$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00d19c12-4386-3c56-924f-3667222614ad.roa File: 00d19c12-4386-3c56-924f-3667222614ad.roa (raw, json) Hash identifier: dFH4pqOZYJWdi1bY5TzPWm1qZ3udKVIATRPHH5JLHtk= Subject key identifier: AA:F8:19:11:F4:3B:9D:96:0E:65:2E:BF:B5:82:2E:36:30:F0:8B:D4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849A0C84890A23CF98B40236CC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00d19c12-4386-3c56-924f-3667222614ad.roa Signing time: Thu 24 Apr 2025 03:06:42 +0000 ROA not before: Thu 24 Apr 2025 03:06:42 +0000 ROA not after: Wed 23 Jul 2025 03:06:42 +0000 asID: 13335 IP address blocks: 172.68.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:c8:48:90:a2:3c:f9:8b:40:23:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 24 03:06:42 2025 GMT Not After : Jul 23 03:06:42 2025 GMT Subject: CN=df4cce56-6866-4dcf-9c4e-19ffaf96d40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:d5:b0:dd:1f:76:f3:92:2c:13:71:37:03: 26:db:29:f2:70:a1:71:2c:7b:e5:b7:21:db:d3:6c: 08:44:88:c3:8f:35:97:f6:b1:56:53:b5:a1:ef:b8: f6:6c:13:1c:2f:35:6a:a3:3c:d3:e0:4f:6d:7d:c1: 27:33:91:af:45:bd:2e:73:37:e6:28:88:96:fb:78: 13:91:bf:42:0b:2d:98:b7:55:34:c3:8f:49:9c:af: 07:40:cd:52:d3:a5:fe:d5:9d:71:b1:18:9f:37:c7: 9d:e9:26:b3:85:46:c1:33:83:68:50:ce:31:ff:8b: c5:91:68:4b:89:f8:20:d3:1f:31:ee:67:41:1d:88: 18:68:ec:35:28:55:5d:1f:a3:9c:6b:f4:04:fc:08: b4:e2:f1:ae:a4:e9:79:2e:ee:e3:89:3a:10:66:8c: ed:92:d7:e3:79:39:99:f8:d4:3d:de:7c:3b:ee:71: 57:22:1c:df:f1:7c:67:c4:cb:fd:60:91:ef:db:0b: f3:37:5d:f7:cf:99:ea:da:b2:48:89:bb:da:c5:2a: bb:cb:45:f4:7d:46:72:13:96:30:f9:3b:db:52:58: fd:50:5a:c0:b1:c4:db:32:1f:fb:8b:4c:e0:7d:9f: 9b:cf:b6:9a:3c:11:63:f5:3a:b4:e1:79:a4:e6:aa: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F8:19:11:F4:3B:9D:96:0E:65:2E:BF:B5:82:2E:36:30:F0:8B:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00d19c12-4386-3c56-924f-3667222614ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:99:09:31:aa:12:56:94:c3:88:d4:36:9c:6b:85:e5:4c:08: 96:ee:b1:b7:62:56:52:ee:50:b6:22:f1:61:8b:9f:de:17:26: 38:d6:a9:95:b1:ee:17:b8:ba:27:d5:77:26:4e:57:50:dc:4d: 79:1c:9d:c1:a0:93:f5:46:b1:35:df:ec:63:77:58:f5:08:e0: 9f:eb:f4:c8:f3:84:45:16:3b:16:75:29:19:e0:f3:37:44:1a: 9a:7d:10:f5:12:56:d2:4d:1e:70:09:a0:96:62:41:e6:d4:67: 39:b9:fa:0e:5f:41:96:12:24:1f:fb:e5:1d:e4:25:f4:44:3d: 62:7e:81:8f:34:3b:9a:9d:aa:d9:f9:35:ee:0f:61:0f:63:05: 1f:a2:2c:70:e0:35:63:3b:05:ae:56:be:3a:56:19:cc:e8:f3: de:49:d0:43:7b:7f:44:48:07:b8:7b:e7:09:cc:dd:46:f2:1f: 40:c0:dc:a7:aa:c8:d3:48:3a:08:7c:0b:28:8c:cf:af:0a:ba: ac:97:fd:97:0d:7b:3c:ab:4c:fd:88:36:7e:2c:ba:1e:eb:01: 97:c4:11:bb:3e:98:8e:bc:3b:11:18:94:0b:b4:27:e6:92:aa: ad:ad:12:01:d0:74:20:a9:e8:8c:33:54:98:8c:f3:75:59:56: ac:9a:d2:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgyEiQojz5i0AjbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQyNDAzMDY0MloXDTI1MDcyMzAzMDY0MlowLzEtMCsGA1UEAxMk ZGY0Y2NlNTYtNjg2Ni00ZGNmLTljNGUtMTlmZmFmOTZkNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBLVsN0fdvOSLBNxNwMm2ynycKFxLHvltyHb 02wIRIjDjzWX9rFWU7Wh77j2bBMcLzVqozzT4E9tfcEnM5GvRb0uczfmKIiW+3gT kb9CCy2Yt1U0w49JnK8HQM1S06X+1Z1xsRifN8ed6SazhUbBM4NoUM4x/4vFkWhL ifgg0x8x7mdBHYgYaOw1KFVdH6Oca/QE/Ai04vGupOl5Lu7jiToQZoztktfjeTmZ +NQ93nw77nFXIhzf8XxnxMv9YJHv2wvzN133z5nq2rJIibvaxSq7y0X0fUZyE5Yw +TvbUlj9UFrAscTbMh/7i0zgfZ+bz7aaPBFj9Tq04Xmk5qoYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKr4GRH0O52WDmUuv7WCLjYw8IvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDBkMTljMTItNDM4Ni0z YzU2LTkyNGYtMzY2NzIyMjYxNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiZCTGqElaUw4jUNpxrheVMCJbusbdiVlLuULYi8WGLn94XJjjWqZWx 7he4uifVdyZOV1DcTXkcncGgk/VGsTXf7GN3WPUI4J/r9MjzhEUWOxZ1KRng8zdE Gpp9EPUSVtJNHnAJoJZiQebUZzm5+g5fQZYSJB/75R3kJfREPWJ+gY80O5qdqtn5 Ne4PYQ9jBR+iLHDgNWM7Ba5WvjpWGczo895J0EN7f0RIB7h75wnM3UbyH0DA3Keq yNNIOgh8CyiMz68KuqyX/ZcNezyrTP2INn4suh7rAZfEEbs+mI68OxEYlAu0J+aS qq2tEgHQdCCp6IwzVJiM83VZVqya0r8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:16 2025 by rpki-client