$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa File: f1de7960-1381-3f30-9985-24f97a3b12e2.roa (raw, json) Hash identifier: XiDls447oV/tJATIm/Y0R6sSHz9N9dQfEkN3FYUwqTY= Subject key identifier: E7:A4:8C:45:8D:1E:B3:DA:C5:88:A6:04:38:FA:25:54:B6:4A:36:DA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E91FB0654EC03354B677B880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 172.68.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:b0:65:4e:c0:33:54:b6:77:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=ea000626-6a69-4956-9cef-43ab224ed355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:b7:d1:22:9c:18:e5:ff:63:d1:e2:ce:4a: 64:52:79:dd:44:2b:a2:5d:c6:34:91:df:91:d8:44: 9d:37:9b:c6:f7:c3:0b:32:99:c5:18:af:55:15:fa: 64:02:b6:d3:ea:48:f3:99:c5:74:89:a5:3c:83:79: 7f:30:a1:f5:89:46:3e:90:31:e3:46:f3:8f:ec:1e: d4:c7:f4:d1:3f:a7:f4:64:62:4c:ca:b8:b3:3e:b0: 06:d6:1d:cb:8c:c3:29:5b:95:26:78:ba:9a:25:98: 14:4a:ec:c5:db:42:97:0c:a2:90:e8:27:81:7c:c6: 7a:c5:b8:ac:01:5f:b6:a8:6b:5b:03:89:82:a1:27: b0:6e:17:bb:9c:75:57:fa:fc:38:52:60:57:f8:5f: 47:f6:d7:c2:53:c6:d9:7f:77:a8:cd:cf:c2:b0:82: 09:24:cc:c2:3d:76:86:62:0a:7d:0a:e9:ef:a9:ff: ca:9b:e0:03:98:cc:59:37:96:df:0a:42:ce:02:8a: 2c:ab:9c:d6:a6:46:6d:65:fc:77:ff:18:b6:3b:fa: ef:73:8b:e6:46:76:c5:15:56:87:7a:05:89:05:48: 73:c9:82:76:f0:ba:d1:a7:6b:0a:1e:8b:e7:8c:9b: 0c:1f:c4:32:2d:6c:a2:39:5d:99:67:30:2d:7c:e6: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A4:8C:45:8D:1E:B3:DA:C5:88:A6:04:38:FA:25:54:B6:4A:36:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fd:5a:3a:3c:fa:37:d7:58:2c:08:2b:d5:4a:b0:44:e0:bf: 29:8e:ee:8c:cb:4a:c7:ae:23:c1:21:5e:31:a2:9d:90:25:b4: 4d:37:28:d5:3c:d9:ad:44:cd:10:70:32:09:32:42:c0:9d:64: 55:60:3b:37:46:c9:c6:1e:ea:16:76:fa:df:0f:9f:d5:69:50: 42:12:26:8b:f7:30:2b:c2:40:b1:ce:86:da:02:7c:db:d6:c0: e0:a5:d1:94:b0:61:ad:b9:9f:75:f5:3a:e3:c6:98:f8:a3:38: 05:37:c3:1d:84:95:97:5b:d0:fe:cf:fc:24:ca:2e:69:87:6f: e0:3a:af:87:56:30:f6:19:6c:69:28:7f:87:7d:09:ae:23:75: 2d:eb:6c:c5:7f:10:a1:d3:ab:a1:be:4d:96:5c:3d:8f:11:34: d4:78:8f:38:bf:82:3c:d7:95:40:0a:77:92:98:c4:cc:fa:d3: ce:4c:82:8e:71:3b:d8:87:17:a3:0a:70:f9:76:c8:0f:e0:97: 5b:0c:0e:77:bf:bf:86:f5:53:e0:2c:b7:57:45:e6:d3:56:2d: 8c:dc:ff:84:5a:c0:6d:a7:c6:ed:f2:7b:e0:f7:25:e7:2d:ae: 3f:92:11:47:98:6a:e9:e7:37:68:44:04:2a:49:5c:5f:ee:dc: 82:5b:13:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH7BlTsAzVLZ3uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk ZWEwMDA2MjYtNmE2OS00OTU2LTljZWYtNDNhYjIyNGVkMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXG30SKcGOX/Y9HizkpkUnndRCuiXcY0kd+R 2ESdN5vG98MLMpnFGK9VFfpkArbT6kjzmcV0iaU8g3l/MKH1iUY+kDHjRvOP7B7U x/TRP6f0ZGJMyrizPrAG1h3LjMMpW5UmeLqaJZgUSuzF20KXDKKQ6CeBfMZ6xbis AV+2qGtbA4mCoSewbhe7nHVX+vw4UmBX+F9H9tfCU8bZf3eozc/CsIIJJMzCPXaG Ygp9Cunvqf/Km+ADmMxZN5bfCkLOAoosq5zWpkZtZfx3/xi2O/rvc4vmRnbFFVaH egWJBUhzyYJ28LrRp2sKHovnjJsMH8QyLWyiOV2ZZzAtfObqbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOekjEWNHrPaxYimBDj6JVS2SjbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjFkZTc5NjAtMTM4MS0z ZjMwLTk5ODUtMjRmOTdhM2IxMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj9Wjo8+jfXWCwIK9VKsETgvymO7ozLSseuI8EhXjGinZAltE03KNU8 2a1EzRBwMgkyQsCdZFVgOzdGycYe6hZ2+t8Pn9VpUEISJov3MCvCQLHOhtoCfNvW wOCl0ZSwYa25n3X1OuPGmPijOAU3wx2ElZdb0P7P/CTKLmmHb+A6r4dWMPYZbGko f4d9Ca4jdS3rbMV/EKHTq6G+TZZcPY8RNNR4jzi/gjzXlUAKd5KYxMz6085Mgo5x O9iHF6MKcPl2yA/gl1sMDne/v4b1U+Ast1dF5tNWLYzc/4RawG2nxu3ye+D3Ject rj+SEUeYaunnN2hEBCpJXF/u3IJbE8E= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:06 2025 by rpki-client