$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b796d531-a635-3318-a78b-56fdf837c91e.roa File: b796d531-a635-3318-a78b-56fdf837c91e.roa (raw, json) Hash identifier: IDSU+K6YHMlIKU1nfBbsk7Ur+p67Yx9lRHDgzveHXUg= Subject key identifier: 76:3C:0F:98:70:F1:55:D1:71:22:70:8C:82:CC:FB:7D:E2:4C:9A:CC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849A0C81728E155B3EE23F90880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b796d531-a635-3318-a78b-56fdf837c91e.roa Signing time: Thu 24 Apr 2025 03:06:19 +0000 ROA not before: Thu 24 Apr 2025 03:06:19 +0000 ROA not after: Wed 23 Jul 2025 03:06:19 +0000 asID: 13335 IP address blocks: 172.68.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:c8:17:28:e1:55:b3:ee:23:f9:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 24 03:06:19 2025 GMT Not After : Jul 23 03:06:19 2025 GMT Subject: CN=4df43129-d111-452b-a300-43f59992ade8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3a:e2:74:84:e2:89:55:f5:a1:cf:f3:17:11: 13:f6:6c:cb:ea:86:73:d1:74:01:27:e1:a3:80:df: 05:38:15:a3:9b:92:b1:3d:66:e5:8e:64:e9:fc:fe: c5:f4:11:e6:15:11:c9:9a:af:72:c6:f9:94:48:f7: 2a:d5:7f:1c:ae:92:d6:8f:84:85:8d:7e:2d:37:c9: c3:b7:fa:2e:19:bc:b3:0a:95:23:bd:be:85:91:43: aa:88:f0:d4:28:d9:a5:e8:ff:68:29:1d:59:ac:a1: 35:4a:ff:1e:ec:d4:83:48:b2:22:13:de:c9:ae:9a: b6:1e:93:16:07:fd:e4:e8:76:84:df:55:76:eb:49: 8a:24:22:5f:1d:ed:98:41:7e:7a:0f:ed:10:d0:85: 8f:bc:86:35:9d:23:59:57:75:5f:21:31:13:03:57: 09:29:42:59:93:f7:1d:40:86:77:29:d3:4a:35:23: 4e:12:be:8f:08:11:b7:ed:80:07:76:86:2c:53:3b: f2:60:bc:b4:5d:75:8e:8a:73:6e:0b:6d:55:38:ee: 3e:f5:7d:3d:d1:1d:05:be:58:e9:09:76:e5:f3:21: 69:05:b3:b3:ad:87:e1:99:88:f7:e3:6f:ed:bd:b8: 24:37:57:55:83:75:dc:68:42:9d:93:d7:70:f7:a9: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3C:0F:98:70:F1:55:D1:71:22:70:8C:82:CC:FB:7D:E2:4C:9A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b796d531-a635-3318-a78b-56fdf837c91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e2:77:66:8a:4d:66:f2:15:75:6f:bb:d3:3c:b9:6e:17:83: d1:6d:2a:40:db:af:8f:97:57:09:37:ee:d4:00:d6:67:ef:2f: 3b:36:38:8d:f1:75:f3:ff:ad:8c:e2:67:a5:5d:85:92:a6:55: 60:65:ea:02:a5:2e:1c:c7:87:5a:65:03:05:77:c2:c7:42:25: ac:22:b1:62:bd:cd:f3:a2:23:de:60:bf:63:4d:5f:26:e4:58: 1d:cd:d0:e4:a9:49:c2:64:fe:3d:e0:04:1c:bc:b8:b1:ae:d5: 9e:4c:06:bf:35:92:99:da:bf:d0:8d:4d:6c:3e:f2:f1:c9:f9: c7:16:ee:e8:c6:08:28:6d:d4:ce:f8:02:28:35:1e:02:36:b1: 3b:fe:9f:f8:5f:d9:7d:ee:39:a4:40:13:42:2b:ab:35:29:e3: da:21:9e:62:75:b0:6c:9c:d6:59:c2:2a:26:5f:43:f2:59:e4: 20:35:1c:45:d9:67:f2:16:22:9e:95:65:ab:7f:12:58:31:6a: 5d:3b:7f:54:dc:af:86:b1:70:52:55:62:ee:58:9b:20:0a:6a: 11:16:dc:df:f8:92:d1:52:34:3e:a2:70:f8:7f:49:b5:80:fa: ee:23:d4:a8:67:d6:2d:43:9d:db:29:7d:ef:f9:2c:a5:8a:0e: c6:15:52:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgyBco4VWz7iP5CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQyNDAzMDYxOVoXDTI1MDcyMzAzMDYxOVowLzEtMCsGA1UEAxMk NGRmNDMxMjktZDExMS00NTJiLWEzMDAtNDNmNTk5OTJhZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjridITiiVX1oc/zFxET9mzL6oZz0XQBJ+Gj gN8FOBWjm5KxPWbljmTp/P7F9BHmFRHJmq9yxvmUSPcq1X8crpLWj4SFjX4tN8nD t/ouGbyzCpUjvb6FkUOqiPDUKNml6P9oKR1ZrKE1Sv8e7NSDSLIiE97Jrpq2HpMW B/3k6HaE31V260mKJCJfHe2YQX56D+0Q0IWPvIY1nSNZV3VfITETA1cJKUJZk/cd QIZ3KdNKNSNOEr6PCBG37YAHdoYsUzvyYLy0XXWOinNuC21VOO4+9X090R0Fvljp CXbl8yFpBbOzrYfhmYj342/tvbgkN1dVg3XcaEKdk9dw96lSqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY8D5hw8VXRcSJwjILM+33iTJrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjc5NmQ1MzEtYTYzNS0z MzE4LWE3OGItNTZmZGY4MzdjOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbid2aKTWbyFXVvu9M8uW4Xg9FtKkDbr4+XVwk37tQA1mfvLzs2OI3x dfP/rYziZ6VdhZKmVWBl6gKlLhzHh1plAwV3wsdCJawisWK9zfOiI95gv2NNXybk WB3N0OSpScJk/j3gBBy8uLGu1Z5MBr81kpnav9CNTWw+8vHJ+ccW7ujGCCht1M74 Aig1HgI2sTv+n/hf2X3uOaRAE0IrqzUp49ohnmJ1sGyc1lnCKiZfQ/JZ5CA1HEXZ Z/IWIp6VZat/Elgxal07f1Tcr4axcFJVYu5YmyAKahEW3N/4ktFSND6icPh/SbWA +u4j1Khn1i1Dndspfe/5LKWKDsYVUq4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:02 2025 by rpki-client