$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1fb01c3-f365-32f7-9bd0-e79cc4cced3e.roa File: a1fb01c3-f365-32f7-9bd0-e79cc4cced3e.roa (raw, json) Hash identifier: Vp1lXELjpee+XRaK2dki8qP+QJki+eIW/0w2AeUZBYc= Subject key identifier: DC:B2:E3:D3:1F:33:B5:FF:DB:FB:8F:5B:40:9B:3F:E9:98:D5:7B:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E91FB0BC8CDBFF8F47E5C440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1fb01c3-f365-32f7-9bd0-e79cc4cced3e.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 172.68.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:b0:bc:8c:db:ff:8f:47:e5:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=b6421c86-71ad-447a-bb36-01bf6989f063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:fa:23:7a:c7:be:e7:27:29:3a:bc:af:03: 78:01:dd:d6:c4:cb:b5:aa:3a:c4:dc:2e:95:1f:ea: b1:05:c6:70:23:e9:e4:bf:e9:37:66:75:dc:09:5f: e8:cf:db:4e:65:2c:4d:ee:80:89:e1:c3:24:85:8e: 70:fa:75:27:53:49:3d:25:5f:e4:b7:c2:e0:47:c0: d8:87:61:0c:6f:d5:a3:e6:dd:7e:45:a9:d8:e8:b4: c7:c5:eb:20:73:0b:4c:6c:39:ff:80:a5:0b:ef:f4: 73:50:d6:be:37:19:5b:eb:d6:85:4b:98:e4:75:37: 27:e6:66:3e:fc:b3:47:0b:1b:39:bb:9c:7b:36:dd: af:2c:89:38:10:11:58:83:81:87:1a:1b:dc:72:ce: 20:76:26:17:48:ad:c3:fe:10:99:ec:c8:c5:4a:59: ff:17:63:93:60:9a:e9:94:47:a1:1b:cb:73:9a:b5: 42:4f:9a:02:ff:0a:d0:6a:3d:d7:87:3b:bb:e6:73: d1:d5:5a:93:b3:06:53:34:83:8b:42:f0:48:27:3e: 07:65:73:29:c7:ea:6c:4e:cb:9f:d6:82:b6:b2:52: 92:e9:10:4c:47:45:56:0e:65:fa:a8:e6:d7:df:0c: 03:56:cf:49:03:89:f6:75:50:aa:53:f5:c5:8c:01: a1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B2:E3:D3:1F:33:B5:FF:DB:FB:8F:5B:40:9B:3F:E9:98:D5:7B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1fb01c3-f365-32f7-9bd0-e79cc4cced3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:86:9a:db:4e:37:9d:3f:bd:cc:c8:62:62:eb:fc:ab:67:7f: 1a:ea:69:a3:cc:3b:29:2a:11:0b:d2:f2:8d:3d:93:fb:c0:c9: 7a:d6:32:c6:fa:dc:76:90:93:b8:b9:50:3a:19:48:78:fb:b7: ce:3b:a9:53:25:95:cc:4c:56:85:46:d7:5c:a3:2f:67:2b:24: 99:0b:21:5e:70:5b:ab:3f:7c:cb:a1:ec:d6:6f:42:89:56:ec: d3:ed:01:13:d2:7e:9d:30:87:c0:38:31:ed:f1:ba:23:d4:a9: 80:03:d0:fc:a1:cd:90:ac:c0:e9:96:2b:50:59:a5:cb:94:88: 7d:68:de:3a:e2:a6:ec:48:06:60:75:7f:8f:74:1e:51:95:03: 2f:a9:18:e8:83:16:c2:33:74:85:ec:70:ba:f5:bd:6f:78:0c: d2:a7:62:49:42:56:62:71:e6:6d:e2:24:58:5e:3f:bf:9d:7d: a1:20:e3:1e:4f:4d:6c:af:3b:80:3d:9c:28:a4:60:c3:6e:f2: 36:85:97:a4:3e:77:bc:ed:96:72:92:96:8f:9b:36:4c:bd:70: 86:e4:4f:82:6a:64:0b:56:df:95:ab:be:8c:42:2b:1e:bd:7f: e1:aa:07:42:68:c6:a0:07:a7:83:08:ab:1f:d3:a7:2c:dc:5c: 54:6d:a2:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH7C8jNv/j0flxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk YjY0MjFjODYtNzFhZC00NDdhLWJiMzYtMDFiZjY5ODlmMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklT6I3rHvucnKTq8rwN4Ad3WxMu1qjrE3C6V H+qxBcZwI+nkv+k3ZnXcCV/oz9tOZSxN7oCJ4cMkhY5w+nUnU0k9JV/kt8LgR8DY h2EMb9Wj5t1+RanY6LTHxesgcwtMbDn/gKUL7/RzUNa+Nxlb69aFS5jkdTcn5mY+ /LNHCxs5u5x7Nt2vLIk4EBFYg4GHGhvccs4gdiYXSK3D/hCZ7MjFSln/F2OTYJrp lEehG8tzmrVCT5oC/wrQaj3Xhzu75nPR1VqTswZTNIOLQvBIJz4HZXMpx+psTsuf 1oK2slKS6RBMR0VWDmX6qObX3wwDVs9JA4n2dVCqU/XFjAGhnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyy49MfM7X/2/uPW0CbP+mY1XvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTFmYjAxYzMtZjM2NS0z MmY3LTliZDAtZTc5Y2M0Y2NlZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKGmttON50/vczIYmLr/KtnfxrqaaPMOykqEQvS8o09k/vAyXrWMsb6 3HaQk7i5UDoZSHj7t847qVMllcxMVoVG11yjL2crJJkLIV5wW6s/fMuh7NZvQolW 7NPtARPSfp0wh8A4Me3xuiPUqYAD0PyhzZCswOmWK1BZpcuUiH1o3jripuxIBmB1 f490HlGVAy+pGOiDFsIzdIXscLr1vW94DNKnYklCVmJx5m3iJFheP7+dfaEg4x5P TWyvO4A9nCikYMNu8jaFl6Q+d7ztlnKSlo+bNky9cIbkT4JqZAtW35WrvoxCKx69 f+GqB0JoxqAHp4MIqx/TpyzcXFRtokc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:01 2025 by rpki-client