$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa File: c3e3b8c0-be07-3843-b18d-6586f47d2704.roa (raw, json) Hash identifier: V8QPYleDRH3m+STFkMi9T9A5y7E4NtSrfJpKz3FlGuA= Subject key identifier: 62:F9:7F:72:63:EE:0B:0C:4E:FB:75:9F:5E:DC:73:8D:C4:F1:84:6D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA853047735A8F36087B6940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:30:47:73:5a:8f:36:08:7b:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=f45d7805-3664-4355-a76d-7bf20f21ebe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:88:d5:09:92:da:34:a4:5b:51:03:f5:95:e3: d9:ea:c9:0e:a7:a9:0e:62:ef:67:fe:5b:45:ea:36: 7c:da:fc:44:bd:b7:e5:52:df:e6:e7:5a:74:b3:48: 5e:15:71:56:05:14:94:82:70:57:ae:eb:df:ee:04: dc:8d:28:c2:7c:f8:eb:a9:e4:d2:90:10:53:91:f8: 55:c2:0b:0e:8f:e7:4b:8e:4f:8e:d8:8b:1f:2a:02: 6c:31:e4:75:ec:1d:e2:f3:f3:a8:95:32:3e:5d:fc: 24:ba:dc:e3:d3:e9:91:61:54:02:b1:77:33:ba:28: e9:b6:af:30:bf:53:01:10:3e:13:e2:13:99:86:dd: d3:9f:c9:de:25:f2:49:8b:29:de:81:48:37:f1:ab: 60:19:ef:4d:94:ba:b8:e3:38:6d:02:90:f9:d9:e9: c6:2f:c0:92:20:88:e3:51:c4:e0:10:70:22:55:f2: 07:99:75:ad:4c:e9:74:0b:49:d3:aa:bc:fc:72:20: d1:73:f3:0d:02:ff:e4:51:4c:1a:d7:11:6d:87:27: d8:1f:bd:5c:14:53:37:ed:ab:fa:39:7d:37:5a:50: 6b:41:df:b3:bc:d1:bf:9a:c7:2c:af:7f:dd:a3:d4: f9:3f:27:fd:0d:0e:f1:c5:39:e0:ba:2a:f1:df:6e: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F9:7F:72:63:EE:0B:0C:4E:FB:75:9F:5E:DC:73:8D:C4:F1:84:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:86:fe:54:8c:0c:3c:48:b4:33:b7:97:e9:ab:b2:57:2c:60: a6:c0:2d:2d:7f:6f:fd:95:18:f7:2a:c8:3a:1a:89:6f:52:08: 21:ef:1b:81:41:bf:44:ce:c7:a9:93:23:aa:8e:ac:d7:6d:f6: 23:90:1c:ac:4f:23:3f:f2:fa:28:9b:78:28:79:bf:1b:9f:6a: 30:a3:a5:8c:3b:e7:fb:e8:31:18:ef:ee:ad:13:db:67:44:75: 1d:5b:ce:5f:09:3b:88:63:d5:39:9e:92:19:b6:45:98:c7:a2: 61:74:d4:92:a7:3d:56:dd:42:44:f1:27:79:1d:0e:a5:3d:74: cf:80:78:62:7d:bb:a8:a7:f9:7f:7b:e4:49:6e:f5:c0:c9:ae: 91:25:b7:04:b5:f0:0c:49:7a:20:32:a6:f7:cb:46:94:0d:5a: 2e:88:aa:a7:60:6b:dd:f3:e3:a0:63:50:14:a8:fd:fb:30:33: a9:0e:ea:1e:00:f4:b4:c4:af:b3:31:22:6f:86:58:54:78:1f: d8:c6:3e:ac:71:4f:d5:84:b6:d0:6d:3d:d1:cc:36:f8:f8:2d: 06:62:70:8e:06:be:c1:08:46:67:60:c6:c1:cf:96:7d:49:09: c7:2f:ad:8a:3e:f6:d7:40:44:b1:dc:02:e6:a4:a1:de:d2:80: 42:43:78:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTBHc1qPNgh7aUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZjQ1ZDc4MDUtMzY2NC00MzU1LWE3NmQtN2JmMjBmMjFlYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIjVCZLaNKRbUQP1lePZ6skOp6kOYu9n/ltF 6jZ82vxEvbflUt/m51p0s0heFXFWBRSUgnBXruvf7gTcjSjCfPjrqeTSkBBTkfhV wgsOj+dLjk+O2IsfKgJsMeR17B3i8/OolTI+Xfwkutzj0+mRYVQCsXczuijptq8w v1MBED4T4hOZht3Tn8neJfJJiynegUg38atgGe9NlLq44zhtApD52enGL8CSIIjj UcTgEHAiVfIHmXWtTOl0C0nTqrz8ciDRc/MNAv/kUUwa1xFthyfYH71cFFM37av6 OX03WlBrQd+zvNG/mscsr3/do9T5Pyf9DQ7xxTnguirx327LwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL5f3Jj7gsMTvt1n17cc43E8YRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNlM2I4YzAtYmUwNy0z ODQzLWIxOGQtNjU4NmY0N2QyNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaG/lSMDDxItDO3l+mrslcsYKbALS1/b/2VGPcqyDoaiW9SCCHvG4FB v0TOx6mTI6qOrNdt9iOQHKxPIz/y+iibeCh5vxufajCjpYw75/voMRjv7q0T22dE dR1bzl8JO4hj1Tmekhm2RZjHomF01JKnPVbdQkTxJ3kdDqU9dM+AeGJ9u6in+X97 5Elu9cDJrpEltwS18AxJeiAypvfLRpQNWi6Iqqdga93z46BjUBSo/fswM6kO6h4A 9LTEr7MxIm+GWFR4H9jGPqxxT9WEttBtPdHMNvj4LQZicI4GvsEIRmdgxsHPln1J CccvrYo+9tdARLHcAuakod7SgEJDeIQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:39 2025 by rpki-client