$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa File: ffefb04b-439d-329a-b0a7-11b8923ec659.roa (raw, json) Hash identifier: GysnJ7s8E4OJqMIreU62jfxFMpjohnPLuDlYfFyvXzE= Subject key identifier: 64:34:A0:34:6A:10:5A:8E:C1:B2:A5:A9:BB:3B:87:E9:14:0A:2B:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BAA10951B71678101CAE00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.68.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:a1:09:51:b7:16:78:10:1c:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=93fbb484-15b0-4634-bacf-e0e5d2ae56a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:60:0d:5d:59:11:1f:61:63:3f:d5:8a:bb: 8b:fb:86:a5:a1:c8:58:12:a7:7e:e2:4d:30:4a:55: 78:df:60:1d:5b:c1:6e:57:bc:89:60:d9:e9:bd:36: 29:50:06:74:86:69:07:e6:8a:78:a6:03:ac:d0:42: f2:cc:da:c3:16:80:bb:28:81:bf:73:34:ea:c4:10: d1:cb:1e:17:de:97:62:e7:55:dc:0c:3c:7a:35:4a: 84:c9:4b:88:34:97:69:78:36:78:b9:cb:af:ea:6e: 3a:9a:b5:d9:d0:cf:7f:80:79:24:66:37:fb:78:fd: 24:dc:49:24:b2:f9:a6:64:03:67:c1:52:48:1a:e2: 6e:19:00:8a:38:de:8a:35:8c:bb:69:09:9a:45:65: 20:f5:ed:55:3e:85:fb:d2:81:1b:0f:9e:7b:fb:27: 47:86:db:ba:bb:cf:92:85:7c:c6:7d:6e:dc:cd:e6: c2:83:dc:3f:4f:44:ae:f8:2b:06:21:5b:2b:2b:01: 60:a2:4f:bd:cb:c8:a7:c3:98:5d:a6:26:11:32:18: a4:90:36:82:80:2b:1f:8d:75:00:31:98:2e:01:d0: 72:2d:09:d1:5b:ce:b9:62:ec:54:19:f5:db:e1:d4: cc:99:34:6e:89:51:5d:36:2d:9d:46:1c:42:c8:4d: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:34:A0:34:6A:10:5A:8E:C1:B2:A5:A9:BB:3B:87:E9:14:0A:2B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:62:ad:06:15:14:e9:ca:e9:6e:c5:44:56:a1:b6:a5:2c:34: fe:91:c7:c4:b1:40:0b:3b:c7:44:69:16:02:5f:8e:fb:6e:d7: 45:f3:dc:26:8f:c1:ae:b2:20:62:7d:b8:0d:44:2c:15:61:9b: 45:43:3f:0d:9b:b3:bb:c2:f6:ba:44:2c:e0:42:d9:1a:db:d9: e6:92:50:d8:03:7a:b0:a4:2c:18:e3:cf:8b:03:17:df:81:6c: 39:7c:33:75:84:ca:40:c2:c0:75:a1:a6:87:79:3d:31:35:dc: fa:23:40:45:4d:c1:2a:cb:71:b9:f4:99:47:01:17:19:ca:87: 31:45:44:b6:bb:2c:6c:c2:f5:7b:86:72:11:bf:3b:04:d4:1b: 07:51:d5:63:1e:5c:79:52:61:3b:fa:0f:84:24:0f:b2:15:83: f3:c5:a0:ec:4f:27:40:42:f6:a4:f9:d6:ce:3e:25:5c:5a:93: 68:0f:17:42:2c:4f:01:e9:15:43:25:b3:9c:20:bf:cf:25:f6: 9e:c9:43:71:3b:b7:2b:6f:12:6e:c2:32:bf:e9:ad:59:01:f5: 86:3c:ff:15:02:da:6d:05:30:72:d9:93:61:9e:96:b4:1e:53: 2e:e2:a6:c2:23:0a:a1:f4:e5:ac:16:41:91:6a:5a:55:48:4e: 49:6d:00:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuqEJUbcWeBAcrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk OTNmYmI0ODQtMTViMC00NjM0LWJhY2YtZTBlNWQyYWU1NmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ZgDV1ZER9hYz/ViruL+4alochYEqd+4k0w SlV432AdW8FuV7yJYNnpvTYpUAZ0hmkH5op4pgOs0ELyzNrDFoC7KIG/czTqxBDR yx4X3pdi51XcDDx6NUqEyUuINJdpeDZ4ucuv6m46mrXZ0M9/gHkkZjf7eP0k3Ekk svmmZANnwVJIGuJuGQCKON6KNYy7aQmaRWUg9e1VPoX70oEbD557+ydHhtu6u8+S hXzGfW7czebCg9w/T0Su+CsGIVsrKwFgok+9y8inw5hdpiYRMhikkDaCgCsfjXUA MZguAdByLQnRW865YuxUGfXb4dTMmTRuiVFdNi2dRhxCyE2MeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ0oDRqEFqOwbKlqbs7h+kUCivuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmZlZmIwNGItNDM5ZC0z MjlhLWIwYTctMTFiODkyM2VjNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZirQYVFOnK6W7FRFahtqUsNP6Rx8SxQAs7x0RpFgJfjvtu10Xz3CaP wa6yIGJ9uA1ELBVhm0VDPw2bs7vC9rpELOBC2Rrb2eaSUNgDerCkLBjjz4sDF9+B bDl8M3WEykDCwHWhpod5PTE13PojQEVNwSrLcbn0mUcBFxnKhzFFRLa7LGzC9XuG chG/OwTUGwdR1WMeXHlSYTv6D4QkD7IVg/PFoOxPJ0BC9qT51s4+JVxak2gPF0Is TwHpFUMls5wgv88l9p7JQ3E7tytvEm7CMr/prVkB9YY8/xUC2m0FMHLZk2GelrQe Uy7ipsIjCqH05awWQZFqWlVITkltALg= -----END CERTIFICATE-----Generated at Fri Jun 6 16:49:05 2025 by rpki-client