$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa File: 8e39d174-0132-38c7-8666-3ddfd10c3f12.roa (raw, json) Hash identifier: K/WsKvEI83Y6WfvG5rnqeKYaCe2zpP3yfeIHhjtU5Rk= Subject key identifier: CF:17:F7:85:D5:DE:60:48:F4:D4:E7:7B:5B:EB:6E:4E:4F:F7:4D:0D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E91FB0136ABFD52A9C4BA0C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 172.68.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:b0:13:6a:bf:d5:2a:9c:4b:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=4bf97ae1-cdd0-44e2-ab4e-93a1faf8e64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:c1:e2:d7:39:4a:7f:be:4a:05:48:3b:0d: b7:51:af:84:b2:b0:bd:97:f2:30:e8:1f:27:5b:54: a2:a2:c8:70:f8:92:e1:ad:a0:dd:e8:b3:a5:8a:e0: be:a2:62:bf:13:0e:18:b8:d2:c3:d7:01:4e:17:a4: 89:7b:0f:7c:54:e4:13:8c:75:5c:02:a8:69:88:7f: ca:9f:d6:55:66:6f:f4:80:9a:e7:bf:55:3c:29:65: 0f:7e:db:74:db:a3:31:46:03:51:07:56:3b:46:0d: cd:5c:f5:bc:89:c1:bc:aa:7a:62:2f:d5:f5:21:72: 03:34:c1:07:64:12:42:ee:3c:f0:2a:78:b8:f4:04: e2:8c:7c:8f:83:95:2d:55:a7:9e:45:27:a5:51:ee: e9:51:d2:c9:b7:28:c5:0f:17:36:59:09:45:86:05: e7:a6:f9:8b:48:99:de:4c:8e:d4:28:4f:34:e3:f4: fa:d6:28:c3:4f:12:f4:86:1d:19:e1:b0:25:a7:3e: a2:0a:84:e7:0d:6a:02:7e:35:d5:1a:40:64:11:48: d7:60:d1:e5:91:65:e7:2e:69:eb:99:67:a4:3d:66: 54:1f:85:e8:35:6e:71:4a:e9:05:59:05:fb:9d:53: 06:1a:43:55:3b:56:40:4e:ed:14:ab:10:5e:68:d4: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:17:F7:85:D5:DE:60:48:F4:D4:E7:7B:5B:EB:6E:4E:4F:F7:4D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:12:06:7e:24:49:c0:eb:56:08:f5:3c:db:0c:a1:04:2e:77: 89:00:d9:0a:52:a3:80:71:e6:ba:3a:59:25:e1:c7:0e:5d:b9: 1d:82:17:c8:6f:1e:47:99:c6:c5:04:e2:ff:48:6e:c5:fb:63: 56:25:f8:16:33:66:35:98:6a:ff:ab:25:91:09:3f:8e:92:17: 55:d3:51:9f:24:6f:6b:79:39:2d:9a:61:d6:8b:4b:90:43:ed: 3e:11:6f:7c:e9:c4:9f:cf:5a:f4:f1:14:56:05:75:8d:5d:e9: cc:b4:c9:e3:ed:38:42:fe:c3:96:02:96:ce:82:fd:27:88:72: 42:8d:ab:b2:07:56:c3:80:66:26:99:79:cb:53:75:fe:c3:90: c2:55:48:ac:09:44:f7:8d:3f:50:57:be:b3:c6:97:a2:7b:d0: 30:01:21:35:5b:20:02:4b:51:26:31:da:7f:ea:46:b0:f0:53: 35:ba:51:b0:4c:95:81:6a:38:15:23:fc:7f:ef:62:75:ea:cd: 90:62:07:30:97:da:ce:c7:b4:a2:cb:16:70:bd:d1:1d:46:76: 66:fb:b4:ea:5d:de:5f:7f:3e:f5:64:15:02:c0:ce:f0:b8:95: 68:3e:98:fe:bb:d6:0f:de:4a:16:64:2c:1e:e0:0d:23:14:db: 34:13:e9:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH7ATar/VKpxLoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk NGJmOTdhZTEtY2RkMC00NGUyLWFiNGUtOTNhMWZhZjhlNjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSPB4tc5Sn++SgVIOw23Ua+EsrC9l/Iw6B8n W1Sioshw+JLhraDd6LOliuC+omK/Ew4YuNLD1wFOF6SJew98VOQTjHVcAqhpiH/K n9ZVZm/0gJrnv1U8KWUPftt026MxRgNRB1Y7Rg3NXPW8icG8qnpiL9X1IXIDNMEH ZBJC7jzwKni49ATijHyPg5UtVaeeRSelUe7pUdLJtyjFDxc2WQlFhgXnpvmLSJne TI7UKE804/T61ijDTxL0hh0Z4bAlpz6iCoTnDWoCfjXVGkBkEUjXYNHlkWXnLmnr mWekPWZUH4XoNW5xSukFWQX7nVMGGkNVO1ZATu0UqxBeaNRTHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8X94XV3mBI9NTne1vrbk5P900NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGUzOWQxNzQtMDEzMi0z OGM3LTg2NjYtM2RkZmQxMGMzZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUSBn4kScDrVgj1PNsMoQQud4kA2QpSo4Bx5ro6WSXhxw5duR2CF8hv HkeZxsUE4v9IbsX7Y1Yl+BYzZjWYav+rJZEJP46SF1XTUZ8kb2t5OS2aYdaLS5BD 7T4Rb3zpxJ/PWvTxFFYFdY1d6cy0yePtOEL+w5YCls6C/SeIckKNq7IHVsOAZiaZ ectTdf7DkMJVSKwJRPeNP1BXvrPGl6J70DABITVbIAJLUSYx2n/qRrDwUzW6UbBM lYFqOBUj/H/vYnXqzZBiBzCX2s7HtKLLFnC90R1Gdmb7tOpd3l9/PvVkFQLAzvC4 lWg+mP671g/eShZkLB7gDSMU2zQT6Uw= -----END CERTIFICATE-----Generated at Sun Jun 15 13:18:00 2025 by rpki-client