$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa File: e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa (raw, json) Hash identifier: 1Vs1rnfg5pV0/5IvIIDiWV6XhgIwOGGlsOhpy5zxgfw= Subject key identifier: 9B:FE:87:06:0A:AF:3E:5F:25:3C:76:CA:3D:15:4D:88:0A:A6:2D:EE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C04C2D8F117661FD9C980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:04:c2:d8:f1:17:66:1f:d9:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=3de3e3d5-c516-48f6-9cbe-31953b5e98ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:2b:9c:f5:ee:05:f6:f4:70:9b:73:1f:bb: b7:c9:06:ae:6f:0f:a8:c6:05:45:c1:e8:f5:59:8d: 56:ee:25:74:6c:6e:73:f6:eb:ac:6f:a3:c0:65:fc: cf:30:4d:2a:1c:ce:2b:05:05:94:05:38:b6:c0:41: ee:f5:47:c7:47:20:02:af:2c:13:75:1f:1e:18:d1: 10:4f:9e:1e:d2:f8:ac:e1:e4:a7:a2:ed:2e:6d:37: 1b:e8:f3:e7:e5:69:a6:44:93:21:fa:10:75:a4:c3: c0:0d:8f:53:b5:64:0e:8d:5c:31:ee:ef:25:15:18: d3:48:44:69:61:43:13:3f:83:e5:8d:bb:e6:11:6b: bc:41:7a:b3:cc:b0:cc:df:50:81:3e:77:ba:25:11: 5c:c9:d4:62:f6:68:86:db:92:db:ca:37:bc:62:3e: fa:4b:53:4e:d2:64:e3:8e:8e:30:2e:c4:87:51:dc: ee:cf:58:4d:c9:bf:e3:03:03:ef:29:8d:ee:67:21: 29:d7:11:84:54:8b:41:61:1d:d2:f7:5c:1c:3b:b2: 08:e9:e3:2d:c8:c3:9e:e8:94:b6:c7:b8:02:19:fd: 7c:90:d3:84:18:8b:6f:65:6f:2c:03:b6:da:a3:9d: 70:e7:17:9d:5d:f4:0a:ae:4a:cd:56:a5:95:91:99: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FE:87:06:0A:AF:3E:5F:25:3C:76:CA:3D:15:4D:88:0A:A6:2D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e1db1ef5-8875-37b0-a87d-5f3f1abd148d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8d:af:8e:f5:2b:1e:ac:32:7f:4c:79:18:fa:78:43:b3:74: 42:63:26:54:84:2a:b5:75:7f:02:db:44:57:5f:89:53:6f:75: 39:09:ee:e5:8f:ed:a9:b5:69:59:d0:7c:bd:fd:8f:82:a7:8b: 13:40:8a:97:f8:31:5d:5f:af:b1:ed:73:04:b9:f9:59:bf:fa: 2e:d3:6d:49:db:22:d6:89:bf:23:a8:f2:97:fe:55:c5:f7:14: 6c:79:68:45:54:f8:80:55:a0:be:ae:ec:7a:c3:10:9e:49:30: 37:ec:ba:5d:9c:dc:73:52:83:75:27:ec:6c:bd:1d:21:53:9f: 9a:d8:6c:5f:0a:49:c5:86:04:26:e6:ae:41:d6:3a:32:e3:6a: 6c:9b:1b:58:a3:55:61:76:ec:ed:88:3e:ec:b7:90:ce:67:2b: 0d:b5:83:34:08:a4:4a:0c:77:90:4c:91:6d:4c:e2:f5:56:8e: 37:c8:0c:f9:34:64:ff:92:72:74:b3:49:ee:46:60:87:53:90: 8b:13:90:21:ef:38:24:ea:de:68:4f:75:7c:88:fe:70:3d:99: 7b:97:d2:4d:4b:42:28:d9:30:1e:56:fc:1c:6f:6c:7f:12:03: 9f:0f:39:4a:b8:09:d2:2d:33:85:f4:fc:10:59:90:a5:3a:2b: f2:da:52:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTATC2PEXZh/ZyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk M2RlM2UzZDUtYzUxNi00OGY2LTljYmUtMzE5NTNiNWU5OGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxIrnPXuBfb0cJtzH7u3yQaubw+oxgVFwej1 WY1W7iV0bG5z9uusb6PAZfzPME0qHM4rBQWUBTi2wEHu9UfHRyACrywTdR8eGNEQ T54e0vis4eSnou0ubTcb6PPn5WmmRJMh+hB1pMPADY9TtWQOjVwx7u8lFRjTSERp YUMTP4PljbvmEWu8QXqzzLDM31CBPne6JRFcydRi9miG25Lbyje8Yj76S1NO0mTj jo4wLsSHUdzuz1hNyb/jAwPvKY3uZyEp1xGEVItBYR3S91wcO7II6eMtyMOe6JS2 x7gCGf18kNOEGItvZW8sA7bao51w5xedXfQKrkrNVqWVkZlZwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJv+hwYKrz5fJTx2yj0VTYgKpi3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTFkYjFlZjUtODg3NS0z N2IwLWE4N2QtNWYzZjFhYmQxNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrES8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqNr471Kx6sMn9MeRj6eEOzdEJjJlSEKrV1fwLbRFdfiVNvdTkJ7uWP 7am1aVnQfL39j4KnixNAipf4MV1fr7HtcwS5+Vm/+i7TbUnbItaJvyOo8pf+VcX3 FGx5aEVU+IBVoL6u7HrDEJ5JMDfsul2c3HNSg3Un7Gy9HSFTn5rYbF8KScWGBCbm rkHWOjLjamybG1ijVWF27O2IPuy3kM5nKw21gzQIpEoMd5BMkW1M4vVWjjfIDPk0 ZP+ScnSzSe5GYIdTkIsTkCHvOCTq3mhPdXyI/nA9mXuX0k1LQijZMB5W/BxvbH8S A58POUq4CdItM4X0/BBZkKU6K/LaUq4= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:56 2025 by rpki-client