$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0588042-0c57-302b-99af-793126ed6697.roa File: c0588042-0c57-302b-99af-793126ed6697.roa (raw, json) Hash identifier: TW5ffUSwn7a3IIYHtViYfWjN2K3Vjyu2hP9yzIjC7uI= Subject key identifier: 42:82:4F:4F:84:6F:BF:CF:DA:60:E6:DE:BD:B8:ED:5E:D4:49:4D:75 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E91FADBA4474AF3C01256080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0588042-0c57-302b-99af-793126ed6697.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 13335 IP address blocks: 172.68.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:ad:ba:44:74:af:3c:01:25:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=7789e78e-2e6f-4889-af3f-162e23ed14f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ea:a0:0d:13:d3:9d:95:22:31:74:f2:bf:17: 39:f2:34:d1:44:1b:82:23:f1:a0:56:51:6f:22:d8: 63:e6:fd:fa:a3:3e:32:cc:b3:58:cb:e8:7c:5c:a6: 43:14:0a:b0:6d:33:c9:03:25:69:0a:aa:3e:61:75: 52:93:d8:72:ab:a5:62:e7:ef:92:31:69:d7:84:9a: 17:7a:27:78:68:ed:b3:48:6c:98:77:97:a1:a7:1d: 98:8a:62:c4:fd:5a:a8:c1:c6:ca:5e:f2:b7:c5:bc: 62:3d:20:14:dc:04:4f:0d:1d:98:fc:ae:f7:36:73: c4:54:89:8b:33:36:33:8f:a2:ea:7f:74:49:69:5c: f7:91:48:08:79:b7:e7:a1:e2:b0:2a:9a:43:ef:48: 25:b7:4e:a8:11:23:29:04:70:fe:bb:f3:01:0e:94: 28:4b:32:46:36:7e:8f:78:ac:1c:02:a1:ff:18:4c: 5c:e5:58:b4:0a:f3:4b:15:d9:a0:5b:55:47:c3:aa: d1:57:95:97:e3:5a:77:2c:72:14:5b:52:8b:16:af: e6:57:f1:d8:81:67:17:b2:cd:a7:47:a2:d1:38:64: d5:19:15:2a:86:ad:48:d5:3f:d2:11:31:99:07:9a: bb:ea:dc:f4:04:c5:21:44:b2:4c:0e:59:4b:e1:44: df:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:82:4F:4F:84:6F:BF:CF:DA:60:E6:DE:BD:B8:ED:5E:D4:49:4D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c0588042-0c57-302b-99af-793126ed6697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:31:27:82:a9:c0:ad:83:ec:57:e9:ba:a0:ba:a5:b4:a3:5d: b9:f2:7b:07:1c:f0:69:9e:95:dc:a4:b2:5e:95:92:f2:9b:5c: f2:1e:33:15:8d:02:ff:48:ae:dd:8b:0c:b1:98:ed:f7:6b:1d: 2b:c1:41:bc:37:07:a8:98:9e:49:89:16:5f:5d:a3:bb:12:dc: 39:db:28:f1:da:86:29:e7:dc:9b:9a:3b:f3:0f:87:40:66:ef: 32:89:6e:18:b3:dc:df:70:6f:a9:c2:ae:74:40:74:7d:c8:0e: e5:aa:af:5e:fd:a1:d6:20:9d:1c:c7:78:09:97:01:04:87:52: 28:3e:6d:34:1d:f5:4a:57:bc:98:8c:99:60:27:5f:13:4b:e8: 34:40:3a:02:6c:43:76:de:b4:08:ef:d2:7a:17:a0:ae:91:8b: 75:06:51:5a:ef:1f:75:af:02:68:dc:2b:3e:da:6d:b7:6f:7b: 8c:b0:ab:aa:de:6c:dd:61:38:ae:f8:6e:5a:54:d9:b8:61:ed: a1:e7:7a:c7:1a:c3:c9:4c:09:f6:9b:5f:73:98:1c:89:4f:d1: b7:93:7f:d0:98:9f:2c:7d:8f:03:0f:a1:2c:27:27:6f:dc:84: 95:1c:84:a8:a3:4f:de:04:a4:44:e2:74:4a:43:8f:75:6c:65: 70:87:90:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH626RHSvPAElYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk Nzc4OWU3OGUtMmU2Zi00ODg5LWFmM2YtMTYyZTIzZWQxNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+qgDRPTnZUiMXTyvxc58jTRRBuCI/GgVlFv Ithj5v36oz4yzLNYy+h8XKZDFAqwbTPJAyVpCqo+YXVSk9hyq6Vi5++SMWnXhJoX eid4aO2zSGyYd5ehpx2YimLE/VqowcbKXvK3xbxiPSAU3ARPDR2Y/K73NnPEVImL MzYzj6Lqf3RJaVz3kUgIebfnoeKwKppD70glt06oESMpBHD+u/MBDpQoSzJGNn6P eKwcAqH/GExc5Vi0CvNLFdmgW1VHw6rRV5WX41p3LHIUW1KLFq/mV/HYgWcXss2n R6LROGTVGRUqhq1I1T/SETGZB5q76tz0BMUhRLJMDllL4UTfGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKCT0+Eb7/P2mDm3r247V7USU11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzA1ODgwNDItMGM1Ny0z MDJiLTk5YWYtNzkzMTI2ZWQ2Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwxJ4KpwK2D7FfpuqC6pbSjXbnyewcc8Gmeldyksl6VkvKbXPIeMxWN Av9Irt2LDLGY7fdrHSvBQbw3B6iYnkmJFl9do7sS3DnbKPHahinn3JuaO/MPh0Bm 7zKJbhiz3N9wb6nCrnRAdH3IDuWqr179odYgnRzHeAmXAQSHUig+bTQd9UpXvJiM mWAnXxNL6DRAOgJsQ3betAjv0noXoK6Ri3UGUVrvH3WvAmjcKz7abbdve4ywq6re bN1hOK74blpU2bhh7aHnescaw8lMCfabX3OYHIlP0beTf9CYnyx9jwMPoSwnJ2/c hJUchKijT94EpETidEpDj3VsZXCHkAI= -----END CERTIFICATE-----Generated at Wed Jun 18 13:56:20 2025 by rpki-client