$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96d5aedb-9494-37ce-b4cc-58549e72ab1d.roa File: 96d5aedb-9494-37ce-b4cc-58549e72ab1d.roa (raw, json) Hash identifier: XCR3I/i7J5Mk7iendzOJNQJr7TzWKF7cVovpXk2Xrp0= Subject key identifier: 1C:D7:07:ED:F9:EA:6E:41:C7:FE:E0:E8:C6:79:FF:46:2F:F2:C1:40 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584A0753919CEAD40AFE2C8F0C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96d5aedb-9494-37ce-b4cc-58549e72ab1d.roa Signing time: Fri 30 May 2025 20:39:48 +0000 ROA not before: Fri 30 May 2025 20:39:48 +0000 ROA not after: Thu 28 Aug 2025 20:39:48 +0000 asID: 14789 IP address blocks: 172.68.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:53:91:9c:ea:d4:0a:fe:2c:8f:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 30 20:39:48 2025 GMT Not After : Aug 28 20:39:48 2025 GMT Subject: CN=beaac95e-a612-44a2-a0b0-be6e8d828786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:7e:2e:59:b1:0b:14:00:65:cb:a5:4c:9f: b3:b7:23:14:e3:10:47:95:1d:d1:ac:c1:97:33:c9: d7:71:69:04:04:63:23:80:0a:26:59:03:46:cd:42: b1:5d:c5:fe:fc:2f:87:40:a6:7c:d2:8c:24:2f:2e: 8a:12:6a:aa:26:1c:d6:3f:83:a0:d3:70:b1:66:da: ee:cb:3a:a9:13:d0:32:0d:37:8c:3c:8b:d6:e1:c7: 66:3c:55:5f:2e:5c:66:0c:93:59:42:3b:2b:67:83: 7a:bd:7f:b5:5c:97:ec:f7:cb:a9:d9:8d:cb:7e:f9: e2:e4:d5:e2:a3:1f:84:d5:74:37:70:ca:00:29:51: 44:f3:06:25:74:d1:dc:6f:fe:c6:1a:d1:4c:7d:7f: 64:da:fb:5a:d5:6c:6a:c1:ce:fc:c9:98:14:99:ce: c9:98:d9:17:78:ed:af:76:34:ac:d9:15:8b:b2:b9: d2:cf:f4:e8:0c:a8:8b:68:8a:ab:a7:ea:73:ce:e8: fa:48:77:0d:3f:3a:11:ea:41:cb:71:96:d7:7d:89: ac:c3:b4:ea:3c:20:2e:94:d8:fa:47:d7:9e:4e:40: 8c:38:6a:7c:55:92:70:ea:95:fe:a4:87:c4:68:bb: 5f:a0:a0:5f:33:d7:6e:84:24:bb:24:69:2f:1d:61: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D7:07:ED:F9:EA:6E:41:C7:FE:E0:E8:C6:79:FF:46:2F:F2:C1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96d5aedb-9494-37ce-b4cc-58549e72ab1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1e:90:a1:e9:01:48:b2:a2:0e:d2:b0:e0:e9:55:fa:e3:a2: 34:8f:a3:4c:42:67:84:4c:4d:b8:ae:a0:a9:f4:17:6e:62:40: 79:cf:b9:e5:dc:38:a8:29:2d:0e:d3:4a:70:0e:2a:6c:e2:6f: 25:83:f8:80:17:ce:7c:4d:31:21:00:17:29:74:f1:68:af:3d: 81:06:b2:79:c8:06:35:88:b8:d3:e8:c2:56:20:42:bb:93:0d: 73:99:1c:49:6b:d5:fa:e8:cc:fb:7c:dc:d0:33:43:c8:47:ab: b7:bb:b0:74:ce:d2:6b:22:94:dd:e9:ec:54:3a:28:52:84:8b: a4:f1:e2:af:f5:4c:76:43:3a:ee:e5:e7:93:ee:ee:e0:c6:d6: 02:ef:39:14:56:4e:2c:3e:c4:13:4d:3a:be:47:7a:07:54:ef: 29:30:d7:87:c2:95:63:12:f8:96:29:f8:9d:0e:43:01:4f:89: 8b:cf:b8:29:0f:5c:28:20:81:df:eb:5f:30:8e:e7:80:2a:fe: 5e:dc:50:9f:a4:7e:c6:9b:cd:62:da:1d:a3:cb:15:5e:1a:ef: c3:ab:9f:7d:28:cf:51:87:8f:dd:de:9e:1d:c6:7d:b2:8f:31: c5:c1:f2:d4:54:df:d8:1b:d0:44:2a:e4:3b:af:e5:66:95:f5: 31:69:ac:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHU5Gc6tQK/iyPDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUzMDIwMzk0OFoXDTI1MDgyODIwMzk0OFowLzEtMCsGA1UEAxMk YmVhYWM5NWUtYTYxMi00NGEyLWEwYjAtYmU2ZThkODI4Nzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlp+LlmxCxQAZculTJ+ztyMU4xBHlR3RrMGX M8nXcWkEBGMjgAomWQNGzUKxXcX+/C+HQKZ80owkLy6KEmqqJhzWP4Og03CxZtru yzqpE9AyDTeMPIvW4cdmPFVfLlxmDJNZQjsrZ4N6vX+1XJfs98up2Y3Lfvni5NXi ox+E1XQ3cMoAKVFE8wYldNHcb/7GGtFMfX9k2vta1Wxqwc78yZgUmc7JmNkXeO2v djSs2RWLsrnSz/ToDKiLaIqrp+pzzuj6SHcNPzoR6kHLcZbXfYmsw7TqPCAulNj6 R9eeTkCMOGp8VZJw6pX+pIfEaLtfoKBfM9duhCS7JGkvHWGqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzXB+356m5Bx/7g6MZ5/0Yv8sFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTZkNWFlZGItOTQ5NC0z N2NlLWI0Y2MtNTg1NDllNzJhYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoekKHpAUiyog7SsODpVfrjojSPo0xCZ4RMTbiuoKn0F25iQHnPueXc OKgpLQ7TSnAOKmzibyWD+IAXznxNMSEAFyl08WivPYEGsnnIBjWIuNPowlYgQruT DXOZHElr1frozPt83NAzQ8hHq7e7sHTO0msilN3p7FQ6KFKEi6Tx4q/1THZDOu7l 55Pu7uDG1gLvORRWTiw+xBNNOr5HegdU7ykw14fClWMS+JYp+J0OQwFPiYvPuCkP XCgggd/rXzCO54Aq/l7cUJ+kfsabzWLaHaPLFV4a78Orn30oz1GHj93enh3GfbKP McXB8tRU39gb0EQq5Duv5WaV9TFprAM= -----END CERTIFICATE-----Generated at Tue Jun 17 18:30:39 2025 by rpki-client