$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16b66bc8-05ac-39c3-b5f0-47599c95dcea.roa File: 16b66bc8-05ac-39c3-b5f0-47599c95dcea.roa (raw, json) Hash identifier: E5ak3gQcp3ZBMtm3/aKhXqQTWX+nDJoMnqVF89id+o4= Subject key identifier: B0:59:30:81:89:89:E7:5A:78:A8:4E:B7:D0:F9:84:E6:0E:87:04:B0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E91FB12F7988BA6A3990AE20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16b66bc8-05ac-39c3-b5f0-47599c95dcea.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 172.68.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:b1:2f:79:88:ba:6a:39:90:ae:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=c3d959e0-b4a7-4f1a-9f7e-8d521a3869d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:34:a9:19:9f:c9:24:9e:01:3b:69:b5:77:d1: a6:a4:52:b1:f6:23:a5:8b:e5:1b:b9:b8:17:c9:2b: fb:20:5f:c6:75:f3:36:90:ec:82:a3:7c:3c:52:10: e6:4c:32:b5:30:36:3c:ff:2e:02:70:d7:3a:c0:cc: 27:ee:94:78:33:10:59:d9:37:1e:a0:70:b3:79:25: a6:5b:f7:e2:83:f1:fb:3f:fe:3e:77:52:9c:b9:6f: 51:32:9d:d7:c5:08:00:b4:08:59:ee:e4:22:46:5c: a9:d9:e6:8e:dd:ea:b5:42:d0:c0:c6:95:3e:cd:a6: 07:5f:e4:bc:88:71:19:b1:c8:fe:a6:aa:96:17:e8: f7:e4:34:67:72:ac:e4:f9:c3:36:cd:02:a1:e0:62: 37:f4:f6:e4:df:a9:6a:07:29:65:9b:85:76:d2:b8: 6e:da:fc:26:85:89:b1:b5:5f:33:18:ef:72:0e:cb: 84:63:8f:4c:7e:2f:d3:a1:67:37:31:0c:a1:54:94: 76:2b:51:78:e6:89:06:55:df:c9:3d:26:2b:86:b4: ac:71:a6:c5:92:7c:02:f1:36:cd:21:86:ca:a9:32: eb:a2:40:69:d0:b4:b6:1e:93:eb:b4:02:da:dc:9c: b4:e9:26:24:7b:bf:c1:b0:4a:e4:68:bd:21:22:65: 99:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:59:30:81:89:89:E7:5A:78:A8:4E:B7:D0:F9:84:E6:0E:87:04:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16b66bc8-05ac-39c3-b5f0-47599c95dcea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:0e:0c:a3:7c:b6:5b:68:69:ff:7d:20:59:3a:52:65:47:34: ca:7e:ef:15:f3:bf:d5:83:97:4b:63:6e:20:47:92:fd:15:b7: b3:a3:11:47:45:23:6e:39:e6:72:ab:c9:a2:0d:54:48:4d:5d: 65:f2:bf:f3:27:62:7f:ab:77:30:3c:6a:1f:03:32:ef:46:2f: 6b:a3:37:0a:02:01:81:7f:53:71:28:de:5c:cd:47:2a:1e:fd: e7:de:dc:36:4e:9d:34:e1:0a:76:5f:8d:d9:45:ab:1c:77:69: 6e:c9:b1:2a:50:ca:c2:b2:b9:a8:cd:ea:fa:44:a3:f5:5f:b5: 56:46:43:1f:2d:be:4a:2f:5c:cf:b1:e4:ab:d9:d9:8a:9a:6d: 4a:b6:f8:30:01:bc:c7:2e:89:bd:a3:08:30:a8:00:fb:17:7c: 34:4b:cf:b4:68:cd:89:4d:d5:79:ce:5b:9e:4f:39:e3:c9:70: 20:22:19:dc:fc:cb:92:24:51:76:50:e8:fd:8a:58:2f:91:81: 14:2e:2c:a3:af:96:81:12:b1:25:2f:4f:c1:44:98:eb:90:d3: 15:e8:db:5f:32:29:6b:1c:d2:77:c9:1d:61:2f:6b:46:4e:bc: 3f:82:cc:21:5c:a4:95:4a:54:42:01:d5:c0:4c:3b:df:f3:ee: 0c:84:ab:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH7EveYi6ajmQriAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk YzNkOTU5ZTAtYjRhNy00ZjFhLTlmN2UtOGQ1MjFhMzg2OWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzSpGZ/JJJ4BO2m1d9GmpFKx9iOli+UbubgX ySv7IF/GdfM2kOyCo3w8UhDmTDK1MDY8/y4CcNc6wMwn7pR4MxBZ2TceoHCzeSWm W/fig/H7P/4+d1KcuW9RMp3XxQgAtAhZ7uQiRlyp2eaO3eq1QtDAxpU+zaYHX+S8 iHEZscj+pqqWF+j35DRncqzk+cM2zQKh4GI39Pbk36lqByllm4V20rhu2vwmhYmx tV8zGO9yDsuEY49Mfi/ToWc3MQyhVJR2K1F45okGVd/JPSYrhrSscabFknwC8TbN IYbKqTLrokBp0LS2HpPrtALa3Jy06SYke7/BsErkaL0hImWZgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBZMIGJiedaeKhOt9D5hOYOhwSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTZiNjZiYzgtMDVhYy0z OWMzLWI1ZjAtNDc1OTljOTVkY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgODKN8tltoaf99IFk6UmVHNMp+7xXzv9WDl0tjbiBHkv0Vt7OjEUdF I2455nKryaINVEhNXWXyv/MnYn+rdzA8ah8DMu9GL2ujNwoCAYF/U3Eo3lzNRyoe /efe3DZOnTThCnZfjdlFqxx3aW7JsSpQysKyuajN6vpEo/VftVZGQx8tvkovXM+x 5KvZ2YqabUq2+DABvMcuib2jCDCoAPsXfDRLz7RozYlN1XnOW55POePJcCAiGdz8 y5IkUXZQ6P2KWC+RgRQuLKOvloESsSUvT8FEmOuQ0xXo218yKWsc0nfJHWEva0ZO vD+CzCFcpJVKVEIB1cBMO9/z7gyEq8Q= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:01 2025 by rpki-client