$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18d9de15-0aa8-3994-9ce5-da64aa5611b0.roa File: 18d9de15-0aa8-3994-9ce5-da64aa5611b0.roa (raw, json) Hash identifier: jMsrXvM9xmgNE6PszZGcmZyxDTUKoPezkkjs3CA33so= Subject key identifier: 08:37:F8:B1:73:8A:B0:9E:4C:D8:7C:2E:EA:AF:63:0A:40:87:26:81 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA96217C3BD439787ED4C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18d9de15-0aa8-3994-9ce5-da64aa5611b0.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.68.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:96:21:7c:3b:d4:39:78:7e:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=1d4b6bd1-d762-4402-aa3c-45b31a75d577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:ad:af:52:c7:a6:aa:ad:1a:79:f0:21:9d: 91:7c:84:9a:50:3e:a9:3d:7c:7f:19:46:ca:89:96: 57:d8:99:81:ca:a0:06:88:b6:35:83:f0:9e:df:91: 70:f4:93:da:d8:46:6d:8c:f6:68:8b:d9:14:35:e7: d5:04:c7:ad:35:50:00:50:56:db:45:8c:8b:2f:7d: bb:fb:80:7e:6c:d3:56:1a:4e:c8:ed:2d:63:d8:12: c0:67:21:08:93:2e:a6:52:ff:73:cb:96:fe:1f:0a: ad:1b:60:18:77:f3:be:04:86:91:ce:a0:5c:8e:e4: ad:b1:6c:86:9b:d5:7d:fe:55:8d:1f:65:cc:7b:95: e1:f0:cb:6d:52:0f:d6:a4:5a:ad:86:ce:bd:71:cb: 76:6f:a9:3f:85:8c:c3:6b:92:8a:df:c2:24:76:46: 3c:0c:f6:81:97:4c:02:fe:20:72:aa:13:e4:8f:10: ae:ef:56:7d:d2:80:31:fc:67:34:22:cb:bf:5b:fa: d7:de:95:97:e4:ee:ed:11:97:ad:13:11:5a:9b:bf: 9b:e3:fa:81:ff:a2:7e:62:b1:13:e5:65:e4:86:f8: 97:24:6a:1b:69:e7:5a:3f:b2:8d:79:1c:3c:43:7e: 23:ad:09:85:75:db:be:bb:70:91:e1:05:26:cc:4e: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:37:F8:B1:73:8A:B0:9E:4C:D8:7C:2E:EA:AF:63:0A:40:87:26:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18d9de15-0aa8-3994-9ce5-da64aa5611b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f7:77:3b:51:cb:7b:97:4d:73:64:2f:f6:82:2c:f5:70:a8: c4:1c:d3:ae:76:26:5d:8d:06:08:5c:29:6f:c7:29:d6:05:a8: 16:70:be:dc:84:f0:aa:61:48:2c:a4:66:a5:e2:95:ba:1c:37: 63:39:4f:20:5d:46:6d:28:e8:c3:67:76:21:9f:60:3b:70:09: bc:7f:e2:3b:b9:e9:ac:ad:d8:04:16:5f:6b:96:da:8b:f3:08: 60:a4:89:9f:c0:0a:eb:b9:22:bb:18:cf:3f:7b:a3:a1:c4:17: 7d:2e:ef:e3:a0:a5:69:8a:01:0d:5d:ad:b3:e0:d2:cb:4c:6b: a9:d4:6e:f9:3c:19:b4:8f:d2:4e:33:1b:48:d7:8b:18:2b:34: 6a:f2:3d:90:87:7f:57:e5:79:fd:2a:97:f8:bb:71:bc:5c:66: b6:68:1a:f7:f4:02:ab:11:c3:6d:a4:32:8b:92:03:c0:99:99: 04:6c:c5:1d:96:fa:71:ac:1f:2e:e6:15:aa:a1:a5:0f:8d:07: 71:63:05:13:f5:20:ce:79:ff:dd:71:2a:cc:91:60:80:cc:f5: 96:05:7f:77:d2:7b:3a:8e:70:d7:d0:bf:97:2e:df:72:42:c2: 02:9d:2b:6f:89:10:58:de:07:27:04:93:56:53:88:41:d7:e2: 38:ff:93:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupYhfDvUOXh+1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MWQ0YjZiZDEtZDc2Mi00NDAyLWFhM2MtNDViMzFhNzVkNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy22tr1LHpqqtGnnwIZ2RfISaUD6pPXx/GUbK iZZX2JmByqAGiLY1g/Ce35Fw9JPa2EZtjPZoi9kUNefVBMetNVAAUFbbRYyLL327 +4B+bNNWGk7I7S1j2BLAZyEIky6mUv9zy5b+HwqtG2AYd/O+BIaRzqBcjuStsWyG m9V9/lWNH2XMe5Xh8MttUg/WpFqths69cct2b6k/hYzDa5KK38IkdkY8DPaBl0wC /iByqhPkjxCu71Z90oAx/Gc0Isu/W/rX3pWX5O7tEZetExFam7+b4/qB/6J+YrET 5WXkhviXJGobaedaP7KNeRw8Q34jrQmFddu+u3CR4QUmzE55iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg3+LFzirCeTNh8LuqvYwpAhyaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMThkOWRlMTUtMGFhOC0z OTk0LTljZTUtZGE2NGFhNTYxMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj3dztRy3uXTXNkL/aCLPVwqMQc0652Jl2NBghcKW/HKdYFqBZwvtyE 8KphSCykZqXilbocN2M5TyBdRm0o6MNndiGfYDtwCbx/4ju56ayt2AQWX2uW2ovz CGCkiZ/ACuu5IrsYzz97o6HEF30u7+OgpWmKAQ1drbPg0stMa6nUbvk8GbSP0k4z G0jXixgrNGryPZCHf1flef0ql/i7cbxcZrZoGvf0AqsRw22kMouSA8CZmQRsxR2W +nGsHy7mFaqhpQ+NB3FjBRP1IM55/91xKsyRYIDM9ZYFf3fSezqOcNfQv5cu33JC wgKdK2+JEFjeBycEk1ZTiEHX4jj/k98= -----END CERTIFICATE-----Generated at Sun Jun 15 13:25:03 2025 by rpki-client