$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/325d1ed0-3e8d-3abb-aa3c-6109e8eb2b52.roa File: 325d1ed0-3e8d-3abb-aa3c-6109e8eb2b52.roa (raw, json) Hash identifier: loljW4Jh5xz7/cMpqf20qprys/3hqBVWL5GU9K6NKZM= Subject key identifier: 8B:56:1D:13:97:BB:55:A1:E5:64:D8:B3:50:6F:3D:28:40:AC:6F:A3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E91FB002172E88C7AE469C40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/325d1ed0-3e8d-3abb-aa3c-6109e8eb2b52.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 172.68.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:b0:02:17:2e:88:c7:ae:46:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=24916e57-6fec-447c-bd14-b69b4044ee01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:f4:86:3b:47:72:d8:83:1c:0b:c4:b3:ff: 4c:5f:bc:1b:b3:d7:7b:1e:ae:43:20:59:27:0a:d7: d7:49:33:42:8c:ea:21:dc:0c:84:3d:44:b0:49:61: c9:e4:c0:a1:db:43:89:d3:23:ce:57:3a:af:05:81: fa:1e:80:38:a5:3e:89:cc:55:80:56:5c:ae:ef:d2: 51:16:78:9a:71:27:0f:e6:4a:78:82:bd:1d:d1:75: aa:f4:40:cb:4b:ee:ca:78:a7:35:72:40:e1:ac:28: 10:ea:46:9c:30:66:70:84:97:ec:f9:44:d8:f6:8e: 50:5a:cd:68:0e:f8:f2:7b:6d:73:f7:d0:19:72:6e: 74:26:06:d5:fe:f5:31:b4:5c:f3:26:d1:a0:5d:16: 7e:96:62:ca:0f:62:dc:0b:66:46:33:20:3d:72:4c: b4:8d:1a:09:62:ce:16:3c:24:60:22:93:97:8d:81: 7d:36:0f:2c:9e:00:de:05:d9:a4:d2:b5:1e:10:25: 79:89:f8:44:f3:54:b1:62:97:c6:2e:77:1a:86:74: 9e:d4:f6:63:4a:63:14:29:d3:b7:92:5f:ea:94:36: 4d:0f:b3:c0:fa:c0:5f:bc:b4:6d:00:34:d7:ce:e9: 73:ee:85:ff:d3:d2:c6:10:4b:ef:9d:43:44:d2:90: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:56:1D:13:97:BB:55:A1:E5:64:D8:B3:50:6F:3D:28:40:AC:6F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/325d1ed0-3e8d-3abb-aa3c-6109e8eb2b52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:76:3e:4d:85:a6:08:90:95:5b:e1:fe:94:63:fe:54:3a:69: d8:35:41:9a:6c:94:75:58:73:e7:88:d6:71:47:eb:5e:00:0d: e6:2a:38:c2:f5:b6:9e:ad:07:9b:bf:ab:e4:9e:a0:8d:55:8c: 85:39:13:3f:bb:b9:f2:fb:96:86:50:b2:a6:fe:10:4f:27:da: 0d:7c:4b:86:75:16:91:28:34:81:67:af:64:1a:de:90:12:ed: 1e:2d:60:bc:47:4d:8e:eb:6e:11:0b:ad:a6:12:89:6e:fc:2c: 70:5d:6a:bd:37:73:4c:f9:3b:a2:0f:15:67:c7:92:e2:aa:a9: 0b:83:c8:07:22:55:f3:53:41:a5:e9:f9:f6:82:e3:ce:51:0d: 80:b4:d5:c3:a8:a2:73:93:91:6d:fb:45:d4:d0:22:de:d7:35: 87:d6:91:45:74:32:65:b1:6e:7f:6b:cd:aa:42:f8:dd:69:0a: fa:ba:7b:5f:f2:98:1b:2c:c7:6d:a5:97:32:33:f2:ba:cc:c1: e5:ca:7f:e1:71:b6:03:bd:57:fc:7e:e1:3e:2d:72:54:d5:ed: 0a:58:00:06:ae:24:26:b1:d3:eb:b6:a7:d3:4e:a9:47:7e:40: 59:08:97:1b:52:33:6a:54:9b:4b:4f:97:78:65:d6:ea:ed:14: 8c:d0:c6:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH7ACFy6Ix65GnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk MjQ5MTZlNTctNmZlYy00NDdjLWJkMTQtYjY5YjQwNDRlZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGr0hjtHctiDHAvEs/9MX7wbs9d7Hq5DIFkn CtfXSTNCjOoh3AyEPUSwSWHJ5MCh20OJ0yPOVzqvBYH6HoA4pT6JzFWAVlyu79JR FniacScP5kp4gr0d0XWq9EDLS+7KeKc1ckDhrCgQ6kacMGZwhJfs+UTY9o5QWs1o Dvjye21z99AZcm50JgbV/vUxtFzzJtGgXRZ+lmLKD2LcC2ZGMyA9cky0jRoJYs4W PCRgIpOXjYF9Ng8sngDeBdmk0rUeECV5ifhE81SxYpfGLncahnSe1PZjSmMUKdO3 kl/qlDZND7PA+sBfvLRtADTXzulz7oX/09LGEEvvnUNE0pBMRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItWHROXu1Wh5WTYs1BvPShArG+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzI1ZDFlZDAtM2U4ZC0z YWJiLWFhM2MtNjEwOWU4ZWIyYjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrESUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt2Pk2FpgiQlVvh/pRj/lQ6adg1QZpslHVYc+eI1nFH614ADeYqOML1 tp6tB5u/q+SeoI1VjIU5Ez+7ufL7loZQsqb+EE8n2g18S4Z1FpEoNIFnr2Qa3pAS 7R4tYLxHTY7rbhELraYSiW78LHBdar03c0z5O6IPFWfHkuKqqQuDyAciVfNTQaXp +faC485RDYC01cOoonOTkW37RdTQIt7XNYfWkUV0MmWxbn9rzapC+N1pCvq6e1/y mBssx22llzIz8rrMweXKf+FxtgO9V/x+4T4tclTV7QpYAAauJCax0+u2p9NOqUd+ QFkIlxtSM2pUm0tPl3hl1urtFIzQxp0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:49 2025 by rpki-client