$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cacd8b5-e66d-3714-95da-8cf1a1034606.roa File: 4cacd8b5-e66d-3714-95da-8cf1a1034606.roa (raw, json) Hash identifier: 212Xnn/sgkPbNb8Md83AbrgPS7qL8z7OU2oO/p9pldo= Subject key identifier: 21:83:DF:BE:D2:CA:9C:13:47:49:02:1E:1F:93:37:8F:B8:53:AA:59 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA85453F5A5065446D519B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cacd8b5-e66d-3714-95da-8cf1a1034606.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:45:3f:5a:50:65:44:6d:51:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=688ca2d4-fc84-4bbf-89ae-cb9f2093e9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ea:a7:06:29:8b:8f:d5:32:93:8d:9a:17:21: 71:75:45:39:21:90:1d:08:24:db:3e:dc:1f:70:f4: 19:29:61:d6:a0:01:9e:9c:cb:c0:12:40:36:a1:53: 1c:52:a2:06:ab:7f:05:1a:a1:75:e6:0e:fd:d4:1f: 30:8a:89:ba:80:e6:0d:9f:2d:62:c2:e8:74:d0:d4: 44:31:40:03:02:32:1f:43:92:a3:08:54:c9:73:9a: 0f:de:e3:a2:e2:32:6f:9d:21:9d:da:46:60:3d:dc: d6:fd:b9:30:12:42:bb:0c:82:b1:36:a5:f5:b9:2b: 6b:f4:89:66:d0:36:bc:3c:7d:8d:af:c9:c0:10:dd: 53:29:a4:27:fe:b6:8d:a5:81:44:fc:9d:52:c7:d9: c9:eb:91:f2:7e:25:18:96:0c:35:c9:ba:04:03:52: 51:2f:1d:1a:e8:c5:6b:c8:66:2d:e1:d6:0a:84:31: 84:1a:3c:e8:76:fa:35:f1:c8:46:bb:ea:f0:ad:24: 2e:d9:9a:20:f6:60:d0:b1:91:ef:2d:cb:c6:53:ec: 32:76:e3:a5:6b:b6:96:77:e2:2b:ab:bf:9d:c4:cd: cf:94:57:38:6e:54:4f:69:f1:f6:05:ab:d3:9d:4f: d4:5e:de:93:58:d3:9b:de:db:9c:32:08:10:34:7e: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:83:DF:BE:D2:CA:9C:13:47:49:02:1E:1F:93:37:8F:B8:53:AA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cacd8b5-e66d-3714-95da-8cf1a1034606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:de:01:6f:da:df:f1:ad:f8:76:16:a9:5b:20:e8:f5:55:28: 69:61:5d:8d:6e:32:e3:d5:2e:3a:ac:10:d6:58:5d:31:77:1e: 43:a3:90:06:71:6b:16:a1:5b:79:67:88:66:41:c9:17:3a:ee: e2:1c:c0:92:d4:4f:82:82:4e:e5:af:f9:22:cc:0b:ca:bc:c4: 14:42:ae:d3:d2:94:15:93:40:0a:92:0a:9e:93:5e:55:b9:79: d1:4a:95:b9:95:ae:f6:f8:b0:6f:40:60:c3:e9:3b:68:7f:68: b3:42:d5:a9:6b:fa:d3:d4:69:02:33:0f:57:66:1e:7f:b6:37: 62:bb:c5:4e:dd:20:ba:8f:f6:03:e5:70:93:4e:a1:b4:c5:d5: 2a:d8:6d:44:83:7b:65:57:07:cf:c1:33:8a:28:06:9b:23:0c: 17:38:d9:a3:dc:42:3b:41:0d:e1:0a:82:de:31:a5:22:c5:3d: 12:e3:dd:22:29:69:c0:cb:d0:ad:f1:dd:84:f6:50:d2:2f:f0: 98:98:09:29:09:de:2c:1f:e0:41:99:17:4d:dc:08:9b:37:6e: b5:d7:60:7d:23:28:db:13:7b:76:14:32:2f:b7:5f:a9:74:80: 27:1b:bc:e2:9f:a9:d6:ea:9b:fe:46:e3:a2:e7:f5:a7:9b:d1: 5f:27:13:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUU/WlBlRG1RmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk Njg4Y2EyZDQtZmM4NC00YmJmLTg5YWUtY2I5ZjIwOTNlOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+qnBimLj9Uyk42aFyFxdUU5IZAdCCTbPtwf cPQZKWHWoAGenMvAEkA2oVMcUqIGq38FGqF15g791B8wiom6gOYNny1iwuh00NRE MUADAjIfQ5KjCFTJc5oP3uOi4jJvnSGd2kZgPdzW/bkwEkK7DIKxNqX1uStr9Ilm 0Da8PH2Nr8nAEN1TKaQn/raNpYFE/J1Sx9nJ65HyfiUYlgw1yboEA1JRLx0a6MVr yGYt4dYKhDGEGjzodvo18chGu+rwrSQu2Zog9mDQsZHvLcvGU+wyduOla7aWd+Ir q7+dxM3PlFc4blRPafH2BavTnU/UXt6TWNOb3tucMggQNH4qTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGD377SypwTR0kCHh+TN4+4U6pZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGNhY2Q4YjUtZTY2ZC0z NzE0LTk1ZGEtOGNmMWExMDM0NjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfeAW/a3/Gt+HYWqVsg6PVVKGlhXY1uMuPVLjqsENZYXTF3HkOjkAZx axahW3lniGZByRc67uIcwJLUT4KCTuWv+SLMC8q8xBRCrtPSlBWTQAqSCp6TXlW5 edFKlbmVrvb4sG9AYMPpO2h/aLNC1alr+tPUaQIzD1dmHn+2N2K7xU7dILqP9gPl cJNOobTF1SrYbUSDe2VXB8/BM4ooBpsjDBc42aPcQjtBDeEKgt4xpSLFPRLj3SIp acDL0K3x3YT2UNIv8JiYCSkJ3iwf4EGZF03cCJs3brXXYH0jKNsTe3YUMi+3X6l0 gCcbvOKfqdbqm/5G46Ln9aeb0V8nEy4= -----END CERTIFICATE-----Generated at Fri Jun 6 16:54:26 2025 by rpki-client