$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa File: 5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa (raw, json) Hash identifier: MCy49yhmznems6wKlIKBSOd2q+MU+bvjrbt13XaWekQ= Subject key identifier: 3A:6F:C2:86:A1:EF:9E:95:CE:BE:97:B3:C4:A1:28:ED:23:CD:21:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8544A78D9A632216C2F980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:44:a7:8d:9a:63:22:16:c2:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=b74886cb-577a-4a1f-9805-21c4dc9b4b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:60:db:35:64:ae:78:03:61:ea:d8:26:21: 60:02:92:18:bc:f4:66:98:b3:e1:13:4a:32:e0:f1: f2:a4:29:a8:9a:c9:5c:dd:47:bf:68:6c:bc:27:92: a6:df:6f:db:cc:b6:87:c9:6d:95:32:8d:68:9f:bd: f5:55:84:61:0c:79:85:49:46:f3:d0:4c:8d:62:a6: b3:43:cb:06:8e:cf:68:fd:ee:e8:b8:56:5a:e0:0e: 0d:00:16:89:0a:9f:1c:52:43:a6:ed:a9:75:07:7c: a1:f9:25:7a:28:43:56:75:3b:f2:a8:92:8b:54:28: 6e:d5:74:7a:9e:b5:9c:75:4e:24:1a:89:ea:b8:58: 6a:87:4b:fe:ad:86:4f:63:44:53:17:4a:88:a7:e1: 62:9e:95:ec:84:83:f9:05:c0:57:11:15:af:bf:ea: 51:b7:81:53:91:f5:49:cd:cb:5d:96:5e:1d:fa:eb: 5c:48:a4:94:3b:c5:e8:8d:c3:e1:eb:2b:90:fe:58: f2:e5:4d:16:65:57:3f:e7:31:81:8f:37:c6:36:b2: 4d:8c:de:db:2e:b9:23:e8:ed:17:fb:dc:09:c8:fb: b3:d7:e5:1f:37:51:07:c7:1d:2b:94:4f:26:f8:c2: 91:d4:3e:d9:76:a2:98:ed:92:0d:12:c1:f6:2f:d0: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:C2:86:A1:EF:9E:95:CE:BE:97:B3:C4:A1:28:ED:23:CD:21:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:30:12:b1:05:ce:66:ea:a4:5f:1f:5b:91:2b:67:37:96:4c: 94:ee:0a:0f:30:46:e5:7c:9d:32:09:9d:b7:77:91:42:e7:5b: b8:81:19:48:ce:5f:04:11:67:ed:78:8a:c0:5f:73:e8:a4:8e: 9e:d8:cf:34:d1:84:5e:18:54:d4:80:95:97:0b:96:16:92:2c: 88:e5:9b:47:ef:0d:aa:59:94:43:f9:3d:c3:55:4a:60:5a:8e: 62:fd:49:f4:a7:ff:9d:fc:75:0c:dc:21:32:03:7f:f4:53:13: 4b:c0:a7:67:1f:63:8b:8d:e9:e3:17:7d:5f:fa:2f:ff:70:08: 9b:e1:c0:a9:ab:7e:e1:0b:37:ba:de:2a:18:01:56:b7:ef:15: b7:28:bf:01:9a:31:05:85:bf:81:87:c0:7e:c9:7d:35:63:f8: 49:70:b8:5b:31:9a:8a:53:ba:a0:74:0d:61:43:58:d4:2b:0f: e4:3c:14:82:cf:5c:9c:42:95:1a:70:85:64:77:5b:63:dd:49: ef:01:78:62:86:6b:74:9e:8c:6d:d9:1c:c9:56:68:fc:69:d4: 19:03:1a:d5:50:45:ca:c5:7a:f9:46:8d:9c:11:25:f0:45:0e: 8b:ab:bf:6c:12:50:28:1f:ab:02:c3:e0:a1:43:80:e8:68:b7: 8f:25:fe:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUSnjZpjIhbC+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk Yjc0ODg2Y2ItNTc3YS00YTFmLTk4MDUtMjFjNGRjOWI0YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxxg2zVkrngDYerYJiFgApIYvPRmmLPhE0oy 4PHypCmomslc3Ue/aGy8J5Km32/bzLaHyW2VMo1on731VYRhDHmFSUbz0EyNYqaz Q8sGjs9o/e7ouFZa4A4NABaJCp8cUkOm7al1B3yh+SV6KENWdTvyqJKLVChu1XR6 nrWcdU4kGonquFhqh0v+rYZPY0RTF0qIp+FinpXshIP5BcBXERWvv+pRt4FTkfVJ zctdll4d+utcSKSUO8XojcPh6yuQ/ljy5U0WZVc/5zGBjzfGNrJNjN7bLrkj6O0X +9wJyPuz1+UfN1EHxx0rlE8m+MKR1D7ZdqKY7ZINEsH2L9DAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpvwoah756Vzr6Xs8ShKO0jzSHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWQ3MzAxMmUtZDZhYi0z OTdmLTlhMzEtOTJkNDE2ZTNjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4wErEFzmbqpF8fW5ErZzeWTJTuCg8wRuV8nTIJnbd3kULnW7iBGUjO XwQRZ+14isBfc+ikjp7YzzTRhF4YVNSAlZcLlhaSLIjlm0fvDapZlEP5PcNVSmBa jmL9SfSn/538dQzcITIDf/RTE0vAp2cfY4uN6eMXfV/6L/9wCJvhwKmrfuELN7re KhgBVrfvFbcovwGaMQWFv4GHwH7JfTVj+ElwuFsxmopTuqB0DWFDWNQrD+Q8FILP XJxClRpwhWR3W2PdSe8BeGKGa3SejG3ZHMlWaPxp1BkDGtVQRcrFevlGjZwRJfBF Dourv2wSUCgfqwLD4KFDgOhot48l/jw= -----END CERTIFICATE-----Generated at Fri Jun 6 16:50:27 2025 by rpki-client