$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c6f11f2-ef18-3d07-a37e-560b765948cb.roa File: 5c6f11f2-ef18-3d07-a37e-560b765948cb.roa (raw, json) Hash identifier: A2RqvR9ZresCpPg0RvBSVFU8aCiZoy3wkEUq+86gPos= Subject key identifier: BF:EF:17:14:1E:4B:A1:81:3A:EE:FA:60:66:A2:4C:B5:80:6C:3A:71 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA852FE443135D3CB9E8CC80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c6f11f2-ef18-3d07-a37e-560b765948cb.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:2f:e4:43:13:5d:3c:b9:e8:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=86073eea-0f02-43f3-b36a-c6ffd5bdedf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:be:79:b0:72:af:87:ad:56:5c:9b:a8:c0: 5b:f6:10:ba:96:51:c9:18:72:01:10:ae:e9:7a:c1: 97:a6:66:c6:0c:ef:62:e6:c0:ac:b8:9e:c4:0a:4f: f0:6e:d6:c7:67:25:81:a3:d8:82:46:83:87:b4:eb: 6e:14:24:a7:19:2e:36:6c:7c:84:b1:a7:1d:8e:49: 9d:6c:01:89:6f:44:fa:5c:84:7d:bc:77:3c:05:02: 04:2a:d8:ff:15:e9:33:2f:8a:1a:60:db:df:74:92: 45:b3:4a:cf:53:b9:99:38:e1:2b:c1:71:c1:0e:39: c6:02:68:f8:2d:01:5e:5a:c6:0a:3f:10:07:aa:17: 2b:d8:96:b4:2c:67:2f:b4:9e:19:d8:07:d3:8e:27: a5:58:4b:1f:dc:a9:a6:83:19:28:5d:0d:c6:b6:e9: 69:92:c2:15:af:2d:24:2e:84:f9:65:5c:3c:4f:6b: f5:bd:09:a7:c7:9b:29:70:70:60:69:84:26:9c:b6: f6:a8:f7:28:64:c2:fd:0a:56:d4:e4:82:fb:a7:0d: 4d:55:dc:76:16:b9:04:7b:17:fc:fa:11:47:d2:0d: 07:d5:1a:ff:25:ca:0e:b7:6b:e0:bb:4c:36:46:c5: f8:e7:17:99:40:a5:71:2b:2c:a5:a6:36:af:a7:01: 95:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EF:17:14:1E:4B:A1:81:3A:EE:FA:60:66:A2:4C:B5:80:6C:3A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c6f11f2-ef18-3d07-a37e-560b765948cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f9:66:3c:94:52:68:13:66:bb:08:46:b0:71:ba:8e:4e:e6: b2:30:e8:9f:92:a6:38:83:4d:7a:bd:02:e3:26:30:56:bf:9e: 56:39:fa:29:a0:74:b9:c2:73:a4:da:52:85:2e:eb:07:47:9b: e6:25:99:3c:99:07:a0:b5:6c:47:1a:eb:9d:b9:82:c3:46:51: be:b3:c4:e6:79:8f:39:9e:9e:cf:31:2d:18:2a:95:42:e5:92: a0:a0:0a:f3:0a:12:b4:96:ba:ff:a8:e2:33:d8:fb:b2:10:3c: ee:6a:01:e7:96:ee:21:fb:74:b1:9e:31:51:90:af:ab:5f:90: ba:2b:70:3a:0b:73:63:70:de:cd:3b:26:13:21:5c:2f:5f:39: aa:ab:58:a0:58:26:cd:ed:43:39:4e:03:fd:3c:18:f7:bb:05: a3:84:b0:5d:f0:1f:b1:bb:a6:07:e1:45:87:ef:58:a7:52:8d: f2:8b:0d:cb:39:ef:e5:8f:04:f6:d5:c3:3a:fa:a0:fc:af:6e: 48:38:20:3f:85:38:34:57:f8:99:35:9b:53:f0:d0:0f:4f:b1: 34:d5:33:c2:20:56:37:67:71:99:cf:c5:ff:d1:31:1b:00:5d: c5:31:7a:77:96:93:eb:24:78:35:ed:b3:b7:6b:0c:8c:51:74: 27:67:ce:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhS/kQxNdPLnozIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ODYwNzNlZWEtMGYwMi00M2YzLWIzNmEtYzZmZmQ1YmRlZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7S+ebByr4etVlybqMBb9hC6llHJGHIBEK7p esGXpmbGDO9i5sCsuJ7ECk/wbtbHZyWBo9iCRoOHtOtuFCSnGS42bHyEsacdjkmd bAGJb0T6XIR9vHc8BQIEKtj/FekzL4oaYNvfdJJFs0rPU7mZOOErwXHBDjnGAmj4 LQFeWsYKPxAHqhcr2Ja0LGcvtJ4Z2AfTjielWEsf3KmmgxkoXQ3GtulpksIVry0k LoT5ZVw8T2v1vQmnx5spcHBgaYQmnLb2qPcoZML9ClbU5IL7pw1NVdx2FrkEexf8 +hFH0g0H1Rr/JcoOt2vgu0w2RsX45xeZQKVxKyylpjavpwGV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/vFxQeS6GBOu76YGaiTLWAbDpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWM2ZjExZjItZWYxOC0z ZDA3LWEzN2UtNTYwYjc2NTk0OGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr5ZjyUUmgTZrsIRrBxuo5O5rIw6J+SpjiDTXq9AuMmMFa/nlY5+img dLnCc6TaUoUu6wdHm+YlmTyZB6C1bEca6525gsNGUb6zxOZ5jzmens8xLRgqlULl kqCgCvMKErSWuv+o4jPY+7IQPO5qAeeW7iH7dLGeMVGQr6tfkLorcDoLc2Nw3s07 JhMhXC9fOaqrWKBYJs3tQzlOA/08GPe7BaOEsF3wH7G7pgfhRYfvWKdSjfKLDcs5 7+WPBPbVwzr6oPyvbkg4ID+FODRX+Jk1m1Pw0A9PsTTVM8IgVjdncZnPxf/RMRsA XcUxeneWk+skeDXts7drDIxRdCdnzoc= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:08 2025 by rpki-client