$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa File: 9321b008-0f22-3d80-8c12-c151456cd1da.roa (raw, json) Hash identifier: xhvdUq7k888SvG63T8JqiX5IhMjS3nI4uCCvp/5VY5k= Subject key identifier: 70:2D:0B:2C:AD:AA:4D:E5:B7:46:40:65:89:F4:E9:70:03:16:80:34 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA85308DEFAD31E5D6605B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:30:8d:ef:ad:31:e5:d6:60:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=52d7c7b3-c824-42cc-93d7-e90cdc712031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:fa:76:bd:c5:e7:56:a0:a0:97:35:c9:4d: 55:04:28:1b:73:bf:53:07:92:12:37:b2:86:24:45: 0e:8a:41:e0:ab:be:69:8c:74:ed:3b:b1:11:dd:63: 06:7c:6d:38:5a:ab:13:03:94:24:97:17:3f:b0:ca: 64:9a:80:42:22:ce:ac:5b:11:49:ef:da:29:92:ea: 22:d0:f3:de:5e:45:70:27:eb:d4:a6:c8:1f:f9:04: a0:38:d3:2b:07:f9:5e:3e:9a:34:5f:bc:74:5f:55: 59:1a:5e:72:b4:04:98:76:c2:e9:fe:6c:7a:66:da: 06:63:96:8b:a7:2f:76:9b:86:70:15:27:66:46:22: 1d:a4:78:5d:57:2d:51:b3:48:58:3c:48:bc:8e:18: 17:af:ff:c9:0c:13:ce:15:51:26:cc:fb:78:7d:67: 16:ca:f8:d0:6c:38:03:41:b8:fc:b7:b3:d0:bc:2d: a8:58:77:30:79:fb:03:9c:9a:88:2c:ee:69:66:d4: 2d:f7:89:22:4a:b2:2d:3f:1a:39:d5:b8:83:77:33: 5d:84:a6:c7:b7:80:83:3a:41:34:98:f3:ba:67:36: bb:03:4e:73:cd:57:72:8c:c9:1d:37:c8:da:26:92: af:59:97:59:69:38:1b:0f:a8:0b:c7:09:47:ec:20: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2D:0B:2C:AD:AA:4D:E5:B7:46:40:65:89:F4:E9:70:03:16:80:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:0c:d4:ef:9a:44:40:f4:9e:67:af:80:a0:73:c3:89:7f:fc: f9:74:5d:82:3d:b0:c3:68:d3:75:e8:db:20:2c:a9:0c:2b:61: d0:f1:1d:5b:66:75:ec:3c:5d:62:ef:50:50:a7:e6:16:18:3a: 5d:f7:66:63:f7:b6:1c:fc:fb:b6:27:af:7a:75:04:da:31:64: eb:e3:ec:9f:b1:c4:2f:e2:12:fe:fc:4d:34:d3:0e:0a:51:0d: 8f:11:ff:5f:7f:07:f2:b2:ba:b2:b5:31:4a:bb:4f:6a:38:8a: 1a:14:ba:33:4e:7f:ab:82:78:b1:a0:d1:50:99:ca:88:19:70: 5d:40:8f:4f:8a:a5:fe:11:a0:4f:b3:78:20:7b:8d:c7:62:0b: 55:29:01:2d:18:d7:0d:af:b8:db:2c:44:c2:01:dd:bf:a1:99: 51:9c:90:58:82:bd:b5:67:a0:1b:82:e1:2f:b1:dd:c0:4e:da: 89:25:54:a1:57:f1:38:ff:04:f5:0b:94:6f:f5:ad:a5:c2:c2: f7:ed:f5:f6:d5:e1:41:9a:16:10:c4:d8:95:6e:e4:40:78:92: 80:23:14:88:62:9e:12:18:b8:c4:5c:ab:8d:59:e9:6e:86:3a: 28:26:74:9d:2a:e1:c7:d1:2c:73:e2:78:d4:8d:a7:03:10:6d: 2e:31:0f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTCN760x5dZgWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NTJkN2M3YjMtYzgyNC00MmNjLTkzZDctZTkwY2RjNzEyMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVL6dr3F51agoJc1yU1VBCgbc79TB5ISN7KG JEUOikHgq75pjHTtO7ER3WMGfG04WqsTA5Qklxc/sMpkmoBCIs6sWxFJ79opkuoi 0PPeXkVwJ+vUpsgf+QSgONMrB/lePpo0X7x0X1VZGl5ytASYdsLp/mx6ZtoGY5aL py92m4ZwFSdmRiIdpHhdVy1Rs0hYPEi8jhgXr//JDBPOFVEmzPt4fWcWyvjQbDgD Qbj8t7PQvC2oWHcwefsDnJqILO5pZtQt94kiSrItPxo51biDdzNdhKbHt4CDOkE0 mPO6Zza7A05zzVdyjMkdN8jaJpKvWZdZaTgbD6gLxwlH7CCxNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAtCyytqk3lt0ZAZYn06XADFoA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTMyMWIwMDgtMGYyMi0z ZDgwLThjMTItYzE1MTQ1NmNkMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMM1O+aRED0nmevgKBzw4l//Pl0XYI9sMNo03Xo2yAsqQwrYdDxHVtm dew8XWLvUFCn5hYYOl33ZmP3thz8+7Ynr3p1BNoxZOvj7J+xxC/iEv78TTTTDgpR DY8R/19/B/KyurK1MUq7T2o4ihoUujNOf6uCeLGg0VCZyogZcF1Aj0+Kpf4RoE+z eCB7jcdiC1UpAS0Y1w2vuNssRMIB3b+hmVGckFiCvbVnoBuC4S+x3cBO2oklVKFX 8Tj/BPULlG/1raXCwvft9fbV4UGaFhDE2JVu5EB4koAjFIhinhIYuMRcq41Z6W6G OigmdJ0q4cfRLHPieNSNpwMQbS4xD8M= -----END CERTIFICATE-----Generated at Sat Jun 7 05:10:09 2025 by rpki-client