$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa File: 25a8ab15-e085-3562-9462-51bb91799e31.roa (raw, json) Hash identifier: BgqapAT6A2r5u52OT42AkgP5H4FRLidAx1FhYPzSesU= Subject key identifier: 1E:F3:42:5F:CB:DE:8B:0B:9B:B9:D7:8E:9B:A2:80:12:F1:23:24:D6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA8530CBBBE208CC762B9580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:30:cb:bb:e2:08:cc:76:2b:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=856c0ad8-5e64-4cb6-9e2f-bb5c5bb95acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:75:b4:e2:9b:01:c4:a3:94:19:e8:66:10: cf:9b:be:a8:c3:0b:a0:ed:f7:b3:6d:f0:8e:2e:13: 5e:03:d9:7a:58:13:ff:77:32:33:93:51:16:78:7a: c9:44:8e:09:23:1e:db:80:54:3d:6d:c5:ef:ec:0a: 63:4e:66:3b:1f:12:52:15:6f:25:94:ae:f1:ad:e5: d4:e7:25:94:cd:63:40:dc:21:15:70:ba:28:49:1d: cb:e7:b7:7e:5b:05:49:45:13:c6:d6:c8:07:3c:0a: e7:ea:0b:d5:b5:42:50:ae:a0:16:f0:5f:1b:af:28: d3:be:e5:f7:d9:7f:16:b1:a9:8d:ae:04:54:25:67: c3:04:6b:02:a9:fb:4e:63:d0:6f:a1:63:27:7e:57: da:8c:0c:46:3e:de:ec:7c:f5:92:a9:3e:11:ff:00: 06:b4:15:7b:55:bb:43:91:5b:b2:06:00:db:08:10: e4:b0:8e:b0:79:60:75:06:08:44:5a:86:21:c5:1d: d7:a6:5e:6f:21:b1:ac:f7:97:18:fb:e0:e3:1a:95: d9:1b:02:73:31:fe:a3:24:67:66:cd:e2:37:74:d0: dc:37:57:91:75:01:1a:e6:55:41:1e:1d:e1:6f:97: 62:55:c0:9b:1a:82:69:b0:87:2e:9e:ee:41:ec:68: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F3:42:5F:CB:DE:8B:0B:9B:B9:D7:8E:9B:A2:80:12:F1:23:24:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25a8ab15-e085-3562-9462-51bb91799e31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e3:83:99:16:da:b0:af:17:6a:5e:2e:17:f2:c3:97:4f:5b: 08:c0:11:82:ce:ae:02:ca:72:df:e3:bc:86:37:c9:fd:51:e4: 2c:c4:86:aa:b7:98:27:0f:74:e4:2c:b7:29:0f:bc:51:ca:15: ab:7f:75:54:a4:4b:14:da:b4:01:54:ad:e8:a7:98:11:00:b8: 04:5b:4b:4c:4a:b2:e1:56:da:65:e8:00:19:c2:c1:b6:cf:71: 96:0f:e8:25:9d:56:2b:30:6b:a0:40:e9:9c:70:32:ea:03:60: 9e:0e:5f:e3:95:92:c6:aa:be:2a:65:2f:6b:09:41:e8:f2:c0: a9:6e:9f:7b:78:52:37:e2:2c:47:aa:57:5c:2a:27:d6:1b:52: 07:79:f3:15:8c:99:ca:31:5c:56:d8:91:31:d6:ed:fb:4e:28: 88:2b:14:52:80:02:29:b9:33:45:a3:db:ac:c2:d8:df:69:74: 7b:bf:b8:df:4a:23:62:75:e0:01:67:df:19:92:f2:ba:72:8f: 6d:aa:68:8f:3f:ce:c0:6e:2a:28:a1:13:45:d7:23:30:c2:4e: 0f:c5:79:54:8c:9a:5f:64:60:07:3c:a9:30:92:38:b5:6c:6a: 5d:89:65:3c:77:94:3f:71:28:ab:8f:9a:5b:8b:35:5d:1e:ca: 04:12:0c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhTDLu+IIzHYrlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ODU2YzBhZDgtNWU2NC00Y2I2LTllMmYtYmI1YzViYjk1YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAd1tOKbAcSjlBnoZhDPm76owwug7fezbfCO LhNeA9l6WBP/dzIzk1EWeHrJRI4JIx7bgFQ9bcXv7ApjTmY7HxJSFW8llK7xreXU 5yWUzWNA3CEVcLooSR3L57d+WwVJRRPG1sgHPArn6gvVtUJQrqAW8F8bryjTvuX3 2X8WsamNrgRUJWfDBGsCqftOY9BvoWMnflfajAxGPt7sfPWSqT4R/wAGtBV7VbtD kVuyBgDbCBDksI6weWB1BghEWoYhxR3Xpl5vIbGs95cY++DjGpXZGwJzMf6jJGdm zeI3dNDcN1eRdQEa5lVBHh3hb5diVcCbGoJpsIcunu5B7GiF+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7zQl/L3osLm7nXjpuigBLxIyTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVhOGFiMTUtZTA4NS0z NTYyLTk0NjItNTFiYjkxNzk5ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXjg5kW2rCvF2peLhfyw5dPWwjAEYLOrgLKct/jvIY3yf1R5CzEhqq3 mCcPdOQstykPvFHKFat/dVSkSxTatAFUreinmBEAuARbS0xKsuFW2mXoABnCwbbP cZYP6CWdViswa6BA6ZxwMuoDYJ4OX+OVksaqviplL2sJQejywKlun3t4UjfiLEeq V1wqJ9YbUgd58xWMmcoxXFbYkTHW7ftOKIgrFFKAAim5M0Wj26zC2N9pdHu/uN9K I2J14AFn3xmS8rpyj22qaI8/zsBuKiihE0XXIzDCTg/FeVSMml9kYAc8qTCSOLVs al2JZTx3lD9xKKuPmluLNV0eygQSDMA= -----END CERTIFICATE-----Generated at Tue Jul 1 18:26:54 2025 by rpki-client