$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea889f97-d597-3f31-a846-eaa18b6fa964.roa File: ea889f97-d597-3f31-a846-eaa18b6fa964.roa (raw, json) Hash identifier: mUcrGJW8Trt6l9lRK0AxYEbquF8fBXZ/B9M3HEXWwBM= Subject key identifier: 30:8D:6C:BD:BF:51:B7:64:4C:DD:76:EB:C1:60:BA:4D:4E:DF:4F:93 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F71548CA80471C7E7AE09200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea889f97-d597-3f31-a846-eaa18b6fa964.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 396982 IP address blocks: 172.68.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:48:ca:80:47:1c:7e:7a:e0:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=254a82d9-d334-42c1-bb9c-43b731161fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:42:96:57:21:e4:2a:fd:35:83:1f:58:1c: 7b:32:34:1f:41:a9:13:68:a2:7c:b3:56:38:c3:13: 7a:ae:86:62:5e:eb:fd:73:e0:12:ad:94:72:3e:5e: 62:52:a5:11:bd:09:d0:37:4f:81:62:3a:98:5f:57: 72:da:74:eb:a9:84:6f:7f:b2:b9:11:60:c8:65:9c: 4e:0f:95:ac:68:4d:6a:38:57:5a:f3:b2:df:44:ff: 53:49:7f:7a:93:7a:f2:5e:f6:ea:8c:17:42:dc:00: e0:07:fe:b1:c3:b4:9f:34:52:45:78:95:61:08:b1: 4c:84:ab:e3:13:0c:7f:79:77:32:36:78:ab:ee:4a: 22:c7:55:98:39:5a:71:67:84:6e:e2:a5:03:d5:d4: 5b:14:97:ad:83:75:7d:d3:52:c1:a3:2d:af:d4:26: fc:44:b7:78:fa:6c:90:5a:71:86:af:56:72:3b:3c: 73:9a:b2:e8:af:ba:93:1c:18:93:5a:da:f2:50:44: 62:6f:70:e5:fa:78:08:74:7c:bf:31:b0:e7:4b:d0: 73:0d:cd:f6:e8:a7:08:4f:b1:af:b0:ff:da:4f:34: d2:ef:19:73:c9:84:87:9a:6f:91:eb:a9:13:cb:e6: 1c:d3:cd:40:25:7f:7d:1a:cd:6e:ef:26:22:2f:ad: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8D:6C:BD:BF:51:B7:64:4C:DD:76:EB:C1:60:BA:4D:4E:DF:4F:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea889f97-d597-3f31-a846-eaa18b6fa964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a8:e3:d5:82:bc:0a:19:09:79:8b:d6:50:ae:82:35:d9:fb: ec:08:1a:37:ae:10:60:bd:ab:b4:1b:06:dc:aa:26:97:9b:60: a2:34:63:f6:6c:fc:d0:21:cd:54:29:a5:f8:45:3e:81:5f:0c: d5:13:41:64:45:3f:d1:a8:5c:6b:49:61:d7:80:e4:b9:fa:34: de:f2:92:7c:15:a2:4e:1c:b6:11:ac:fd:ce:58:fb:73:dc:97: 2f:86:56:d5:92:64:72:d8:45:24:0b:8f:b6:fe:fb:60:4f:91: ed:d6:9f:12:0e:b1:37:8e:65:32:17:2c:1a:87:f5:36:f5:67: 1b:fe:51:92:ef:a5:81:6f:ab:45:6a:66:29:de:76:05:95:ac: ed:23:7e:23:97:e7:bb:dc:74:f9:78:5e:81:08:26:07:95:2d: e2:81:5c:82:91:1b:7b:49:24:f4:c1:23:e8:e2:1d:11:fa:49: a0:65:eb:d4:e6:6e:3f:4d:c0:0e:98:f4:27:3e:7c:cc:b6:f5: f6:89:6e:29:f4:eb:1e:cf:dd:04:27:33:f5:d8:66:1e:15:6e: c1:77:16:ca:df:f2:3e:bf:fc:9d:48:c6:a8:5e:72:93:d3:74: 8e:f6:dd:45:d8:f5:a4:e8:af:4a:94:d7:18:cd:35:37:46:b2: c9:e4:af:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FUjKgEccfnrgkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MjU0YTgyZDktZDMzNC00MmMxLWJiOWMtNDNiNzMxMTYxZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFRCllch5Cr9NYMfWBx7MjQfQakTaKJ8s1Y4 wxN6roZiXuv9c+ASrZRyPl5iUqURvQnQN0+BYjqYX1dy2nTrqYRvf7K5EWDIZZxO D5WsaE1qOFda87LfRP9TSX96k3ryXvbqjBdC3ADgB/6xw7SfNFJFeJVhCLFMhKvj Ewx/eXcyNnir7koix1WYOVpxZ4Ru4qUD1dRbFJetg3V901LBoy2v1Cb8RLd4+myQ WnGGr1ZyOzxzmrLor7qTHBiTWtryUERib3Dl+ngIdHy/MbDnS9BzDc326KcIT7Gv sP/aTzTS7xlzyYSHmm+R66kTy+Yc081AJX99Gs1u7yYiL62SjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCNbL2/UbdkTN1268Fguk1O30+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWE4ODlmOTctZDU5Ny0z ZjMxLWE4NDYtZWFhMThiNmZhOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJio49WCvAoZCXmL1lCugjXZ++wIGjeuEGC9q7QbBtyqJpebYKI0Y/Zs /NAhzVQppfhFPoFfDNUTQWRFP9GoXGtJYdeA5Ln6NN7yknwVok4cthGs/c5Y+3Pc ly+GVtWSZHLYRSQLj7b++2BPke3WnxIOsTeOZTIXLBqH9Tb1Zxv+UZLvpYFvq0Vq ZinedgWVrO0jfiOX57vcdPl4XoEIJgeVLeKBXIKRG3tJJPTBI+jiHRH6SaBl69Tm bj9NwA6Y9Cc+fMy29faJbin06x7P3QQnM/XYZh4VbsF3Fsrf8j6//J1IxqhecpPT dI723UXY9aTor0qU1xjNNTdGssnkr64= -----END CERTIFICATE-----Generated at Sat Jun 7 12:29:43 2025 by rpki-client