$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa File: 5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa (raw, json) Hash identifier: azbbf6sTh7xANyzJ6LYnqjy7jUc2iNqOqBx7Vwgd/2E= Subject key identifier: CA:1E:98:A2:AC:D8:B1:3B:54:9E:FD:25:8F:0C:26:CC:EC:E4:84:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C068211095F3491CC9480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:06:82:11:09:5f:34:91:cc:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=197aa113-4f00-4b64-933e-08ebd0b841ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:4f:c9:ea:d7:c1:78:91:93:25:de:c1:16: 3a:66:5a:b8:0b:bb:6c:f7:84:32:e0:eb:2f:f1:03: a4:25:3f:c3:64:df:9f:a6:a6:42:8f:ac:e4:3c:3b: bb:8d:8e:96:20:c3:95:ff:49:da:4a:68:86:95:74: cc:f5:dd:b2:d4:c2:9a:9e:50:e5:fd:a6:e6:7b:9e: 50:98:e8:9a:a5:1e:8f:cd:6f:18:30:70:ee:fa:d6: 9a:cc:19:02:a9:8b:97:16:94:13:67:04:5c:b8:55: ba:ce:77:80:f9:9b:4e:32:cf:68:4e:70:41:29:c1: 04:cc:e3:79:e0:93:a4:ad:c6:9d:20:0a:a0:64:a3: e9:26:b5:8e:8b:c4:86:d7:28:8a:5d:78:b9:2c:90: fb:59:8d:43:e6:ba:39:6b:8c:2e:b7:76:3e:f3:f0: e7:15:17:25:14:25:00:be:c1:8a:74:4a:40:c0:3a: 87:50:56:94:e5:1a:38:5b:28:6a:24:d3:37:3c:7f: 92:f5:74:ff:b4:02:99:b8:63:01:49:e0:fe:11:5b: 2a:68:11:26:95:c8:b1:25:22:ef:bb:9f:c0:f5:41: 6d:39:35:2b:16:94:96:02:2b:a8:25:e3:bc:ef:b2: 7c:1a:f5:2e:b5:ef:86:57:38:52:c7:4d:59:92:88: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:98:A2:AC:D8:B1:3B:54:9E:FD:25:8F:0C:26:CC:EC:E4:84:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d73012e-d6ab-397f-9a31-92d416e3c1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:cc:79:07:37:25:00:36:87:d4:bd:ef:95:75:0f:89:be:da: 5d:51:83:6e:61:f7:dd:65:49:62:a5:56:11:01:01:c3:af:81: 10:24:24:05:f6:6e:5b:a0:0b:60:9a:de:7a:17:55:0a:2c:a0: 20:ff:f5:4e:c7:dc:28:c8:1b:37:9c:e6:a1:23:ac:13:a5:02: 30:4d:e6:3b:12:9f:e1:ad:75:c6:aa:16:60:27:a0:e7:8b:18: 1c:00:7e:5f:3e:98:4e:28:45:fc:f0:80:4c:63:2e:ac:c2:9e: 8d:cd:ec:74:6c:96:83:ae:21:66:0c:fd:73:35:10:0c:4c:21: 57:1b:7c:68:9a:7e:2f:69:ea:1b:ad:c9:04:bb:53:0d:fd:4e: 09:e5:a9:b5:2b:bd:a5:4c:5b:81:94:24:5b:14:2d:37:90:c9: 99:7d:2d:7c:33:6c:40:c9:31:d5:a6:4f:ed:c7:43:c9:cd:85: 0f:71:8b:03:b5:16:81:ae:eb:87:bd:49:bd:08:ba:73:25:60: 8a:fe:8f:4b:50:c9:3d:ad:57:9b:09:74:91:b4:b1:46:a4:94: 6d:09:82:95:17:32:97:ca:cf:90:b6:43:e4:71:1e:ef:d8:c2: b6:c1:b4:14:08:a7:04:5e:21:e9:f4:4d:13:2a:0c:0c:6a:c8: 80:d0:1b:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAaCEQlfNJHMlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MTk3YWExMTMtNGYwMC00YjY0LTkzM2UtMDhlYmQwYjg0MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigpPyerXwXiRkyXewRY6Zlq4C7ts94Qy4Osv 8QOkJT/DZN+fpqZCj6zkPDu7jY6WIMOV/0naSmiGlXTM9d2y1MKanlDl/abme55Q mOiapR6PzW8YMHDu+taazBkCqYuXFpQTZwRcuFW6zneA+ZtOMs9oTnBBKcEEzON5 4JOkrcadIAqgZKPpJrWOi8SG1yiKXXi5LJD7WY1D5ro5a4wut3Y+8/DnFRclFCUA vsGKdEpAwDqHUFaU5Ro4WyhqJNM3PH+S9XT/tAKZuGMBSeD+EVsqaBEmlcixJSLv u5/A9UFtOTUrFpSWAiuoJeO877J8GvUute+GVzhSx01ZkohyhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoemKKs2LE7VJ79JY8MJszs5IRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWQ3MzAxMmUtZDZhYi0z OTdmLTlhMzEtOTJkNDE2ZTNjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXMeQc3JQA2h9S975V1D4m+2l1Rg25h991lSWKlVhEBAcOvgRAkJAX2 blugC2Ca3noXVQosoCD/9U7H3CjIGzec5qEjrBOlAjBN5jsSn+GtdcaqFmAnoOeL GBwAfl8+mE4oRfzwgExjLqzCno3N7HRsloOuIWYM/XM1EAxMIVcbfGiafi9p6hut yQS7Uw39TgnlqbUrvaVMW4GUJFsULTeQyZl9LXwzbEDJMdWmT+3HQ8nNhQ9xiwO1 FoGu64e9Sb0IunMlYIr+j0tQyT2tV5sJdJG0sUaklG0JgpUXMpfKz5C2Q+RxHu/Y wrbBtBQIpwReIen0TRMqDAxqyIDQGy8= -----END CERTIFICATE-----Generated at Sat May 10 19:33:07 2025 by rpki-client