$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3efd7d26-16ab-3e4f-bd9a-360b6767f2f8.roa File: 3efd7d26-16ab-3e4f-bd9a-360b6767f2f8.roa (raw, json) Hash identifier: 0dqzx7Al047soYyqhnLIhEYch9dAwn1mk4YfIa7zKp0= Subject key identifier: E5:0C:5A:7C:B5:29:E5:A1:53:4C:CF:1A:96:32:6B:82:48:58:40:17 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA85307EBD04496473E6BB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3efd7d26-16ab-3e4f-bd9a-360b6767f2f8.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:30:7e:bd:04:49:64:73:e6:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=8e035c65-05d0-4825-825b-07e436b3bec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:33:18:34:5b:13:de:7f:aa:91:ae:2c:42: 35:e4:0d:8d:0b:e4:32:55:96:c1:c7:dc:69:a2:0b: 8d:8e:43:38:c6:03:42:8a:5a:6c:af:23:12:21:9f: 5e:64:57:e0:6b:24:65:27:41:e2:c5:a2:5c:64:25: 98:25:74:43:e7:2d:1e:b7:50:5c:78:40:04:4c:22: a3:3e:48:2d:2e:c0:b4:48:38:12:da:bc:38:4e:b4: b5:17:ff:a0:74:bc:38:a3:31:e1:2b:02:96:31:36: 27:94:38:74:e7:6a:1f:af:82:b1:f9:ee:4c:59:4e: c1:9c:ae:d2:60:f9:48:c9:64:31:f2:f2:b8:2a:83: d8:74:df:c2:5a:71:bf:5a:00:26:04:31:b4:57:5f: a8:74:2a:5a:d0:ed:f1:63:f7:4a:9c:74:4e:ed:80: 1e:9f:01:af:86:9c:ac:0d:79:02:55:3c:43:f2:2b: 1b:af:a5:13:7e:bb:a9:7c:04:b8:9f:91:b3:9d:c9: 4c:50:9a:c1:96:2e:79:33:1c:58:b0:05:97:0b:3b: c2:1b:44:be:44:ae:18:5b:8d:c1:5a:6b:50:7e:61: a2:2a:b9:80:b3:86:fd:1c:21:c0:00:08:cc:ca:e0: 3d:c1:3e:94:d8:82:02:a0:ac:43:3b:9a:23:0c:ad: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0C:5A:7C:B5:29:E5:A1:53:4C:CF:1A:96:32:6B:82:48:58:40:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3efd7d26-16ab-3e4f-bd9a-360b6767f2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6f:33:bb:bd:6d:52:3e:4b:79:a7:1e:27:8c:1b:d7:51:c5: bc:42:98:29:9a:11:a2:cc:6c:1d:cd:21:b9:3c:31:13:1e:0e: 13:2b:e6:1b:c3:0a:42:01:8e:37:39:a3:51:6b:14:7e:d0:45: 7a:a4:83:34:f7:11:39:c2:64:79:79:06:01:01:fc:ef:d6:eb: ce:de:c5:ad:5e:6e:11:11:fd:11:1d:e7:c7:6c:fb:c6:e4:82: 49:84:98:7e:40:74:36:fe:2a:f3:63:5b:0d:1b:54:23:e9:08: 45:30:2a:b3:00:62:9a:5d:30:dd:b0:a2:0a:e2:1c:9a:8a:2a: 4d:f9:bb:49:ac:cc:32:8e:bd:b3:46:a7:c2:2e:5c:16:83:1d: bc:e8:9c:88:3c:f0:cc:60:54:63:e7:06:3d:ac:48:ef:0f:00: 37:b9:df:8f:a3:69:f6:3d:24:0d:45:d9:db:ea:70:f9:03:ab: 93:35:94:c5:d9:aa:ed:b1:97:cc:d3:0a:62:c6:95:68:6e:59: f5:eb:8a:de:a4:33:16:de:5d:9b:81:6c:f1:9c:ed:5f:17:27: 09:62:56:cf:dd:d0:46:ee:7c:a3:a8:d4:5d:28:05:9e:a4:52: 0e:4f:c0:e6:5b:46:1a:18:89:ff:d7:6e:5b:6c:a1:56:77:0a: 7c:a0:ce:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTB+vQRJZHPmu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk OGUwMzVjNjUtMDVkMC00ODI1LTgyNWItMDdlNDM2YjNiZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDIzGDRbE95/qpGuLEI15A2NC+QyVZbBx9xp oguNjkM4xgNCilpsryMSIZ9eZFfgayRlJ0HixaJcZCWYJXRD5y0et1BceEAETCKj PkgtLsC0SDgS2rw4TrS1F/+gdLw4ozHhKwKWMTYnlDh052ofr4Kx+e5MWU7BnK7S YPlIyWQx8vK4KoPYdN/CWnG/WgAmBDG0V1+odCpa0O3xY/dKnHRO7YAenwGvhpys DXkCVTxD8isbr6UTfrupfAS4n5GznclMUJrBli55MxxYsAWXCzvCG0S+RK4YW43B WmtQfmGiKrmAs4b9HCHAAAjMyuA9wT6U2IICoKxDO5ojDK08uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUMWny1KeWhU0zPGpYya4JIWEAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2VmZDdkMjYtMTZhYi0z ZTRmLWJkOWEtMzYwYjY3NjdmMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBvM7u9bVI+S3mnHieMG9dRxbxCmCmaEaLMbB3NIbk8MRMeDhMr5hvD CkIBjjc5o1FrFH7QRXqkgzT3ETnCZHl5BgEB/O/W687exa1ebhER/REd58ds+8bk gkmEmH5AdDb+KvNjWw0bVCPpCEUwKrMAYppdMN2wogriHJqKKk35u0mszDKOvbNG p8IuXBaDHbzonIg88MxgVGPnBj2sSO8PADe534+jafY9JA1F2dvqcPkDq5M1lMXZ qu2xl8zTCmLGlWhuWfXrit6kMxbeXZuBbPGc7V8XJwliVs/d0EbufKOo1F0oBZ6k Ug5PwOZbRhoYif/XbltsoVZ3Cnygzgo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:10 2025 by rpki-client