$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/590b4724-9458-3df4-b527-179795940c7a.roa File: 590b4724-9458-3df4-b527-179795940c7a.roa (raw, json) Hash identifier: ZRYjchNgGjeZeP8l8aqoJ/T4iAkeKCsoh3OV4b5j8Iw= Subject key identifier: 18:2A:34:01:4F:91:3F:91:09:0C:E6:BC:0B:A0:19:0D:DC:EF:00:E4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA9739C67FFA313F298D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/590b4724-9458-3df4-b527-179795940c7a.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.68.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:97:39:c6:7f:fa:31:3f:29:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=a0b317b1-39fe-4ab0-a9fa-4e341a8d256c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:35:ef:22:94:99:ad:9a:b5:52:ce:45:91: 43:6d:73:8d:e1:27:51:58:e4:4f:b3:bd:a3:87:68: bf:b8:75:d9:9d:57:fd:c5:0d:ba:b9:23:96:43:bd: bb:2b:41:39:96:19:a9:d8:d3:d3:65:13:c9:54:fa: 64:19:01:96:a9:5f:41:7d:04:00:b1:f1:56:14:b9: c9:97:98:98:e2:b3:7f:58:79:57:fc:38:ce:ab:ef: 0d:d6:78:c3:89:67:06:70:20:69:c1:56:5c:97:02: a7:a8:5b:47:73:65:a5:ff:3b:e7:0b:f0:fe:a1:b5: 9d:86:d8:0a:73:e7:25:ae:bb:d6:1a:a7:de:72:f5: ff:a7:1a:20:8a:8f:34:60:c8:d4:e0:f5:40:8d:33: a5:06:85:7e:06:33:12:a9:79:64:cc:6b:2d:41:82: 1c:28:2f:33:cc:ca:20:91:f2:32:3c:27:ba:da:7b: 50:b6:27:ee:c5:9f:b0:d0:f7:21:df:17:3a:2f:85: 05:e7:17:5c:43:7e:80:45:dd:c9:e0:a7:ab:4d:67: 7b:d7:39:c2:1b:ef:6b:d0:c9:f3:9f:65:d3:86:a8: 9a:a6:ab:2c:b1:a1:48:65:fc:17:dd:c9:fb:81:98: f8:95:5e:d9:d8:e5:f9:48:bd:ef:e4:5a:40:e6:2d: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2A:34:01:4F:91:3F:91:09:0C:E6:BC:0B:A0:19:0D:DC:EF:00:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/590b4724-9458-3df4-b527-179795940c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:fe:6f:dd:7b:41:f9:c5:c4:e3:24:55:44:18:58:a0:c1:cd: ea:ce:61:2b:40:aa:2a:c5:7f:22:5f:76:4c:07:71:3f:a7:b7: 7d:3f:be:ec:3b:5c:38:eb:dd:26:67:30:1c:62:32:2d:71:39: b9:4e:c0:1a:91:42:52:41:b2:28:94:b8:68:10:08:0e:e5:9d: b9:f6:40:ad:54:22:4d:ac:64:e7:a9:e3:46:e8:28:75:32:34: ff:c3:31:c9:49:05:ae:b6:ac:dc:02:31:0c:b9:28:bb:2a:da: 84:7e:45:e4:d9:8e:a5:cf:85:ab:a9:8a:9a:64:9d:36:22:19: 1a:f6:89:16:1c:fd:d7:39:e6:3c:6a:fe:06:36:97:10:e7:bb: df:e6:c0:44:80:e3:42:33:0d:c9:7b:37:b5:4c:19:fe:b4:e4: 08:7e:64:90:a0:23:d0:db:ef:5f:c2:4f:3b:b7:e5:c6:92:24: 36:09:e1:37:db:9e:6a:60:68:a0:a6:e3:0b:56:85:39:d2:54: 11:13:f0:82:23:b1:00:74:54:1c:b5:34:2e:4d:da:44:6d:ee: ce:d6:05:c1:4e:01:2f:fb:e1:07:84:78:97:b1:64:f7:5d:8b: 1c:6d:3e:cd:46:37:ca:a1:2c:c5:d2:7c:99:5c:de:c2:3b:71: c0:39:7a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupc5xn/6MT8pjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YTBiMzE3YjEtMzlmZS00YWIwLWE5ZmEtNGUzNDFhOGQyNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMg17yKUma2atVLORZFDbXON4SdRWORPs72j h2i/uHXZnVf9xQ26uSOWQ727K0E5lhmp2NPTZRPJVPpkGQGWqV9BfQQAsfFWFLnJ l5iY4rN/WHlX/DjOq+8N1njDiWcGcCBpwVZclwKnqFtHc2Wl/zvnC/D+obWdhtgK c+clrrvWGqfecvX/pxogio80YMjU4PVAjTOlBoV+BjMSqXlkzGstQYIcKC8zzMog kfIyPCe62ntQtifuxZ+w0Pch3xc6L4UF5xdcQ36ARd3J4KerTWd71znCG+9r0Mnz n2XThqiapqsssaFIZfwX3cn7gZj4lV7Z2OX5SL3v5FpA5i0xaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgqNAFPkT+RCQzmvAugGQ3c7wDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTkwYjQ3MjQtOTQ1OC0z ZGY0LWI1MjctMTc5Nzk1OTQwYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/+b917QfnFxOMkVUQYWKDBzerOYStAqirFfyJfdkwHcT+nt30/vuw7 XDjr3SZnMBxiMi1xOblOwBqRQlJBsiiUuGgQCA7lnbn2QK1UIk2sZOep40boKHUy NP/DMclJBa62rNwCMQy5KLsq2oR+ReTZjqXPhaupippknTYiGRr2iRYc/dc55jxq /gY2lxDnu9/mwESA40IzDcl7N7VMGf605Ah+ZJCgI9Db71/CTzu35caSJDYJ4Tfb nmpgaKCm4wtWhTnSVBET8IIjsQB0VBy1NC5N2kRt7s7WBcFOAS/74QeEeJexZPdd ixxtPs1GN8qhLMXSfJlc3sI7ccA5eg0= -----END CERTIFICATE-----Generated at Sat Jun 7 19:52:44 2025 by rpki-client