$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad73e9b7-2259-3e54-a72c-3ce1c8ee5e2a.roa File: ad73e9b7-2259-3e54-a72c-3ce1c8ee5e2a.roa (raw, json) Hash identifier: QiE0w/BtZtgPbeufiUAkN/YHtuxQisTMdkk3avvuSj4= Subject key identifier: 0B:E6:98:48:8D:77:4D:2F:45:72:B9:52:CB:24:73:AB:B9:93:83:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8544D3F91F510066DC2D70 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad73e9b7-2259-3e54-a72c-3ce1c8ee5e2a.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:44:d3:f9:1f:51:00:66:dc:2d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=c0ade245-a39c-4f35-ae09-832f697f5800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:71:18:dc:6d:f2:c2:f3:09:8c:c9:01:68: 8d:81:18:ab:f4:43:d1:81:04:c8:13:46:fe:c0:9f: 1c:a1:b2:51:8c:07:81:37:53:7f:1e:a1:e5:98:f0: a7:29:b2:52:01:7c:a0:90:50:05:9b:40:7b:98:e6: 5a:c6:82:8d:64:f1:82:b6:7e:3f:47:ef:06:0a:ae: 08:30:5b:78:b5:21:f4:c8:ae:29:4f:ed:62:8d:b5: ee:f6:5d:b8:6b:c8:f3:dc:65:57:59:55:e2:92:1e: ee:6e:54:e4:b7:4e:88:01:11:86:02:51:64:71:3e: af:8d:8f:50:cc:30:55:7b:de:6a:a1:ea:42:1c:c6: a1:e6:49:21:a9:ec:93:09:8f:44:b7:0f:2f:34:dd: 2f:66:dc:ef:cc:24:f9:41:9e:a2:5e:8d:83:30:38: 0a:ed:cf:82:41:ac:a2:65:ca:72:a0:bf:cb:24:64: 19:41:26:50:dc:4b:a9:22:d8:cf:47:bf:c7:ed:92: 0b:ca:03:1a:5b:0a:df:76:68:85:59:7b:dc:17:b4: 0e:e1:b3:48:13:3f:36:11:37:bd:f4:19:42:39:11: e9:1b:04:fd:72:47:96:2c:7c:88:69:7a:2a:45:e8: 58:b2:eb:e2:07:f3:62:4b:b0:b3:1e:c2:fc:45:62: ce:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E6:98:48:8D:77:4D:2F:45:72:B9:52:CB:24:73:AB:B9:93:83:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad73e9b7-2259-3e54-a72c-3ce1c8ee5e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ae:2a:38:c0:7e:ec:e3:fc:47:9b:24:35:c3:bb:5d:24:03: bb:e1:47:8f:97:6e:47:01:46:67:b7:be:0c:a6:74:be:75:f1: 13:bd:cc:98:a0:84:c5:ac:f5:11:a8:b6:f0:94:9a:4d:ac:4c: 2b:d3:e2:2d:99:93:ac:09:af:3b:fa:3a:c3:e7:7c:cb:35:de: 61:e2:ff:e4:74:9e:dc:e3:e0:fa:e4:8b:93:5a:03:7f:ab:3f: c4:0f:2a:60:3d:f7:e1:fb:fb:5b:3c:10:15:aa:03:31:b6:4d: 58:9b:03:22:18:8e:65:3d:5b:57:e7:f7:d3:1e:c1:9c:f3:71: b1:e5:c1:98:69:42:97:1c:43:93:0d:0c:59:93:14:1d:43:ae: 46:32:b1:d7:60:95:a6:6e:6f:4a:bc:c2:81:2c:b7:bb:47:8f: 1a:d0:10:f4:05:27:c2:75:64:65:3b:4c:66:27:58:18:ff:32: 2b:f4:97:2d:c8:91:e6:10:7d:f3:6d:31:83:16:d5:0e:8b:cc: d0:e9:3f:4b:d6:76:6f:0b:92:1a:00:81:ab:0f:24:d8:16:a1: a9:b4:30:07:87:72:ca:df:3b:c4:e5:6e:ef:ea:a5:37:ce:81: 36:f1:c4:8d:09:a5:6e:85:a0:cc:ee:9b:18:26:20:77:65:d6: 0a:8d:1e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUTT+R9RAGbcLXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk YzBhZGUyNDUtYTM5Yy00ZjM1LWFlMDktODMyZjY5N2Y1ODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBlxGNxt8sLzCYzJAWiNgRir9EPRgQTIE0b+ wJ8cobJRjAeBN1N/HqHlmPCnKbJSAXygkFAFm0B7mOZaxoKNZPGCtn4/R+8GCq4I MFt4tSH0yK4pT+1ijbXu9l24a8jz3GVXWVXikh7ublTkt06IARGGAlFkcT6vjY9Q zDBVe95qoepCHMah5kkhqeyTCY9Etw8vNN0vZtzvzCT5QZ6iXo2DMDgK7c+CQayi ZcpyoL/LJGQZQSZQ3EupItjPR7/H7ZILygMaWwrfdmiFWXvcF7QO4bNIEz82ETe9 9BlCORHpGwT9ckeWLHyIaXoqRehYsuviB/NiS7CzHsL8RWLOKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvmmEiNd00vRXK5Usskc6u5k4NHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWQ3M2U5YjctMjI1OS0z ZTU0LWE3MmMtM2NlMWM4ZWU1ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGauKjjAfuzj/EebJDXDu10kA7vhR4+XbkcBRme3vgymdL518RO9zJig hMWs9RGotvCUmk2sTCvT4i2Zk6wJrzv6OsPnfMs13mHi/+R0ntzj4Prki5NaA3+r P8QPKmA99+H7+1s8EBWqAzG2TVibAyIYjmU9W1fn99MewZzzcbHlwZhpQpccQ5MN DFmTFB1DrkYysddglaZub0q8woEst7tHjxrQEPQFJ8J1ZGU7TGYnWBj/Miv0ly3I keYQffNtMYMW1Q6LzNDpP0vWdm8LkhoAgasPJNgWoam0MAeHcsrfO8Tlbu/qpTfO gTbxxI0JpW6FoMzumxgmIHdl1gqNHgA= -----END CERTIFICATE-----Generated at Sun Jun 15 11:30:08 2025 by rpki-client