5f:8a:64:9e:4c:5a:ed:ee:b9:5a:92:50: d9:b9:34:40:91:e7:fe:6d:8c:3d:f9:fe:c1:b5:6f: 01:98:a2:cd:de:df:6b:03:b8:9b:ea:80:ed:62:f0: 14:d6:af:a7:98:52:b6:5a:9d:b3:ef:2c:79:60:ab: 31:4e:ee:f8:5a:43:90:33:38:38:f1:05:c3:ea:f0: 10:f1:df:4e:87:28:51:15:b8:9a:29:7b:62:e3:90: ac:d1:cc:65:69:e3:1f:98:82:29:3c:3a:5c:21:2d: ce:72:af:8a:90:a0:71:2b:15:4e:89:07:1a:dd:a5: 9e:92:40:8a:59:32:33:fe:03:59:0e:a1:85:ec:c4: 7c:55:fb:c9:e1:3b:03:73:e7:9b:e5:8a:08:da:31: 11:bc:6c:a1:64:93:3f:96:37:02:c7:85:51:19:21: d9:fa:9c:e9:7a:39:80:99:58:8e:84:e4:89:0b:8e: 30:0e:99:21:07:35:2a:ae:b0:53:a4:b8:0a:3b:d3: 54:64:bb:d7:63:a1:01:b7:43:ac:9f:aa:6f:49:db: eb:4e:eb:d3:5d:93:92:0e:4c:90:e8:fb:cb:e2:fa: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A5:85:F4:54:38:F3:7F:74:F2:39:51:E2:C9:9E:97:0A:2A:35:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0863dfa3-d7c0-3abf-9291-07bf27e9477f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:03:3f:0e:9d:d7:fa:24:8e:a9:8a:81:7b:59:a1:5c:27:87: 25:71:aa:99:01:97:5f:59:03:26:d1:a9:79:0d:df:c0:bc:fd: 82:ca:d3:f4:d8:80:39:50:41:42:fd:18:71:c8:48:32:bf:f2: 9e:48:39:c2:a8:05:0f:45:78:06:ff:71:5b:32:f1:65:ae:cf: be:4d:87:e5:d3:cd:f8:78:f4:36:ea:1d:69:32:02:c2:df:b3: 04:b1:7c:f4:a3:81:41:a8:20:aa:c5:c1:5b:39:c4:12:f3:c8: c2:31:46:9f:8d:21:21:02:bc:31:f5:1a:e2:4e:00:b0:ba:4c: e4:bc:cc:06:52:3a:3a:52:ba:df:36:7f:ec:61:7e:c0:84:db: a1:d3:45:71:19:88:82:43:de:44:ee:50:b5:38:69:ee:7a:ef: 97:23:b2:ac:00:95:32:de:60:22:e4:c9:e0:59:f8:75:ba:eb: 1e:b0:6c:ba:19:8b:7a:e0:42:41:98:73:03:9a:94:4b:de:75: e0:1b:4c:63:03:b2:54:17:f0:14:8a:5b:62:44:5b:49:71:3f: f4:6e:5c:01:09:12:4b:d8:93:08:04:14:a6:d7:84:76:bb:b9: b4:21:76:e4:9e:73:17:77:8d:b8:c6:c5:33:3f:80:69:02:fd: 45:c2:52:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTFsuI3mG7BqA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk MjBkODVmYjQtZjEzOS00MGFhLTg4MGEtOGUyNzYyZmZhZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFxlsbtvMlCtZkQWcjnaM61TVzIfkEcEyqLC NXO8gYBfimSeTFrt7rlaklDZuTRAkef+bYw9+f7BtW8BmKLN3t9rA7ib6oDtYvAU 1q+nmFK2Wp2z7yx5YKsxTu74WkOQMzg48QXD6vAQ8d9OhyhRFbiaKXti45Cs0cxl aeMfmIIpPDpcIS3Ocq+KkKBxKxVOiQca3aWekkCKWTIz/gNZDqGF7MR8VfvJ4TsD c+eb5YoI2jERvGyhZJM/ljcCx4VRGSHZ+pzpejmAmViOhOSJC44wDpkhBzUqrrBT pLgKO9NUZLvXY6EBt0Osn6pvSdvrTuvTXZOSDkyQ6PvL4vrzQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqlhfRUOPN/dPI5UeLJnpcKKjWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDg2M2RmYTMtZDdjMC0z YWJmLTkyOTEtMDdiZjI3ZTk0NzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgDPw6d1/okjqmKgXtZoVwnhyVxqpkBl19ZAybRqXkN38C8/YLK0/TY gDlQQUL9GHHISDK/8p5IOcKoBQ9FeAb/cVsy8WWuz75Nh+XTzfh49DbqHWkyAsLf swSxfPSjgUGoIKrFwVs5xBLzyMIxRp+NISECvDH1GuJOALC6TOS8zAZSOjpSut82 f+xhfsCE26HTRXEZiIJD3kTuULU4ae5675cjsqwAlTLeYCLkyeBZ+HW66x6wbLoZ i3rgQkGYcwOalEvedeAbTGMDslQX8BSKW2JEW0lxP/RuXAEJEkvYkwgEFKbXhHa7 ubQhduSecxd3jbjGxTM/gGkC/UXCUls= -----END CERTIFICATE-----Generated at Sat Jun 7 12:04:18 2025 by rpki-client