$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652448bb-3d6e-3504-97d2-6e50fc7101b0.roa File: 652448bb-3d6e-3504-97d2-6e50fc7101b0.roa (raw, json) Hash identifier: 0vTr+i+LyRPN6FW5N2z5bfTxJW6klj/FbzLuGbrGjFA= Subject key identifier: 46:31:6C:24:14:A7:C2:32:F1:76:03:11:A6:A4:39:EA:E4:A3:D3:D4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA853006F1AEB7C72412EF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652448bb-3d6e-3504-97d2-6e50fc7101b0.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:30:06:f1:ae:b7:c7:24:12:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=bf1a79f6-1ddd-409d-a1f6-1a656217430a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:3b:40:64:f1:85:46:29:1b:b7:28:8d:92: 34:22:7a:19:4e:f4:8d:61:48:c8:a5:d9:ed:d5:a2: c6:2f:27:af:20:34:cf:55:07:27:a2:8e:d3:b4:22: 42:61:3c:5f:cc:53:b3:68:f4:a8:c2:e0:c6:92:c4: 2d:02:0c:c8:63:6c:64:f6:73:9d:b5:8f:18:5a:01: e2:ed:1b:51:6f:6f:43:7a:3f:cd:f5:5a:8e:27:ca: f1:18:ca:ae:fe:71:70:79:ae:8c:2f:06:4a:ec:21: b2:47:cc:53:64:5b:5e:a8:66:d3:12:a2:31:13:d7: fe:93:41:77:da:db:25:81:bb:eb:ca:fa:76:27:c9: 5d:91:55:86:72:2e:af:09:e5:5d:13:68:a9:f1:6b: 03:29:af:39:dc:1d:e7:bf:77:7f:a6:d5:b2:82:11: 08:16:9b:f3:6b:a3:6d:9e:42:18:f8:d3:a3:a9:d8: d3:34:47:74:f2:2f:9c:5d:f2:87:77:f5:f0:c1:18: 46:28:9c:a6:3d:8b:7e:c3:27:53:24:ca:9f:ce:ff: 6f:95:a2:69:f3:df:b2:76:d7:4d:1f:41:df:b0:98: da:7d:77:e5:6d:1a:a5:9f:60:a4:7e:59:66:de:01: bf:89:56:17:90:77:f4:cd:39:5b:73:3e:46:ee:63: 52:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:31:6C:24:14:A7:C2:32:F1:76:03:11:A6:A4:39:EA:E4:A3:D3:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652448bb-3d6e-3504-97d2-6e50fc7101b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:41:bf:d6:96:a6:df:36:d6:58:f0:9f:c6:ba:e9:d2:36:78: 8a:17:da:3d:54:b3:10:bc:12:e2:89:45:0e:ac:df:4e:88:4f: d3:af:18:b6:8c:7f:06:aa:eb:e3:53:77:3e:9d:a6:7a:cd:be: 2c:f5:81:91:0b:a9:c0:a5:8d:0f:3b:12:98:ff:a2:e8:9e:b1: 8e:87:55:a4:a3:fe:03:f5:f3:ae:92:09:ff:27:e4:7f:d1:11: 0f:94:5d:d3:c2:97:ca:1e:c8:10:57:88:8d:dc:75:1a:f8:45: bb:35:da:9e:4a:93:44:20:78:34:b1:18:04:63:82:4e:4c:58: 3c:73:fe:b5:9a:60:98:6b:c7:d6:ec:e8:1e:f5:50:1a:e9:d3: 2d:8a:66:b7:40:d8:22:0a:95:83:0f:e2:56:31:ae:d5:e1:28: 36:5b:1a:f9:6e:ae:24:65:d5:02:78:b5:eb:17:1c:ff:89:60: 65:33:32:f8:80:76:8d:2e:a1:db:f5:48:36:d6:8f:d0:f7:0a: a4:01:3e:bc:eb:1d:4c:05:cd:11:b4:63:74:87:cc:04:5c:9c: b9:b4:56:cc:1f:50:13:a4:86:3a:3a:1f:12:bc:e5:69:74:db: 07:31:bf:ab:ca:13:79:57:86:f9:1c:e8:58:bf:7c:9f:3d:28: 33:be:2a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTAG8a63xyQS7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk YmYxYTc5ZjYtMWRkZC00MDlkLWExZjYtMWE2NTYyMTc0MzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVo7QGTxhUYpG7cojZI0InoZTvSNYUjIpdnt 1aLGLyevIDTPVQcnoo7TtCJCYTxfzFOzaPSowuDGksQtAgzIY2xk9nOdtY8YWgHi 7RtRb29Dej/N9VqOJ8rxGMqu/nFwea6MLwZK7CGyR8xTZFteqGbTEqIxE9f+k0F3 2tslgbvryvp2J8ldkVWGci6vCeVdE2ip8WsDKa853B3nv3d/ptWyghEIFpvza6Nt nkIY+NOjqdjTNEd08i+cXfKHd/XwwRhGKJymPYt+wydTJMqfzv9vlaJp89+ydtdN H0HfsJjafXflbRqln2Ckfllm3gG/iVYXkHf0zTlbcz5G7mNSkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYxbCQUp8Iy8XYDEaakOerko9PUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjUyNDQ4YmItM2Q2ZS0z NTA0LTk3ZDItNmU1MGZjNzEwMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFBv9aWpt821ljwn8a66dI2eIoX2j1UsxC8EuKJRQ6s306IT9OvGLaM fwaq6+NTdz6dpnrNviz1gZELqcCljQ87Epj/ouiesY6HVaSj/gP1866SCf8n5H/R EQ+UXdPCl8oeyBBXiI3cdRr4Rbs12p5Kk0QgeDSxGARjgk5MWDxz/rWaYJhrx9bs 6B71UBrp0y2KZrdA2CIKlYMP4lYxrtXhKDZbGvluriRl1QJ4tesXHP+JYGUzMviA do0uodv1SDbWj9D3CqQBPrzrHUwFzRG0Y3SHzARcnLm0VswfUBOkhjo6HxK85Wl0 2wcxv6vKE3lXhvkc6Fi/fJ89KDO+KmM= -----END CERTIFICATE-----Generated at Sat Jun 7 05:06:37 2025 by rpki-client