$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/933fe89f-149f-3b12-aa04-c6bc82dc43cc.roa File: 933fe89f-149f-3b12-aa04-c6bc82dc43cc.roa (raw, json) Hash identifier: wtZv5pTSRGETEVjznb0JzS3h4l88Ii9elGyqnLCgJ+Y= Subject key identifier: 70:DD:D5:E7:E3:A6:6C:CE:8B:26:63:8E:BC:2C:08:0B:05:55:EE:05 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A0ECFF602FE3CECA6234F4C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/933fe89f-149f-3b12-aa04-c6bc82dc43cc.roa Signing time: Mon 02 Jun 2025 13:01:03 +0000 ROA not before: Mon 02 Jun 2025 13:01:03 +0000 ROA not after: Sun 31 Aug 2025 13:01:03 +0000 asID: 13335 IP address blocks: 172.68.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:cf:f6:02:fe:3c:ec:a6:23:4f:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jun 2 13:01:03 2025 GMT Not After : Aug 31 13:01:03 2025 GMT Subject: CN=5e5fcc53-03e5-4b35-bdbb-c7e74532528d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ae:09:67:0b:f1:82:1b:31:9c:7c:78:c7:10: 5b:5c:ac:ee:03:e0:a8:cf:84:76:c5:ec:af:42:0a: 7c:d1:03:81:77:79:97:28:7f:6b:9a:67:9a:2e:bd: de:ac:67:5a:76:76:19:ca:f9:ff:21:df:28:3f:1c: ec:9d:16:b6:f2:fc:80:41:22:13:b2:dd:05:2c:06: 01:9c:b6:6e:f6:eb:79:e8:c8:b8:d0:b8:6b:9f:90: 0a:8c:d4:a0:f1:51:88:91:24:66:91:7a:df:79:e9: d1:b9:40:3b:45:a1:cb:fd:a3:7a:47:c5:fd:d9:e2: aa:4e:e6:ae:f0:d6:7c:8a:f1:a0:fd:5a:1f:d3:98: 13:5c:64:bd:49:a2:eb:e9:6e:b7:55:2a:3c:ec:b4: f2:07:6f:5c:37:d8:5a:8b:fc:89:31:f0:af:43:f1: 77:66:95:0d:3a:46:de:df:6a:81:23:e1:50:13:0c: 07:f7:71:c2:b9:a8:ea:f6:69:99:d4:ae:ba:44:5a: d1:78:8e:60:98:f5:84:44:8c:21:d5:24:13:0a:70: e0:79:5a:83:8d:32:36:7f:4e:04:7e:ec:f0:0e:1d: 0e:e0:c8:87:df:ab:16:31:a7:59:c2:cd:71:e1:eb: 40:c6:89:93:7b:b8:58:be:e8:c9:6b:e8:c1:a1:37: d6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DD:D5:E7:E3:A6:6C:CE:8B:26:63:8E:BC:2C:08:0B:05:55:EE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/933fe89f-149f-3b12-aa04-c6bc82dc43cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:97:47:3c:92:01:d8:7c:8c:bf:8b:f5:fd:44:46:14:ef:f0: 3f:f7:d7:f9:aa:2c:47:00:7c:4b:e1:3e:4b:e4:52:39:84:bd: 50:c0:f4:56:d9:f4:92:f5:55:0a:b2:3c:9a:89:b6:02:c4:2c: ec:c5:35:3b:84:fd:3f:b7:60:3e:c6:03:9d:9a:9c:22:88:48: 50:1d:a3:d7:ec:88:6e:c0:21:01:96:44:b9:be:a0:15:a9:fa: 1c:32:d8:61:23:c5:a5:d4:f9:63:d5:db:da:8f:e6:39:db:90: 5e:2f:a1:b5:b8:1e:7f:7a:5f:e5:97:da:d1:87:da:a4:d8:e3: 03:de:f5:91:62:44:6f:94:9e:e5:7d:be:96:ba:5c:d4:b6:64: 17:49:0e:17:3e:95:ac:3d:b4:fb:f9:a8:c7:aa:d3:9e:3f:67: fc:9e:4f:69:7f:27:e1:50:59:dc:30:80:58:d6:77:ec:93:33: 99:a1:ac:3c:c8:8b:af:48:a4:e6:a4:24:0a:f6:8f:da:08:7f: e9:46:f1:c7:2d:c1:6f:39:ac:32:a7:99:1e:e0:49:cd:e7:6a: b5:30:f9:47:04:31:5d:97:35:ca:a5:a4:4f:e7:eb:0f:8d:43: ae:29:a2:e5:d9:08:50:87:9a:6f:de:b5:e8:ec:76:70:e7:5d: 47:10:aa:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoOz/YC/jzspiNPTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDYwMjEzMDEwM1oXDTI1MDgzMTEzMDEwM1owLzEtMCsGA1UEAxMk NWU1ZmNjNTMtMDNlNS00YjM1LWJkYmItYzdlNzQ1MzI1MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA464JZwvxghsxnHx4xxBbXKzuA+Coz4R2xeyv Qgp80QOBd3mXKH9rmmeaLr3erGdadnYZyvn/Id8oPxzsnRa28vyAQSITst0FLAYB nLZu9ut56Mi40Lhrn5AKjNSg8VGIkSRmkXrfeenRuUA7RaHL/aN6R8X92eKqTuau 8NZ8ivGg/Vof05gTXGS9SaLr6W63VSo87LTyB29cN9hai/yJMfCvQ/F3ZpUNOkbe 32qBI+FQEwwH93HCuajq9mmZ1K66RFrReI5gmPWERIwh1SQTCnDgeVqDjTI2f04E fuzwDh0O4MiH36sWMadZws1x4etAxomTe7hYvujJa+jBoTfWvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDd1efjpmzOiyZjjrwsCAsFVe4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTMzZmU4OWYtMTQ5Zi0z YjEyLWFhMDQtYzZiYzgyZGM0M2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2XRzySAdh8jL+L9f1ERhTv8D/31/mqLEcAfEvhPkvkUjmEvVDA9FbZ 9JL1VQqyPJqJtgLELOzFNTuE/T+3YD7GA52anCKISFAdo9fsiG7AIQGWRLm+oBWp +hwy2GEjxaXU+WPV29qP5jnbkF4vobW4Hn96X+WX2tGH2qTY4wPe9ZFiRG+UnuV9 vpa6XNS2ZBdJDhc+law9tPv5qMeq054/Z/yeT2l/J+FQWdwwgFjWd+yTM5mhrDzI i69IpOakJAr2j9oIf+lG8cctwW85rDKnmR7gSc3narUw+UcEMV2XNcqlpE/n6w+N Q64pouXZCFCHmm/etejsdnDnXUcQqmE= -----END CERTIFICATE-----Generated at Mon Jun 16 18:40:33 2025 by rpki-client