$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f752ed9-f187-3f6d-8db9-556f115425b6.roa File: 0f752ed9-f187-3f6d-8db9-556f115425b6.roa (raw, json) Hash identifier: YlUEtinstzGd2tmCCpbMs+uw01crVPOvFmaLIZM/y3w= Subject key identifier: B9:19:55:38:5B:63:F0:95:F4:4D:FC:D7:20:2C:1A:8B:8D:27:11:65 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BAA114A9C595B470B9DF98 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f752ed9-f187-3f6d-8db9-556f115425b6.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.68.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:a1:14:a9:c5:95:b4:70:b9:df:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=435a10c2-0719-4681-9598-2bf7e9c1a4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:dd:af:89:9e:05:a2:34:51:c0:5a:4a:9c: 6d:f8:35:40:48:b7:01:b5:16:90:d9:83:8d:b2:2e: 8c:e5:49:a4:aa:45:67:50:99:0a:2b:88:de:64:e9: b5:64:13:c5:74:a9:63:c6:96:9b:46:4d:89:43:02: e2:ee:20:00:e0:4a:20:ec:34:96:0b:ce:5b:78:62: 10:c6:aa:81:1b:67:19:6f:4b:c7:58:58:d7:dd:bc: ae:f0:c2:fa:c5:da:0b:49:40:b7:b0:30:f3:99:ee: 2f:3e:cf:7e:e9:1d:77:14:a0:c5:dd:15:d1:cd:45: f9:23:fb:c3:26:73:57:fa:c0:7d:df:55:6b:1a:47: 81:6f:11:82:a0:95:9a:45:2c:51:71:1c:58:ff:21: fe:de:cf:10:b1:98:99:94:fe:bf:e0:fe:10:b7:79: f5:44:ad:04:b6:33:86:61:ba:fc:8a:a1:0f:f1:33: 68:87:ed:59:e3:2f:31:80:60:de:2f:29:c0:98:10: aa:27:ed:d8:e7:8a:12:b4:dd:c0:35:dc:be:ee:ee: c8:78:5f:46:03:9c:f8:6e:dc:5d:89:25:ad:8c:c2: ce:62:f3:4e:b9:c5:64:0f:82:43:f6:b7:9a:4b:e1: 43:1e:9a:45:b3:c9:d5:a5:8d:9a:d6:a4:4e:00:6c: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:19:55:38:5B:63:F0:95:F4:4D:FC:D7:20:2C:1A:8B:8D:27:11:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0f752ed9-f187-3f6d-8db9-556f115425b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3c:1d:23:69:86:c9:88:1f:4f:35:0e:8a:74:72:ef:61:e7: 93:bf:7d:51:41:29:7f:01:aa:3e:de:93:dc:80:59:98:24:24: 46:36:ad:1f:bd:ba:c5:da:0f:bd:8b:aa:23:92:4a:82:58:28: 00:47:29:e6:94:65:f8:59:cd:ad:9e:ec:af:2d:b1:21:81:0a: 97:8d:4c:57:94:9d:83:0f:ba:d0:4a:39:00:26:c3:db:59:6e: 7e:40:21:29:90:21:d4:80:61:af:eb:80:f8:4b:04:55:db:cd: 92:81:6b:82:aa:5b:fd:65:2c:54:b9:7f:82:35:4e:e3:85:19: 50:e5:a8:62:e8:c6:b3:9d:3c:5a:7c:ce:73:94:cd:87:e0:08: 11:86:95:66:2e:09:9c:26:8c:5e:6f:ea:98:f9:38:55:12:56: f5:1c:97:d3:86:48:87:53:bd:e7:6a:3c:28:9a:a7:aa:ba:20: 19:c0:8c:3c:bd:ac:d7:44:6b:fd:b2:eb:8a:53:52:40:77:33: e2:28:02:b0:a5:25:ac:09:ea:b5:68:fc:3c:b7:27:83:96:00: 9f:79:1f:a5:62:a5:9a:88:1b:4f:91:0a:29:b4:bc:ef:0b:39: 7e:30:a6:4c:10:c2:45:84:fd:fe:35:61:8c:fe:16:ab:da:86: 8a:d6:9c:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuqEUqcWVtHC535gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NDM1YTEwYzItMDcxOS00NjgxLTk1OTgtMmJmN2U5YzFhNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXrdr4meBaI0UcBaSpxt+DVASLcBtRaQ2YON si6M5UmkqkVnUJkKK4jeZOm1ZBPFdKljxpabRk2JQwLi7iAA4Eog7DSWC85beGIQ xqqBG2cZb0vHWFjX3byu8ML6xdoLSUC3sDDzme4vPs9+6R13FKDF3RXRzUX5I/vD JnNX+sB931VrGkeBbxGCoJWaRSxRcRxY/yH+3s8QsZiZlP6/4P4Qt3n1RK0EtjOG Ybr8iqEP8TNoh+1Z4y8xgGDeLynAmBCqJ+3Y54oStN3ANdy+7u7IeF9GA5z4btxd iSWtjMLOYvNOucVkD4JD9reaS+FDHppFs8nVpY2a1qROAGyVEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkZVThbY/CV9E381yAsGouNJxFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGY3NTJlZDktZjE4Ny0z ZjZkLThkYjktNTU2ZjExNTQyNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM8HSNphsmIH081Dop0cu9h55O/fVFBKX8Bqj7ek9yAWZgkJEY2rR+9 usXaD72LqiOSSoJYKABHKeaUZfhZza2e7K8tsSGBCpeNTFeUnYMPutBKOQAmw9tZ bn5AISmQIdSAYa/rgPhLBFXbzZKBa4KqW/1lLFS5f4I1TuOFGVDlqGLoxrOdPFp8 znOUzYfgCBGGlWYuCZwmjF5v6pj5OFUSVvUcl9OGSIdTvedqPCiap6q6IBnAjDy9 rNdEa/2y64pTUkB3M+IoArClJawJ6rVo/Dy3J4OWAJ95H6VipZqIG0+RCim0vO8L OX4wpkwQwkWE/f41YYz+FqvahorWnCo= -----END CERTIFICATE-----Generated at Fri Jun 6 16:47:13 2025 by rpki-client