$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc63b268-3341-3178-b362-0f124d5ba7c4.roa File: dc63b268-3341-3178-b362-0f124d5ba7c4.roa (raw, json) Hash identifier: DuEQQv6MeOoFxhe1tNO/tCuBqwkoCBlhT5ElNXNi2Zg= Subject key identifier: B4:B0:3E:88:4B:B0:8A:1B:E7:AD:70:69:BF:C3:A7:DF:9F:FD:C2:18 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA96099AF2F12DD6EE60B4 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc63b268-3341-3178-b362-0f124d5ba7c4.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.68.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:96:09:9a:f2:f1:2d:d6:ee:60:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=8d78f7db-ac93-46f7-904c-f50e6a872d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:83:bc:ae:97:97:7e:ce:49:7d:c7:c1:8b: d5:d6:32:55:5b:b2:19:15:e0:79:b6:c8:84:3f:d2: 30:55:c0:f3:0b:91:5f:b3:4b:77:41:ae:f2:1b:d6: 20:e1:bd:09:13:39:0f:1b:45:a8:98:4c:20:63:9e: fa:c6:4d:ed:c1:fe:1c:20:7a:aa:83:0d:70:59:84: 8d:4b:7b:ea:7d:28:66:63:63:ad:fe:63:d9:75:e3: 8f:82:f7:17:4e:49:7a:05:0e:7a:a9:68:c4:1b:75: ce:71:4c:25:e7:ae:76:fc:7e:90:d2:26:77:63:fa: 5d:4d:ef:c5:a5:dd:e2:10:88:28:ec:b4:04:e2:69: bc:30:16:48:ef:64:d1:d8:41:52:41:14:9e:f7:c6: 37:f2:c6:ff:63:2e:93:6e:38:28:35:98:ed:0b:1f: 3a:0f:1b:36:16:b1:ab:c1:06:7a:3d:42:ca:13:07: ed:82:2b:7b:f2:b2:20:29:28:9a:95:cc:8f:c3:40: 78:b2:3c:f7:59:22:c9:ef:12:e4:e2:1d:ae:39:c6: 75:dc:f4:b4:6e:61:a5:27:e3:d3:eb:d9:6a:d6:fd: ae:51:bc:07:81:4a:5b:de:c3:87:ad:ab:49:89:91: e3:d5:ca:2f:07:13:05:65:0a:f3:8d:07:53:c4:9f: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B0:3E:88:4B:B0:8A:1B:E7:AD:70:69:BF:C3:A7:DF:9F:FD:C2:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc63b268-3341-3178-b362-0f124d5ba7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ba:af:f3:73:da:b8:7c:7d:0f:70:24:8c:48:1b:17:38:b9: 8d:51:73:30:3a:ca:3a:21:40:33:0e:a0:13:7d:f6:79:2a:d1: 53:48:26:19:be:8e:a5:97:45:55:d9:ae:2a:0f:a1:de:e4:54: 6d:b8:69:9e:2b:86:50:f4:83:95:c5:16:31:ea:23:c5:a0:3b: 15:cf:f1:70:2e:12:03:8c:6b:b4:7c:f8:78:7b:59:b1:98:a2: 7d:65:e4:19:64:45:83:f9:37:1e:ec:2a:75:75:4a:76:dd:29: 32:0c:13:a6:77:85:6d:c4:da:e5:fa:b2:21:30:f1:65:7a:93: 0b:81:64:86:39:fc:67:be:b5:14:09:f0:8b:46:bb:bd:52:b6: 14:1f:a5:c5:30:95:e5:1b:be:e7:b8:42:c5:54:7d:fa:a8:e9: f2:ea:68:bf:dd:5e:47:90:0d:dc:65:e6:17:23:ae:92:a9:3c: 65:39:1c:24:67:0d:dc:44:d2:b1:ff:28:f4:39:ca:98:ae:52: ca:7c:98:56:9c:13:8d:8c:b3:0c:58:48:9b:4a:e7:c3:7d:c7: 01:d1:6e:a3:e4:a5:10:a2:14:d6:21:36:f8:d2:13:db:b6:61: f9:54:b1:30:85:d2:a7:7e:7f:3d:b3:cc:f5:dc:5f:e6:cc:1f: 5e:5c:6e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupYJmvLxLdbuYLQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OGQ3OGY3ZGItYWM5My00NmY3LTkwNGMtZjUwZTZhODcyZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYSDvK6Xl37OSX3HwYvV1jJVW7IZFeB5tsiE P9IwVcDzC5Ffs0t3Qa7yG9Yg4b0JEzkPG0WomEwgY576xk3twf4cIHqqgw1wWYSN S3vqfShmY2Ot/mPZdeOPgvcXTkl6BQ56qWjEG3XOcUwl5652/H6Q0iZ3Y/pdTe/F pd3iEIgo7LQE4mm8MBZI72TR2EFSQRSe98Y38sb/Yy6TbjgoNZjtCx86Dxs2FrGr wQZ6PULKEwftgit78rIgKSialcyPw0B4sjz3WSLJ7xLk4h2uOcZ13PS0bmGlJ+PT 69lq1v2uUbwHgUpb3sOHratJiZHj1covBxMFZQrzjQdTxJ/QswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSwPohLsIob561wab/Dp9+f/cIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGM2M2IyNjgtMzM0MS0z MTc4LWIzNjItMGYxMjRkNWJhN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO6r/Nz2rh8fQ9wJIxIGxc4uY1RczA6yjohQDMOoBN99nkq0VNIJhm+ jqWXRVXZrioPod7kVG24aZ4rhlD0g5XFFjHqI8WgOxXP8XAuEgOMa7R8+Hh7WbGY on1l5BlkRYP5Nx7sKnV1SnbdKTIME6Z3hW3E2uX6siEw8WV6kwuBZIY5/Ge+tRQJ 8ItGu71SthQfpcUwleUbvue4QsVUffqo6fLqaL/dXkeQDdxl5hcjrpKpPGU5HCRn DdxE0rH/KPQ5ypiuUsp8mFacE42MswxYSJtK58N9xwHRbqPkpRCiFNYhNvjSE9u2 YflUsTCF0qd+fz2zzPXcX+bMH15cbi0= -----END CERTIFICATE-----Generated at Sat Jun 7 12:32:38 2025 by rpki-client