$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa File: 9881220c-9ede-3293-a734-f3010f86829e.roa (raw, json) Hash identifier: ijlEn+3nhczxjt+nb4aoMhcExa4yf9e6xRlmvLpWu6w= Subject key identifier: 85:31:54:69:62:C1:8F:D5:A3:B3:D9:40:5C:11:75:5F:A1:DE:ED:C9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA974B1C5D0A0605DE3980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.68.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:97:4b:1c:5d:0a:06:05:de:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=2c3111c0-4383-430c-b0f6-28f9a172eb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:f0:e7:7b:45:2a:e2:e3:63:15:8a:f0:88: 99:7d:19:6a:b6:83:80:42:cb:42:e2:8f:5a:8d:07: a6:15:f8:82:5d:28:3b:1d:6f:b3:cd:7b:b4:15:df: 98:6a:45:2b:c1:94:f2:08:31:2d:14:39:dc:88:4f: 43:22:97:25:3c:1a:63:20:55:87:fb:60:8e:0c:b2: 14:a2:0c:90:99:f2:a5:87:e2:30:91:04:d4:86:dd: 1c:4a:9a:01:9d:70:b4:b1:f1:fe:89:8d:56:a3:a4: 3c:5c:3d:91:d8:c1:d0:aa:e2:0e:05:e1:c1:9c:29: 7b:d9:cf:a4:80:44:ec:da:68:b2:3b:f6:c1:9d:dc: 4a:d4:43:a1:56:e3:d5:c4:d6:02:dc:c6:09:0a:e2: 47:36:af:fb:ac:d8:b3:2d:70:39:16:a0:a2:9b:8a: 6d:34:16:fe:a5:80:9b:e2:58:3c:f8:d2:d4:b9:f5: c6:7a:93:93:d2:b4:25:f3:11:b3:19:d2:78:8b:1a: 30:05:d4:14:f8:2f:93:4d:2b:c7:36:1e:b6:71:7b: b3:65:eb:7a:ad:d8:7e:0a:8e:d7:77:fb:d1:c7:28: 40:96:92:43:a0:64:b6:7b:84:db:e8:42:7f:94:99: 4b:77:94:62:34:23:9e:3a:35:63:53:df:c5:52:56: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:31:54:69:62:C1:8F:D5:A3:B3:D9:40:5C:11:75:5F:A1:DE:ED:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:de:01:78:26:64:94:0f:9a:be:9d:07:37:62:93:fe:32:db: 5d:54:62:ca:8f:40:d1:b9:e0:32:bb:5b:06:26:0a:7b:3c:e1: f2:95:67:a2:1e:b3:fe:6b:41:01:4e:92:17:fd:a9:ff:e4:d2: 26:9d:92:25:5b:e0:d1:97:7d:91:46:8d:08:b2:55:06:94:2e: 4b:5a:a3:4f:07:1f:dc:1d:0d:36:40:18:2f:04:3e:88:fd:be: 0f:e4:bb:a8:a3:cb:b5:c4:c3:7b:7a:7f:85:a5:21:93:21:40: 04:87:7c:e9:ef:34:c9:79:5f:f8:6c:4e:48:9e:89:73:fb:37: d3:43:f3:a7:e7:8a:2b:9e:4b:4f:1d:b6:3f:df:d4:7f:e5:12: 2b:f5:7f:1f:c1:6f:35:eb:e5:df:e1:73:bc:ed:71:97:e2:d3: 9a:ec:bd:ea:cf:96:75:a4:fd:b6:f5:86:06:2b:44:65:12:ca: 4b:c8:a7:83:2f:b9:f6:e4:67:03:b0:29:23:88:da:16:f7:e1: 8e:6e:38:fc:00:93:51:6a:e8:d8:a9:79:f4:3a:e3:e8:73:e7: 99:aa:ea:46:50:a1:b2:eb:d7:d9:df:5b:ec:3f:d7:b6:58:97: 2d:b0:0a:2d:d6:17:e2:f3:7c:e0:f2:85:71:2c:0e:8a:60:24: 7a:ff:f9:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupdLHF0KBgXeOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MmMzMTExYzAtNDM4My00MzBjLWIwZjYtMjhmOWExNzJlYjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp/w53tFKuLjYxWK8IiZfRlqtoOAQstC4o9a jQemFfiCXSg7HW+zzXu0Fd+YakUrwZTyCDEtFDnciE9DIpclPBpjIFWH+2CODLIU ogyQmfKlh+IwkQTUht0cSpoBnXC0sfH+iY1Wo6Q8XD2R2MHQquIOBeHBnCl72c+k gETs2miyO/bBndxK1EOhVuPVxNYC3MYJCuJHNq/7rNizLXA5FqCim4ptNBb+pYCb 4lg8+NLUufXGepOT0rQl8xGzGdJ4ixowBdQU+C+TTSvHNh62cXuzZet6rdh+Co7X d/vRxyhAlpJDoGS2e4Tb6EJ/lJlLd5RiNCOeOjVjU9/FUlbKwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUxVGliwY/Vo7PZQFwRdV+h3u3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg4MTIyMGMtOWVkZS0z MjkzLWE3MzQtZjMwMTBmODY4MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/eAXgmZJQPmr6dBzdik/4y211UYsqPQNG54DK7WwYmCns84fKVZ6Ie s/5rQQFOkhf9qf/k0iadkiVb4NGXfZFGjQiyVQaULktao08HH9wdDTZAGC8EPoj9 vg/ku6ijy7XEw3t6f4WlIZMhQASHfOnvNMl5X/hsTkieiXP7N9ND86fniiueS08d tj/f1H/lEiv1fx/BbzXr5d/hc7ztcZfi05rsverPlnWk/bb1hgYrRGUSykvIp4Mv ufbkZwOwKSOI2hb34Y5uOPwAk1Fq6NipefQ64+hz55mq6kZQobLr19nfW+w/17ZY ly2wCi3WF+LzfODyhXEsDopgJHr/+TI= -----END CERTIFICATE-----Generated at Sat Jun 7 12:30:59 2025 by rpki-client