$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88ea44da-7bc3-3be9-b706-47800e8d3e09.roa File: 88ea44da-7bc3-3be9-b706-47800e8d3e09.roa (raw, json) Hash identifier: RBs3kVDugI0RfGkGQOoMlHXNSB8/M+7/R3r1nlXucds= Subject key identifier: 67:2E:D3:FC:28:D4:2B:41:AD:0A:4E:B9:F3:EF:55:E3:4C:2D:16:A8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EA85451031EE5ABE0875DB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88ea44da-7bc3-3be9-b706-47800e8d3e09.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.68.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:45:10:31:ee:5a:be:08:75:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=ed523011-e5ee-4c92-961b-d21e7138adfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:49:a3:4b:3a:1e:0b:fb:a2:72:4c:dd:a8: ce:84:b5:a7:e1:a0:0e:2d:cf:ea:ae:6c:fb:84:3c: 4b:68:a0:7c:55:3e:98:e2:f2:ea:f8:7d:b0:30:f4: d4:b8:77:c7:8a:eb:c0:ce:48:81:cd:39:6f:ef:60: ce:5c:61:cb:cb:1f:af:73:38:e7:fd:91:be:6d:a6: 04:dd:92:96:71:38:8b:fd:67:3b:a1:ce:3f:2a:48: 1d:21:ff:f5:5c:38:1b:98:69:db:a9:e9:e9:9c:3c: bc:e3:7f:73:0d:f7:34:59:b1:53:64:7d:59:3b:28: c7:07:8a:65:62:c9:31:6d:11:83:53:8a:b5:6a:38: 01:f2:02:9c:aa:82:1e:3d:8c:95:4c:3e:99:9e:ea: 15:9b:2b:41:49:bd:a8:79:eb:c7:fc:82:ae:a3:a4: 49:fe:f3:82:f3:cd:e4:79:30:67:24:50:f9:cb:36: 0c:78:02:88:d5:dc:d3:a7:3c:cd:da:e5:7d:92:5b: 55:40:d2:a0:da:f4:d5:0f:1b:17:f8:57:23:24:ba: a7:fe:d3:aa:10:22:cc:98:7b:8b:fe:e1:1c:75:c0: 84:49:0d:99:21:1d:e3:7a:c6:5c:45:01:1e:44:1c: 47:d0:03:04:f7:fd:1f:a7:c6:76:63:07:e1:c5:37: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:D3:FC:28:D4:2B:41:AD:0A:4E:B9:F3:EF:55:E3:4C:2D:16:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88ea44da-7bc3-3be9-b706-47800e8d3e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ac:a5:ad:6c:64:6f:51:0e:8a:8d:18:19:9b:31:ff:74:bf: f2:d8:1b:f7:af:8d:65:00:fe:1c:43:0d:5d:6f:e3:39:25:ab: 64:94:ba:80:d9:24:c1:f2:d4:cd:e1:8a:e7:43:38:f0:21:32: 2c:a4:bf:a9:70:aa:d6:21:f1:e1:40:5d:08:37:ee:a6:ea:af: 71:93:81:41:94:a9:f7:d4:de:a8:92:be:1f:a8:34:18:9e:4e: d2:2e:34:89:0b:fa:eb:0a:23:01:80:b8:57:e6:0c:71:54:cb: 81:ba:6a:77:2a:52:33:b5:d4:d8:44:26:b7:f1:1d:3b:f7:9b: 79:b7:dd:d2:78:9c:dc:43:2e:b1:c7:52:7a:a8:1a:86:12:7c: 5c:7b:ad:61:60:66:ae:62:b1:a3:a1:2d:b2:b6:4f:33:33:49: ad:da:e1:bf:00:9c:47:54:df:f2:d1:d6:78:a2:62:47:2f:4d: 7f:25:36:3b:12:57:95:43:ee:49:0d:68:ff:19:bb:66:ae:49: d3:1b:7c:9f:00:1f:20:98:a1:ea:56:4f:09:dd:fc:16:59:ab: 4f:c0:1d:5d:4f:d7:2e:fc:49:32:ef:53:1a:6a:fb:43:73:de: b2:e9:f2:5c:65:1c:5e:7d:2c:5b:72:27:39:4b:fc:d4:76:a0: ee:ff:8b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUUQMe5avgh124AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZWQ1MjMwMTEtZTVlZS00YzkyLTk2MWItZDIxZTcxMzhhZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0JJo0s6Hgv7onJM3ajOhLWn4aAOLc/qrmz7 hDxLaKB8VT6Y4vLq+H2wMPTUuHfHiuvAzkiBzTlv72DOXGHLyx+vczjn/ZG+baYE 3ZKWcTiL/Wc7oc4/KkgdIf/1XDgbmGnbqenpnDy8439zDfc0WbFTZH1ZOyjHB4pl YskxbRGDU4q1ajgB8gKcqoIePYyVTD6ZnuoVmytBSb2oeevH/IKuo6RJ/vOC883k eTBnJFD5yzYMeAKI1dzTpzzN2uV9kltVQNKg2vTVDxsX+FcjJLqn/tOqECLMmHuL /uEcdcCESQ2ZIR3jesZcRQEeRBxH0AME9/0fp8Z2YwfhxTcweQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcu0/wo1CtBrQpOufPvVeNMLRaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODhlYTQ0ZGEtN2JjMy0z YmU5LWI3MDYtNDc4MDBlOGQzZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrETkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOspa1sZG9RDoqNGBmbMf90v/LYG/evjWUA/hxDDV1v4zklq2SUuoDZ JMHy1M3hiudDOPAhMiykv6lwqtYh8eFAXQg37qbqr3GTgUGUqffU3qiSvh+oNBie TtIuNIkL+usKIwGAuFfmDHFUy4G6ancqUjO11NhEJrfxHTv3m3m33dJ4nNxDLrHH UnqoGoYSfFx7rWFgZq5isaOhLbK2TzMzSa3a4b8AnEdU3/LR1niiYkcvTX8lNjsS V5VD7kkNaP8Zu2auSdMbfJ8AHyCYoepWTwnd/BZZq0/AHV1P1y78STLvUxpq+0Nz 3rLp8lxlHF59LFtyJzlL/NR2oO7/i1Q= -----END CERTIFICATE-----Generated at Tue Jul 1 03:49:05 2025 by rpki-client