$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa File: efd0da62-170f-3a0e-b80d-9db169fdb224.roa (raw, json) Hash identifier: ascp0V6mBbm4ZfuDNz4w8FN1Ldx2qLpZOp3+3KtOjiM= Subject key identifier: C0:C3:77:8D:C2:FF:35:C2:67:3B:BA:4E:94:A9:34:09:E9:EF:67:3B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8530EC3C41236FBE6A4100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:30:ec:3c:41:23:6f:be:6a:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=4f4f5d0f-fe5d-4518-8aea-2b6e28391065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:50:13:db:da:fa:34:c1:03:e8:2e:d9:82: ba:37:fc:2e:79:0f:c9:db:7f:36:49:f7:37:45:b3: 07:e6:0d:c2:a4:c2:8e:78:35:9a:24:dc:9a:4a:8e: b3:f1:0a:77:99:74:78:ff:59:be:d2:0c:8d:52:57: 4c:42:3f:fc:87:88:59:a7:ed:1a:44:1a:95:4a:18: 80:a6:a8:e5:b2:ee:be:ae:fc:a9:6c:60:c9:aa:8a: bc:f3:8b:98:e3:27:77:00:15:ab:31:8c:9f:47:a5: 0a:e8:7c:79:9e:48:69:5e:71:ad:29:7c:e2:29:37: 2b:33:e7:d5:27:ea:61:99:c5:cd:5b:74:fc:68:40: 93:38:be:17:30:b0:f8:a5:c5:ef:59:70:49:c0:a0: 03:bf:37:c4:3c:b9:f9:10:69:eb:e5:57:39:dd:8c: 48:9b:8e:53:e0:b5:aa:01:78:08:93:5a:28:6a:4f: 29:6e:de:33:82:01:e0:d8:29:92:41:ec:f1:9a:b9: 30:36:5a:81:03:ef:0d:dd:b4:53:6c:41:b8:38:01: 87:ab:a9:df:a4:02:9c:5a:51:67:8b:f2:0b:c0:73: bb:0d:e2:b9:10:aa:22:b2:c2:5f:32:0e:cb:57:d4: 1f:af:fb:8f:4e:d6:24:04:ad:38:c8:24:7b:aa:a8: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C3:77:8D:C2:FF:35:C2:67:3B:BA:4E:94:A9:34:09:E9:EF:67:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efd0da62-170f-3a0e-b80d-9db169fdb224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:43:b8:ae:f7:ff:aa:35:ac:cc:d5:e2:05:ea:10:11:1c:04: fd:eb:c8:3e:32:68:ae:b9:54:26:3c:fb:03:03:24:f0:85:d7: 30:76:0a:33:a7:43:2b:6c:51:bb:14:bb:5f:1e:a2:68:58:7a: c9:3b:65:7e:3f:a0:61:74:19:9f:66:21:3e:00:78:3f:8e:7a: a1:7c:ee:02:9a:83:13:09:11:87:08:4b:9e:d9:1a:0f:31:3e: 3e:c6:ba:ee:fd:b8:04:22:f3:e7:4a:aa:33:ae:9e:91:dd:97: 15:8a:1c:d4:f5:7a:22:46:e5:6d:d1:d7:7c:28:53:1a:19:56: 49:a0:68:cb:23:91:b8:a7:7f:d0:62:40:6f:5c:5b:6c:56:bc: e2:c8:71:53:8f:2d:20:3e:39:bf:7f:b1:d6:e5:98:1b:43:53: 12:b4:bb:cd:06:c6:c6:7f:74:de:48:a8:06:f4:58:83:ad:32: 68:fd:62:88:55:59:3d:07:18:08:0b:a6:75:f0:e9:bc:73:ea: ea:12:5b:4e:53:77:e4:f6:c1:02:96:52:d3:74:08:a8:c9:9d: 24:d7:0f:24:2b:38:83:b4:ae:b2:6b:39:27:13:46:d0:6f:f7: ca:82:58:ff:1b:71:4d:32:ed:3b:0e:87:52:89:4f:b6:5e:0c: 68:16:0f:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTDsPEEjb75qQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk NGY0ZjVkMGYtZmU1ZC00NTE4LThhZWEtMmI2ZTI4MzkxMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiONQE9va+jTBA+gu2YK6N/wueQ/J2382Sfc3 RbMH5g3CpMKOeDWaJNyaSo6z8Qp3mXR4/1m+0gyNUldMQj/8h4hZp+0aRBqVShiA pqjlsu6+rvypbGDJqoq884uY4yd3ABWrMYyfR6UK6Hx5nkhpXnGtKXziKTcrM+fV J+phmcXNW3T8aECTOL4XMLD4pcXvWXBJwKADvzfEPLn5EGnr5Vc53YxIm45T4LWq AXgIk1ooak8pbt4zggHg2CmSQezxmrkwNlqBA+8N3bRTbEG4OAGHq6nfpAKcWlFn i/ILwHO7DeK5EKoissJfMg7LV9Qfr/uPTtYkBK04yCR7qqjogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDDd43C/zXCZzu6TpSpNAnp72c7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWZkMGRhNjItMTcwZi0z YTBlLWI4MGQtOWRiMTY5ZmRiMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxDuK73/6o1rMzV4gXqEBEcBP3ryD4yaK65VCY8+wMDJPCF1zB2CjOn QytsUbsUu18eomhYesk7ZX4/oGF0GZ9mIT4AeD+OeqF87gKagxMJEYcIS57ZGg8x Pj7Guu79uAQi8+dKqjOunpHdlxWKHNT1eiJG5W3R13woUxoZVkmgaMsjkbinf9Bi QG9cW2xWvOLIcVOPLSA+Ob9/sdblmBtDUxK0u80GxsZ/dN5IqAb0WIOtMmj9YohV WT0HGAgLpnXw6bxz6uoSW05Td+T2wQKWUtN0CKjJnSTXDyQrOIO0rrJrOScTRtBv 98qCWP8bcU0y7TsOh1KJT7ZeDGgWD8w= -----END CERTIFICATE-----Generated at Fri Jun 6 16:51:58 2025 by rpki-client