$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24623cb4-a137-3d76-a45c-126f643d62f1.roa File: 24623cb4-a137-3d76-a45c-126f643d62f1.roa (raw, json) Hash identifier: XPvZqxfDu3JqkW3hvQcnF7NMQatCozcfur2igZNzrL4= Subject key identifier: E9:C9:5C:7B:62:F4:8E:6D:34:63:66:54:6B:48:92:0E:3C:97:3A:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E91FB0DEBD4E40D626F3C700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24623cb4-a137-3d76-a45c-126f643d62f1.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 172.68.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:b0:de:bd:4e:40:d6:26:f3:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=04d9c377-9f31-4425-a239-49cc7dbaf434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:42:10:14:a7:1d:b9:8d:e8:a3:50:04:ed: 1e:50:d7:cc:14:5f:c4:75:cc:1b:39:b5:ff:91:2a: a1:d7:1b:6d:3c:31:e6:29:41:e3:0e:88:7b:6f:71: b0:de:b4:66:b9:db:79:dd:bc:2e:64:0b:f0:c2:8d: 7f:a2:26:f0:86:f3:e8:80:7b:fb:fa:82:13:f9:bb: 84:af:8c:97:94:cd:d9:10:e1:3d:f2:a1:4f:c8:0f: 44:28:d1:8f:d0:6a:6c:84:0d:55:ca:85:13:a1:8f: bd:a1:8b:80:7b:fe:71:0f:0b:d6:c0:17:0c:d8:99: d0:23:62:a1:d3:9f:71:e3:10:96:1c:54:ca:43:d9: 50:e2:3e:9f:48:45:b7:88:ac:4f:2f:a8:dc:02:ad: 81:49:70:b8:53:ff:df:d2:bc:64:bd:f9:a5:27:50: 90:ef:d5:cb:11:a6:eb:8b:66:7e:cd:f1:75:46:a6: f4:21:78:40:39:d8:0a:ba:67:e2:e0:73:a7:35:35: 61:6d:86:02:d9:35:44:d1:cf:81:a6:ff:b3:0f:dd: b4:79:18:b7:3e:06:c2:77:26:0e:4c:f8:01:2f:e3: 36:ee:8c:17:78:47:ce:8c:ff:ff:28:8b:13:07:7e: 3d:92:0f:dc:67:87:e3:53:93:5e:ae:b7:04:8b:dd: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C9:5C:7B:62:F4:8E:6D:34:63:66:54:6B:48:92:0E:3C:97:3A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/24623cb4-a137-3d76-a45c-126f643d62f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:0c:10:9e:55:b1:39:ef:d4:bd:a8:b0:e1:0b:ff:73:85:7b: e5:7d:ed:44:e7:7b:68:df:ba:1e:cd:dc:a0:b3:d4:c4:78:05: 08:d8:00:ac:51:16:eb:80:84:19:84:13:31:12:72:86:db:41: 6f:40:2f:64:ed:cf:6c:7f:b2:32:cf:6e:77:aa:f9:55:95:ff: 89:ee:f1:73:8d:ed:0c:f9:39:71:05:1f:78:b4:a1:ba:e2:dd: 16:36:3d:5b:bf:ca:9d:6b:2b:11:44:1b:93:6b:a5:e5:85:46: ae:bf:bd:54:69:54:f6:a7:95:a4:dd:b6:1f:74:de:f4:04:ad: 32:1a:43:37:a7:a5:68:e1:b0:c6:62:f9:0c:b4:1f:72:b3:45: 33:ba:18:50:aa:e7:25:19:7a:ab:16:d5:99:5e:11:40:cf:40: e6:05:b6:a0:24:4f:a1:16:db:d7:81:7d:3b:d1:18:4e:10:20: e6:9e:93:6d:d8:9e:d8:81:0b:52:f4:13:ea:97:17:ad:f1:33: 3b:85:55:ec:89:67:84:c0:12:78:60:20:e9:a1:32:50:c2:90: 62:b7:d2:e7:73:78:c4:e1:52:16:ab:2b:8d:e2:13:dc:f0:b7: 0e:b0:3f:89:a7:aa:31:f4:3b:f5:46:be:a7:78:70:47:56:5f: 9e:93:69:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH7DevU5A1ibzxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk MDRkOWMzNzctOWYzMS00NDI1LWEyMzktNDljYzdkYmFmNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskVCEBSnHbmN6KNQBO0eUNfMFF/EdcwbObX/ kSqh1xttPDHmKUHjDoh7b3Gw3rRmudt53bwuZAvwwo1/oibwhvPogHv7+oIT+buE r4yXlM3ZEOE98qFPyA9EKNGP0GpshA1VyoUToY+9oYuAe/5xDwvWwBcM2JnQI2Kh 059x4xCWHFTKQ9lQ4j6fSEW3iKxPL6jcAq2BSXC4U//f0rxkvfmlJ1CQ79XLEabr i2Z+zfF1Rqb0IXhAOdgKumfi4HOnNTVhbYYC2TVE0c+Bpv+zD920eRi3PgbCdyYO TPgBL+M27owXeEfOjP//KIsTB349kg/cZ4fjU5NerrcEi90XPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnJXHti9I5tNGNmVGtIkg48lzrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjQ2MjNjYjQtYTEzNy0z ZDc2LWE0NWMtMTI2ZjY0M2Q2MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgMEJ5VsTnv1L2osOEL/3OFe+V97UTne2jfuh7N3KCz1MR4BQjYAKxR FuuAhBmEEzEScobbQW9AL2Ttz2x/sjLPbneq+VWV/4nu8XON7Qz5OXEFH3i0obri 3RY2PVu/yp1rKxFEG5NrpeWFRq6/vVRpVPanlaTdth903vQErTIaQzenpWjhsMZi +Qy0H3KzRTO6GFCq5yUZeqsW1ZleEUDPQOYFtqAkT6EW29eBfTvRGE4QIOaek23Y ntiBC1L0E+qXF63xMzuFVeyJZ4TAEnhgIOmhMlDCkGK30udzeMThUharK43iE9zw tw6wP4mnqjH0O/VGvqd4cEdWX56TaZE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:35 2025 by rpki-client