$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa File: 9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa (raw, json) Hash identifier: fkriG8Tm+n8dTyKS4al33l2cIEg6iAHn8jKcSYuXuR8= Subject key identifier: 04:5E:9D:83:11:EA:B6:E7:B1:E9:68:36:B6:B3:38:FD:D3:A9:D4:91 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA8D6DFB7E23A7A18B5EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.68.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:8d:6d:fb:7e:23:a7:a1:8b:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=7d39c153-6e85-432c-9d3a-fce394479ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:f7:1c:14:1b:16:b0:60:63:32:0a:84:09: 95:32:5c:d9:94:c2:1d:92:26:dc:b9:34:22:92:7a: 09:47:fb:36:30:4f:4b:6e:1a:2a:9d:ab:47:fb:4b: 67:13:90:6b:d4:b8:c0:aa:0a:1a:19:71:fb:53:31: 26:99:d6:2d:a7:72:93:9a:4c:33:72:39:9b:ad:72: 07:29:fb:5c:c1:04:93:cf:c9:e5:2f:11:cf:a9:e7: 97:b6:b4:61:25:25:49:af:f2:a3:fd:82:6b:23:7b: cc:81:18:bd:e9:a0:f6:05:37:67:76:80:d2:30:89: 09:41:2a:36:24:f3:ca:5c:10:55:b8:95:4e:ea:20: 84:ce:1a:cd:cf:d3:e4:fa:51:5d:8a:d8:14:cc:1e: e9:ae:2a:08:bd:13:0d:2f:28:e8:32:d8:38:c0:2d: 50:9a:25:de:2c:bd:f3:ba:6a:87:74:59:7b:c7:0b: 78:7c:a6:74:18:a4:70:67:be:bb:2a:71:07:f6:bf: 4f:d3:7b:cd:8e:9c:dd:ee:73:77:ea:76:bc:56:22: 3a:79:3f:8c:1f:5d:e5:2d:67:11:33:bc:04:a3:0b: 21:56:9f:25:75:b0:0a:a1:0e:f3:ca:6e:93:a6:3a: f1:1a:8b:d1:ea:ab:45:bc:f1:0d:bc:84:b4:63:34: 2d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5E:9D:83:11:EA:B6:E7:B1:E9:68:36:B6:B3:38:FD:D3:A9:D4:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c1fbff9-85a2-3eee-9d47-5618fa42445f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2c:36:3a:a4:13:5b:02:94:23:4e:58:de:65:4f:4e:3f:5e: c4:1f:2f:df:31:65:58:f9:5c:8e:95:1d:ff:f3:ac:92:61:de: 8f:48:80:14:ee:23:a2:ed:71:80:a6:b8:45:9a:d5:0b:a3:73: d7:da:a8:d2:17:64:fe:db:ff:53:91:25:ec:7f:af:3d:ff:82: f7:d8:29:61:f6:3b:cc:63:c7:42:39:c0:16:d6:db:d9:1b:e5: c9:d2:9a:a6:43:ef:45:cf:89:0f:6c:b8:9a:d5:85:74:ec:82: 1c:9f:f2:c8:93:91:a9:5a:fb:ff:b8:fe:27:8e:ab:30:fd:7f: 64:71:32:ca:66:74:6c:98:96:3a:32:7b:72:61:3d:ca:3f:77: e5:e5:e8:41:e3:b4:cd:b9:c6:95:3b:6a:25:bd:4f:db:4b:ff: 5d:f3:02:7f:42:4c:e0:26:9b:65:49:63:1c:57:a2:88:4a:04: ee:60:61:81:34:72:b9:91:85:78:cc:4b:98:f8:da:12:df:2a: 96:f6:b5:53:ff:21:fc:ac:1f:e4:be:1f:7b:73:81:22:45:93: 48:59:cd:21:f2:bd:fe:91:4d:13:35:80:e2:b6:91:2d:47:68: 69:c5:1e:6e:34:35:16:5e:8e:d1:91:8b:22:af:3a:94:0b:1f: a2:fb:00:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuo1t+34jp6GLXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk N2QzOWMxNTMtNmU4NS00MzJjLTlkM2EtZmNlMzk0NDc5ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNH3HBQbFrBgYzIKhAmVMlzZlMIdkibcuTQi knoJR/s2ME9LbhoqnatH+0tnE5Br1LjAqgoaGXH7UzEmmdYtp3KTmkwzcjmbrXIH KftcwQSTz8nlLxHPqeeXtrRhJSVJr/Kj/YJrI3vMgRi96aD2BTdndoDSMIkJQSo2 JPPKXBBVuJVO6iCEzhrNz9Pk+lFditgUzB7prioIvRMNLyjoMtg4wC1QmiXeLL3z umqHdFl7xwt4fKZ0GKRwZ767KnEH9r9P03vNjpzd7nN36na8ViI6eT+MH13lLWcR M7wEowshVp8ldbAKoQ7zym6TpjrxGovR6qtFvPENvIS0YzQtwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARenYMR6rbnseloNrazOP3TqdSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWMxZmJmZjktODVhMi0z ZWVlLTlkNDctNTYxOGZhNDI0NDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwsNjqkE1sClCNOWN5lT04/XsQfL98xZVj5XI6VHf/zrJJh3o9IgBTu I6LtcYCmuEWa1Qujc9faqNIXZP7b/1ORJex/rz3/gvfYKWH2O8xjx0I5wBbW29kb 5cnSmqZD70XPiQ9suJrVhXTsghyf8siTkala+/+4/ieOqzD9f2RxMspmdGyYljoy e3JhPco/d+Xl6EHjtM25xpU7aiW9T9tL/13zAn9CTOAmm2VJYxxXoohKBO5gYYE0 crmRhXjMS5j42hLfKpb2tVP/IfysH+S+H3tzgSJFk0hZzSHyvf6RTRM1gOK2kS1H aGnFHm40NRZejtGRiyKvOpQLH6L7ADQ= -----END CERTIFICATE-----Generated at Mon Jun 30 18:12:13 2025 by rpki-client