$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3427f61f-e162-3ac7-a456-545094976444.roa File: 3427f61f-e162-3ac7-a456-545094976444.roa (raw, json) Hash identifier: Jt31vuXla5jUVx1vQdZ84ss203srYnAQ4vUObfZc9fg= Subject key identifier: 40:3B:E4:00:7B:75:35:5A:73:83:F3:71:3E:A7:57:05:4C:F4:41:A9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA95397C05CE3EB3371280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3427f61f-e162-3ac7-a456-545094976444.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.68.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:95:39:7c:05:ce:3e:b3:37:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=49e3ac7f-e19e-43db-a2bb-79c5729905b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:5e:b7:70:14:8d:ce:1d:6f:06:e3:06:82: 0b:46:3f:04:e2:46:88:2c:df:49:3f:28:0b:dd:e8: 83:c7:08:69:b9:e8:bb:7c:df:88:c8:64:54:b4:43: ce:a4:27:04:d7:71:49:03:ab:8b:03:e5:d3:f5:44: d7:97:b8:5c:7e:90:bd:5e:75:25:5d:77:4e:6d:03: 17:76:fd:91:5b:29:89:b8:13:32:4b:38:e5:19:8b: 3b:e0:0b:4f:c7:d0:f4:11:59:d8:82:58:2f:68:23: 24:de:ed:43:e2:05:36:ef:1e:b8:0b:a2:a7:65:f4: 87:23:9b:a7:b5:e7:d4:88:3a:84:6c:68:84:14:01: f8:0b:75:d8:dc:4e:19:10:60:ed:72:9c:82:6b:15: 63:e8:6f:c6:e9:55:45:05:4e:75:43:04:91:62:b4: 56:fa:44:e4:96:a6:c0:c5:c6:16:02:35:71:a9:2d: 33:28:a7:c2:3d:7f:0d:2a:c1:b2:3c:1b:29:e6:b4: 5a:25:c2:d4:1d:f3:5c:d7:35:53:72:2a:a2:60:3d: 70:87:d9:8e:83:47:6f:6b:5c:d9:6e:2e:47:8d:45: 36:a2:d3:b4:e5:8a:9c:20:5b:e6:12:41:da:e2:90: d7:8f:16:a4:79:07:18:7b:c8:9b:f3:95:9a:7e:69: a2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3B:E4:00:7B:75:35:5A:73:83:F3:71:3E:A7:57:05:4C:F4:41:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3427f61f-e162-3ac7-a456-545094976444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:27:b1:3b:33:5f:24:a4:0c:2b:8f:6e:81:00:e1:58:c0:e2: c8:47:e7:9e:48:ef:c6:55:e5:db:f2:32:a4:7c:39:d7:d7:8f: 8e:ab:fd:f1:ca:35:01:48:80:5e:4b:76:27:3b:ec:03:26:d8: 16:a3:e8:9c:9a:f5:64:c7:49:e5:e6:21:9e:a9:c2:3d:66:dd: 01:1c:d1:11:93:4e:7a:57:57:b6:f5:3a:d8:d8:9c:2a:73:a2: 60:78:08:4a:65:25:9c:ca:ac:1f:41:eb:c6:cc:f4:b5:f3:5c: 5c:d6:93:dd:e6:5b:99:8e:c4:2c:46:b0:68:d8:1a:82:98:d4: 1a:c6:f2:33:b0:da:8c:e2:57:9d:f2:27:1a:3d:df:9f:1c:26: dd:50:0d:32:99:0e:98:92:1e:70:d3:d8:cc:f6:c1:ba:a6:de: f2:f4:0b:2a:45:09:97:bf:59:e5:fc:bc:b2:27:22:ce:3c:18: c0:8d:4f:cd:87:fd:1a:55:a7:ba:36:8f:f3:92:14:a6:b7:60: 52:b6:92:91:ef:e8:be:94:05:46:1d:85:d8:c0:3b:5e:30:37: db:1a:c4:e9:eb:e6:8d:dd:3b:11:e0:0e:2d:51:14:bb:50:82: d6:ce:de:62:8d:68:f8:82:f4:04:7a:c9:d8:03:4c:5c:44:4b: 2b:8e:6d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupU5fAXOPrM3EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NDllM2FjN2YtZTE5ZS00M2RiLWEyYmItNzljNTcyOTkwNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljFet3AUjc4dbwbjBoILRj8E4kaILN9JPygL 3eiDxwhpuei7fN+IyGRUtEPOpCcE13FJA6uLA+XT9UTXl7hcfpC9XnUlXXdObQMX dv2RWymJuBMySzjlGYs74AtPx9D0EVnYglgvaCMk3u1D4gU27x64C6KnZfSHI5un tefUiDqEbGiEFAH4C3XY3E4ZEGDtcpyCaxVj6G/G6VVFBU51QwSRYrRW+kTklqbA xcYWAjVxqS0zKKfCPX8NKsGyPBsp5rRaJcLUHfNc1zVTciqiYD1wh9mOg0dva1zZ bi5HjUU2otO05YqcIFvmEkHa4pDXjxakeQcYe8ib85WafmmiyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA75AB7dTVac4PzcT6nVwVM9EGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzQyN2Y2MWYtZTE2Mi0z YWM3LWE0NTYtNTQ1MDk0OTc2NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcnsTszXySkDCuPboEA4VjA4shH555I78ZV5dvyMqR8OdfXj46r/fHK NQFIgF5Ldic77AMm2Baj6Jya9WTHSeXmIZ6pwj1m3QEc0RGTTnpXV7b1OtjYnCpz omB4CEplJZzKrB9B68bM9LXzXFzWk93mW5mOxCxGsGjYGoKY1BrG8jOw2oziV53y Jxo9358cJt1QDTKZDpiSHnDT2Mz2wbqm3vL0CypFCZe/WeX8vLInIs48GMCNT82H /RpVp7o2j/OSFKa3YFK2kpHv6L6UBUYdhdjAO14wN9saxOnr5o3dOxHgDi1RFLtQ gtbO3mKNaPiC9AR6ydgDTFxESyuObXs= -----END CERTIFICATE-----Generated at Thu Jun 5 19:02:34 2025 by rpki-client