$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da8733fc-9374-3587-b695-3635b841d64c.roa File: da8733fc-9374-3587-b695-3635b841d64c.roa (raw, json) Hash identifier: wvDFvXsP5+OryuthxdhZm2jWJBZ+os8P9OvGRfgGzCY= Subject key identifier: 80:93:66:85:DA:4E:B9:D8:0F:75:EC:2B:AE:53:41:86:98:0D:DF:23 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BAA00262A160158D1F2A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da8733fc-9374-3587-b695-3635b841d64c.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.68.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:a0:02:62:a1:60:15:8d:1f:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=d07107c9-01c4-4797-ae6d-11cc54840803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:85:51:54:e3:85:86:e5:50:29:fd:1e:c6:01: f7:96:71:e6:78:2f:e1:c0:fe:16:7e:c6:33:f2:36: ce:34:0b:9d:82:55:fd:06:b2:78:58:97:01:60:3d: ec:ad:4e:5c:65:90:4e:f6:a9:88:34:16:42:cf:ed: 4d:52:46:85:9d:d3:d2:bb:2d:06:3b:25:03:69:f8: d9:08:d0:0d:be:33:c2:d7:7c:49:99:e9:df:8d:0f: 56:a1:0a:20:98:4c:53:fa:f8:99:7c:75:d8:09:25: 1f:27:a8:07:37:64:ed:02:82:46:7b:7a:1d:41:2d: 46:88:e5:04:2d:57:95:f9:a7:2a:3e:87:a4:86:99: a3:00:4c:91:25:ff:ca:01:2d:46:4b:46:a4:30:c7: 9c:4a:79:a2:c2:5a:45:5c:72:8e:d1:64:e1:59:32: db:c8:d9:bd:19:e7:4c:63:1f:7f:04:3c:a9:89:1a: 6b:4f:b7:98:bb:39:f3:58:07:da:81:a2:c4:f8:81: 11:a4:95:86:eb:bb:b3:4c:5f:34:c1:9d:14:cf:68: 76:3a:64:02:65:fd:1b:34:a2:c5:20:07:4e:45:24: 19:93:7d:f5:d3:5c:60:58:be:44:33:b0:fd:68:8f: 92:fa:e3:2f:b1:9f:9a:a4:56:b2:9c:e7:3e:2b:66: 5c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:93:66:85:DA:4E:B9:D8:0F:75:EC:2B:AE:53:41:86:98:0D:DF:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da8733fc-9374-3587-b695-3635b841d64c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c3:95:9f:b2:8b:cb:e0:e1:22:9f:4e:2c:66:67:b3:b7:cb: 69:b0:d2:b0:69:29:d5:94:bb:bb:9c:52:d1:e8:8b:71:a2:af: 37:6d:43:88:3b:c5:83:c4:09:b9:a9:b9:9d:1b:ed:96:3a:27: 7f:83:c9:8b:78:f1:ad:a7:fc:8a:73:7f:30:3e:17:67:ca:f8: 26:c4:ec:ba:68:7d:24:00:70:69:a9:37:9b:e1:ee:d7:ab:c2: 5a:92:7d:e6:0b:a0:cc:fa:d7:96:6c:31:aa:1c:28:99:98:0a: 1b:57:40:4c:85:d9:21:1a:5d:4a:40:cf:7e:92:83:73:3c:35: e7:37:23:0e:3a:07:f6:f7:78:b1:25:a2:de:fb:3f:b1:55:a8: 55:ce:7c:72:7b:07:0c:bb:44:9a:52:98:c8:94:5c:93:d1:25: de:35:0d:80:a8:b2:c8:44:e6:4a:e9:0e:94:b3:fb:b0:f6:6e: 32:d2:b1:88:67:4e:e2:6f:7e:39:1e:b6:94:dc:d6:d4:f4:81: 94:f3:93:46:b4:c4:d5:c1:db:d2:e0:f0:68:36:04:e2:02:e7: 23:66:5d:c8:a6:14:70:d4:87:a8:ff:28:75:d0:49:0e:c2:5b: 39:de:cd:c5:17:47:11:68:4e:9f:e4:80:f6:4e:10:23:fc:4b: 83:33:3d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuqACYqFgFY0fKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZDA3MTA3YzktMDFjNC00Nzk3LWFlNmQtMTFjYzU0ODQwODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoVRVOOFhuVQKf0exgH3lnHmeC/hwP4WfsYz 8jbONAudglX9BrJ4WJcBYD3srU5cZZBO9qmINBZCz+1NUkaFndPSuy0GOyUDafjZ CNANvjPC13xJmenfjQ9WoQogmExT+viZfHXYCSUfJ6gHN2TtAoJGe3odQS1GiOUE LVeV+acqPoekhpmjAEyRJf/KAS1GS0akMMecSnmiwlpFXHKO0WThWTLbyNm9GedM Yx9/BDypiRprT7eYuznzWAfagaLE+IERpJWG67uzTF80wZ0Uz2h2OmQCZf0bNKLF IAdORSQZk33101xgWL5EM7D9aI+S+uMvsZ+apFaynOc+K2Zc1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICTZoXaTrnYD3XsK65TQYaYDd8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE4NzMzZmMtOTM3NC0z NTg3LWI2OTUtMzYzNWI4NDFkNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3DlZ+yi8vg4SKfTixmZ7O3y2mw0rBpKdWUu7ucUtHoi3GirzdtQ4g7 xYPECbmpuZ0b7ZY6J3+DyYt48a2n/IpzfzA+F2fK+CbE7LpofSQAcGmpN5vh7ter wlqSfeYLoMz615ZsMaocKJmYChtXQEyF2SEaXUpAz36Sg3M8Nec3Iw46B/b3eLEl ot77P7FVqFXOfHJ7Bwy7RJpSmMiUXJPRJd41DYCosshE5krpDpSz+7D2bjLSsYhn TuJvfjketpTc1tT0gZTzk0a0xNXB29Lg8Gg2BOIC5yNmXcimFHDUh6j/KHXQSQ7C WznezcUXRxFoTp/kgPZOECP8S4MzPTQ= -----END CERTIFICATE-----Generated at Sat Jun 7 20:02:53 2025 by rpki-client