$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa File: fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa (raw, json) Hash identifier: SIb+BOjm2cV05fS9BzQFopGRQGEX1eRJWxHMoMbY7u4= Subject key identifier: 09:19:2E:37:29:18:70:55:22:C0:AB:11:BF:3F:7F:79:0A:6E:28:7A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E91FAE69DD16BCB5B2C4CDE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 172.68.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:ae:69:dd:16:bc:b5:b2:c4:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=5e0e9695-a46c-453d-a60b-0c01bee3e2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:c5:e6:44:83:43:11:79:77:ae:73:5a:e1: dc:e8:80:ca:8e:db:66:36:12:b8:cd:1b:84:62:17: a9:e3:39:77:92:89:14:2a:c2:da:8e:17:94:b1:10: 7d:db:b0:b1:99:33:21:c3:b9:34:97:4b:ba:f7:5f: ac:42:c0:ac:12:4a:e6:30:83:5c:8a:33:a8:ce:0c: 6a:63:b0:2c:d3:ad:a0:36:c9:c9:87:84:ea:f8:ea: ee:0f:1f:12:e0:5c:c0:6a:ff:16:39:20:23:31:77: c5:bc:9b:d3:b6:52:37:13:59:c6:f8:9f:d6:f9:62: 81:95:01:00:33:d4:85:37:b5:95:67:96:4a:45:e5: 60:d0:1c:0e:e7:f4:b4:1c:6f:85:9a:ca:a0:d2:73: 17:e9:69:ae:7b:9e:97:ec:8c:2d:56:ba:6d:81:52: a6:d9:85:7a:ee:dd:73:ae:11:87:18:ac:59:23:17: 62:34:1b:71:19:ef:20:89:3f:bb:90:2b:79:32:03: 59:71:41:fc:a2:b1:85:74:3e:ce:20:b5:54:35:19: 81:9d:3b:64:54:3e:33:66:3f:e9:22:88:55:38:f9: ad:9a:46:73:d4:d9:25:7e:11:fd:26:73:98:a1:c8: 6e:28:42:3a:dd:ca:ce:ff:bf:52:2a:c9:67:fd:82: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:19:2E:37:29:18:70:55:22:C0:AB:11:BF:3F:7F:79:0A:6E:28:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:af:b8:5e:ff:d7:e1:5b:1a:de:6f:59:d4:6c:1b:a0:fa:64: bd:7d:9d:86:53:11:e8:37:c1:fb:9a:0c:09:b0:32:a7:a4:05: 09:98:d7:51:ec:6f:53:01:fe:18:35:d4:80:cc:48:c8:50:6e: 5e:7c:2f:44:12:36:32:b8:a4:89:72:04:1a:d4:05:d8:df:6f: f1:cd:a4:66:8c:60:97:50:ca:10:a0:c6:58:4e:02:60:f5:ee: b1:c7:7c:1c:da:7c:5b:6d:8d:03:e0:3a:62:a6:81:4f:c5:61: 06:fb:96:59:c5:91:59:58:19:72:fb:e2:cd:70:81:11:e2:9c: 22:59:dc:76:fc:b8:ef:59:33:53:cb:a4:1c:c5:4d:16:5e:c1: fb:7e:f4:28:71:68:19:41:75:62:82:9b:e9:95:01:28:4e:32: e4:4b:12:a7:4c:0d:c6:6d:d3:1c:55:7e:d8:be:5e:4c:d3:0a: 85:6e:f1:45:92:ad:04:e7:e0:b9:88:ac:00:62:85:92:10:97: 14:bf:3b:5d:af:bc:5a:e5:29:41:c2:40:49:26:98:ed:ac:fc: 54:d9:ed:38:ac:93:96:42:08:65:dc:97:7f:29:fe:5e:54:68: a0:92:bc:82:53:8a:dc:23:68:d6:c1:dc:e2:0c:40:d9:94:c1: bc:fa:8a:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH65p3Ra8tbLEzeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk NWUwZTk2OTUtYTQ2Yy00NTNkLWE2MGItMGMwMWJlZTNlMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS3F5kSDQxF5d65zWuHc6IDKjttmNhK4zRuE Yhep4zl3kokUKsLajheUsRB927CxmTMhw7k0l0u691+sQsCsEkrmMINcijOozgxq Y7As062gNsnJh4Tq+OruDx8S4FzAav8WOSAjMXfFvJvTtlI3E1nG+J/W+WKBlQEA M9SFN7WVZ5ZKReVg0BwO5/S0HG+Fmsqg0nMX6Wmue56X7IwtVrptgVKm2YV67t1z rhGHGKxZIxdiNBtxGe8giT+7kCt5MgNZcUH8orGFdD7OILVUNRmBnTtkVD4zZj/p IohVOPmtmkZz1NklfhH9JnOYochuKEI63crO/79SKsln/YKMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkZLjcpGHBVIsCrEb8/f3kKbih6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmI2NWM4ZjctYzZkMi0z MmY5LWJmZjktNjY2MjhiMjRhNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGvuF7/1+FbGt5vWdRsG6D6ZL19nYZTEeg3wfuaDAmwMqekBQmY11Hs b1MB/hg11IDMSMhQbl58L0QSNjK4pIlyBBrUBdjfb/HNpGaMYJdQyhCgxlhOAmD1 7rHHfBzafFttjQPgOmKmgU/FYQb7llnFkVlYGXL74s1wgRHinCJZ3Hb8uO9ZM1PL pBzFTRZewft+9ChxaBlBdWKCm+mVAShOMuRLEqdMDcZt0xxVfti+XkzTCoVu8UWS rQTn4LmIrABihZIQlxS/O12vvFrlKUHCQEkmmO2s/FTZ7Tisk5ZCCGXcl38p/l5U aKCSvIJTitwjaNbB3OIMQNmUwbz6igA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:02 2025 by rpki-client