$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37d04dd6-f1f1-3a28-be31-6286dbe630b6.roa File: 37d04dd6-f1f1-3a28-be31-6286dbe630b6.roa (raw, json) Hash identifier: MLF+FAYGxZGajCXy7aRabSfQc38qijHaBHA/WR6HdQE= Subject key identifier: AD:46:72:01:00:9E:E2:4A:D0:49:BF:91:56:12:6E:CA:C2:40:1D:11 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E91FAE37FD47755482EDFC18 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37d04dd6-f1f1-3a28-be31-6286dbe630b6.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 172.68.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:ae:37:fd:47:75:54:82:ed:fc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=acddff63-908a-4d8c-ad46-42ccda5f5b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:08:da:73:ba:37:e6:df:43:e4:6a:e9:37: 18:69:7e:f0:44:93:a9:c4:c5:c3:12:ce:5e:a9:c1: 60:fb:0d:8f:2b:27:f8:a0:05:18:aa:dc:9e:47:69: a6:86:92:78:86:84:9e:f8:2a:39:1e:88:73:63:5f: cf:ba:02:ec:07:5d:f9:1d:62:22:3b:fd:ee:32:3b: 68:42:a1:83:b2:db:f2:08:4f:07:cc:15:b8:bf:1b: fc:0c:1c:b7:66:28:4b:dd:a1:0e:1a:65:4f:6a:f6: 73:3d:42:6c:8b:00:a3:3f:f6:86:ec:2e:f2:05:6c: d9:c4:64:15:4c:c1:39:8a:15:f4:d9:b5:8f:c5:b0: 03:7d:48:b1:21:11:ac:63:4f:e7:e5:5c:ea:69:82: c4:66:8c:0c:81:51:32:97:bc:b4:d6:df:26:96:05: 66:ce:a3:9e:38:92:26:ca:8d:2f:d6:51:fe:cb:c4: c0:62:cd:ca:9b:d1:e7:83:de:9d:7e:f7:5c:3d:ce: 8b:e9:b6:e7:43:6f:69:5e:a0:08:24:d5:06:64:22: 8f:0d:95:37:ff:6e:21:08:a5:97:ed:71:30:38:ae: 3b:8a:ea:94:b4:d1:78:d1:b5:4c:2b:13:ba:8e:ee: cd:ac:96:4c:b4:43:c3:bb:43:9a:9f:8b:0d:10:f8: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:46:72:01:00:9E:E2:4A:D0:49:BF:91:56:12:6E:CA:C2:40:1D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37d04dd6-f1f1-3a28-be31-6286dbe630b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8b:cc:35:5f:81:6d:7f:1a:fd:85:43:cd:09:4b:06:9d:a3: 76:39:a6:b9:ec:6f:12:1a:95:1e:31:5f:30:bb:7b:1f:32:54: d1:18:d2:76:96:41:0b:6e:60:6a:36:79:de:4a:16:8e:19:a4: 67:59:df:49:01:49:2e:77:82:a1:b5:e9:7e:21:9d:a5:fd:09: d2:15:d0:ff:fe:d1:22:a1:39:16:a0:8c:8c:21:4e:4b:fe:3a: 74:86:96:7b:45:18:b0:85:25:b3:8a:5c:f9:8f:31:e4:21:7d: 52:15:4c:63:44:71:69:99:b9:15:0f:17:8c:1f:d9:d7:ef:69: 26:06:7f:ea:b4:9f:99:87:f0:af:81:84:2d:7d:c7:af:2e:5d: 00:4c:9a:a0:b4:e0:72:24:67:8e:e8:53:83:f0:0d:20:68:b9: d1:31:e1:21:56:03:a2:3c:22:35:18:93:80:59:86:1e:9d:e7: b5:81:a4:a6:00:4d:bd:82:b9:e3:06:67:55:5d:65:f1:ac:b3: 2e:10:4d:10:19:a2:62:9c:f0:f5:6d:06:ca:87:96:e7:7c:6d: 69:de:5a:76:bb:57:cf:48:f1:5f:fd:04:72:9a:59:e3:cb:9a: 71:9d:ab:72:a4:ed:91:66:65:91:a0:e5:02:c8:ca:c6:c6:38: fa:ec:18:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH643/Ud1VILt/BgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk YWNkZGZmNjMtOTA4YS00ZDhjLWFkNDYtNDJjY2RhNWY1YjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX0I2nO6N+bfQ+Rq6TcYaX7wRJOpxMXDEs5e qcFg+w2PKyf4oAUYqtyeR2mmhpJ4hoSe+Co5HohzY1/PugLsB135HWIiO/3uMjto QqGDstvyCE8HzBW4vxv8DBy3ZihL3aEOGmVPavZzPUJsiwCjP/aG7C7yBWzZxGQV TME5ihX02bWPxbADfUixIRGsY0/n5VzqaYLEZowMgVEyl7y01t8mlgVmzqOeOJIm yo0v1lH+y8TAYs3Km9Hng96dfvdcPc6L6bbnQ29pXqAIJNUGZCKPDZU3/24hCKWX 7XEwOK47iuqUtNF40bVMKxO6ju7NrJZMtEPDu0Oan4sNEPh8dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1GcgEAnuJK0Em/kVYSbsrCQB0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzdkMDRkZDYtZjFmMS0z YTI4LWJlMzEtNjI4NmRiZTYzMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCLzDVfgW1/Gv2FQ80JSwado3Y5prnsbxIalR4xXzC7ex8yVNEY0naW QQtuYGo2ed5KFo4ZpGdZ30kBSS53gqG16X4hnaX9CdIV0P/+0SKhORagjIwhTkv+ OnSGlntFGLCFJbOKXPmPMeQhfVIVTGNEcWmZuRUPF4wf2dfvaSYGf+q0n5mH8K+B hC19x68uXQBMmqC04HIkZ47oU4PwDSBoudEx4SFWA6I8IjUYk4BZhh6d57WBpKYA Tb2CueMGZ1VdZfGssy4QTRAZomKc8PVtBsqHlud8bWneWna7V89I8V/9BHKaWePL mnGdq3Kk7ZFmZZGg5QLIysbGOPrsGOM= -----END CERTIFICATE-----Generated at Thu Jun 5 19:01:25 2025 by rpki-client