$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9550300-8dc1-3b01-a381-98b5a6e76317.roa File: a9550300-8dc1-3b01-a381-98b5a6e76317.roa (raw, json) Hash identifier: qBsYsJIANFaxG/a03Dhlya7oCdkL5J/Od2RDBGgFKwo= Subject key identifier: 37:E5:D8:C1:6E:27:5C:0A:7B:51:85:4A:00:94:DE:E9:4F:85:24:15 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E65506967CC079E1BF677D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9550300-8dc1-3b01-a381-98b5a6e76317.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.68.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:06:96:7c:c0:79:e1:bf:67:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=ca6af824-6ea5-4c30-b073-c5af649be183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d5:f6:9b:1b:a2:7c:2c:52:34:55:e8:3d:8d: 08:46:ca:ba:07:38:a3:b3:b5:65:14:5f:0c:ac:27: ee:e0:e7:fb:37:20:fe:3d:d4:48:3c:d1:cc:9c:51: dc:b1:de:df:97:5a:1c:e6:4c:77:1d:7e:e1:40:7b: a2:79:3d:e5:a2:7b:0f:83:06:71:d4:9e:cd:ad:09: f4:ea:f5:a6:56:fb:aa:f2:ab:8e:0b:98:52:2f:a2: 8e:5f:82:0c:fc:41:35:e9:c0:8c:47:d8:c3:a7:9b: 15:06:f6:8a:a3:ab:1a:6b:6b:fe:40:27:80:5a:e0: d8:6a:88:41:be:67:42:2b:93:70:c9:d7:d2:a5:79: 28:ef:a0:2a:f7:10:6e:9f:13:62:4b:66:ae:54:20: 35:b6:ed:03:55:5e:82:4f:e5:dc:92:cf:ee:2a:d7: 5c:a5:68:74:5c:89:e7:f2:2c:f4:60:3d:9e:5b:cf: 85:8e:a0:ae:5d:26:30:90:a9:c1:45:19:65:ea:40: d1:1d:0c:00:65:74:05:b0:9a:41:88:13:26:99:ac: b3:d8:b7:f1:ca:bb:0c:81:17:00:35:f5:63:15:73: 1f:2f:87:25:67:dd:00:de:cf:e7:08:c5:55:b2:0d: cb:94:59:76:b7:93:82:c9:b6:cf:11:61:ab:89:87: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E5:D8:C1:6E:27:5C:0A:7B:51:85:4A:00:94:DE:E9:4F:85:24:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9550300-8dc1-3b01-a381-98b5a6e76317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e7:01:18:d8:0d:41:7d:fa:fa:34:45:e1:aa:85:aa:4b:99: 24:ff:05:91:5d:47:c4:41:67:15:3f:06:f9:1f:bb:9d:b0:fa: 66:71:11:d6:14:8c:67:60:ee:76:a2:6a:4b:f5:5f:5d:f6:b7: 92:2b:ef:2d:72:55:51:1a:a3:d5:66:59:8e:45:9e:85:01:7d: b3:e2:50:31:60:97:9c:9b:4f:cd:05:22:46:ce:87:25:e8:e8: 0f:83:03:c6:c6:20:60:c0:7c:9e:8d:66:30:2f:64:34:01:99: 15:37:ef:bf:c0:60:06:72:c8:97:76:4c:2a:f7:65:b4:90:4c: 5b:f7:ae:b9:c7:1e:b7:99:0d:a6:73:3c:2c:ea:10:31:6a:58: 1a:5d:d7:5c:33:e6:c0:b4:98:e3:8c:6c:04:3f:d9:a3:8e:8b: 51:7c:65:f5:be:16:71:f8:cb:eb:7b:1c:da:08:a0:7d:28:52: fd:c2:37:5d:4d:88:d7:21:26:2b:67:24:32:85:40:95:79:de: ab:f5:06:da:18:33:1a:00:7e:dc:72:2a:13:41:b9:d9:97:03: 7c:94:24:60:97:99:b1:da:12:b6:54:ce:7b:68:3c:63:3d:81: 36:47:da:a4:aa:11:a6:10:09:e6:83:ca:ff:59:2d:1b:74:ab: d1:21:87:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQaWfMB54b9nfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk Y2E2YWY4MjQtNmVhNS00YzMwLWIwNzMtYzVhZjY0OWJlMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitX2mxuifCxSNFXoPY0IRsq6Bzijs7VlFF8M rCfu4Of7NyD+PdRIPNHMnFHcsd7fl1oc5kx3HX7hQHuieT3lonsPgwZx1J7NrQn0 6vWmVvuq8quOC5hSL6KOX4IM/EE16cCMR9jDp5sVBvaKo6saa2v+QCeAWuDYaohB vmdCK5NwydfSpXko76Aq9xBunxNiS2auVCA1tu0DVV6CT+Xcks/uKtdcpWh0XInn 8iz0YD2eW8+FjqCuXSYwkKnBRRll6kDRHQwAZXQFsJpBiBMmmayz2LfxyrsMgRcA NfVjFXMfL4clZ90A3s/nCMVVsg3LlFl2t5OCybbPEWGriYcNgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfl2MFuJ1wKe1GFSgCU3ulPhSQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTk1NTAzMDAtOGRjMS0z YjAxLWEzODEtOThiNWE2ZTc2MzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHnARjYDUF9+vo0ReGqhapLmST/BZFdR8RBZxU/Bvkfu52w+mZxEdYU jGdg7naiakv1X132t5Ir7y1yVVEao9VmWY5FnoUBfbPiUDFgl5ybT80FIkbOhyXo 6A+DA8bGIGDAfJ6NZjAvZDQBmRU377/AYAZyyJd2TCr3ZbSQTFv3rrnHHreZDaZz PCzqEDFqWBpd11wz5sC0mOOMbAQ/2aOOi1F8ZfW+FnH4y+t7HNoIoH0oUv3CN11N iNchJitnJDKFQJV53qv1BtoYMxoAftxyKhNBudmXA3yUJGCXmbHaErZUzntoPGM9 gTZH2qSqEaYQCeaDyv9ZLRt0q9Ehhzk= -----END CERTIFICATE-----Generated at Fri Jun 6 16:52:35 2025 by rpki-client