$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9946000-cb57-39d8-88ce-a727304500bf.roa File: f9946000-cb57-39d8-88ce-a727304500bf.roa (raw, json) Hash identifier: YqVHtWfeT822Le3dVy5EKNM0DkIAvpCpWc3GCjh4ydk= Subject key identifier: 25:02:A1:F7:CD:24:04:CF:A2:96:24:34:55:19:1E:F5:A8:14:5D:0B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550E79D2A5D171F902EB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9946000-cb57-39d8-88ce-a727304500bf.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.68.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0e:79:d2:a5:d1:71:f9:02:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=5bba1954-f9c6-43b0-a683-702d7aeff136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:58:15:df:37:17:82:97:cc:f8:42:a4:6c: 9c:5f:b7:a6:2a:ac:c4:8d:e2:16:3a:2f:dd:57:ed: fd:9a:36:1d:4a:45:83:50:b0:31:f4:6f:d9:f4:a3: 5d:04:44:c3:82:d1:43:38:5c:11:df:67:b8:a0:d3: 06:9c:08:b1:82:09:23:59:d0:79:78:b7:90:28:fe: 29:1c:e1:12:c5:d2:ee:6c:c2:16:5b:94:b5:3b:86: 7d:a3:bd:c6:d6:c8:16:4f:3f:ea:83:01:8e:b9:df: 19:b3:20:9a:ed:e3:be:7d:18:52:71:e6:44:01:25: 8f:7b:ba:54:33:f7:bd:d7:20:0b:81:9a:aa:f2:b3: 45:4d:e2:d3:42:69:b1:ed:43:78:16:37:0f:9f:b9: 2e:65:91:c9:48:b6:a1:79:03:5a:a3:c5:1c:2b:9c: e5:93:49:da:52:b1:3c:81:dd:ad:ac:09:dd:cd:26: e3:30:01:f0:05:c5:7b:25:1b:13:63:80:a3:7d:4f: 13:a1:7c:30:07:66:a1:be:e5:90:01:17:57:8e:c5: 94:7a:57:0a:b4:ee:cb:e1:6e:3a:98:2d:07:48:3e: 89:eb:de:0a:62:57:81:97:0f:31:69:5a:a2:41:33: eb:50:81:af:29:a0:3c:fa:69:5b:68:1e:4b:54:d7: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:A1:F7:CD:24:04:CF:A2:96:24:34:55:19:1E:F5:A8:14:5D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f9946000-cb57-39d8-88ce-a727304500bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3b:7a:87:13:b6:0f:22:e7:ef:87:24:ab:06:81:64:6a:2a: 0f:3e:68:d8:57:c0:3a:89:e0:b1:48:4e:b2:56:9d:8f:39:63: 4a:93:05:32:50:56:3d:1e:58:11:71:18:62:87:e7:cd:6e:d0: ca:1e:c6:98:de:47:cc:29:54:45:08:80:5a:76:c8:b1:be:88: 9c:18:4d:fc:76:4a:4c:42:13:d0:f9:72:d0:89:fc:33:d4:cb: 3f:cb:93:7e:60:5f:84:07:cf:e2:e5:fe:d1:05:91:56:ff:79: 2d:09:db:a3:0f:f5:63:67:6c:ed:4b:a4:5e:13:09:4c:a9:f9: 08:9e:66:2d:b8:1f:12:93:35:b1:8d:13:d5:cd:dd:ad:dc:dc: b4:8a:10:ce:13:da:61:21:e4:ea:8f:47:ed:34:eb:2c:b3:af: 60:ea:72:2c:3f:81:c5:9e:00:74:2d:66:77:b6:64:19:f6:47: 95:8c:8b:9a:f1:95:d5:39:21:be:e4:bd:97:62:79:84:12:8f: de:be:fd:6a:74:1e:5d:8e:7b:c2:2a:83:f0:03:ac:85:73:5d: 6b:83:5f:f6:d4:4c:50:36:fd:d1:ce:a5:ab:79:9c:76:43:67: 8f:17:db:e2:79:e8:a7:67:03:9e:4c:d5:c9:cb:f5:99:c8:c5: 14:11:eb:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQ550qXRcfkC64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk NWJiYTE5NTQtZjljNi00M2IwLWE2ODMtNzAyZDdhZWZmMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFBYFd83F4KXzPhCpGycX7emKqzEjeIWOi/d V+39mjYdSkWDULAx9G/Z9KNdBETDgtFDOFwR32e4oNMGnAixggkjWdB5eLeQKP4p HOESxdLubMIWW5S1O4Z9o73G1sgWTz/qgwGOud8ZsyCa7eO+fRhSceZEASWPe7pU M/e91yALgZqq8rNFTeLTQmmx7UN4FjcPn7kuZZHJSLaheQNao8UcK5zlk0naUrE8 gd2trAndzSbjMAHwBcV7JRsTY4CjfU8ToXwwB2ahvuWQARdXjsWUelcKtO7L4W46 mC0HSD6J694KYleBlw8xaVqiQTPrUIGvKaA8+mlbaB5LVNdVGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUCoffNJATPopYkNFUZHvWoFF0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjk5NDYwMDAtY2I1Ny0z OWQ4LTg4Y2UtYTcyNzMwNDUwMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ87eocTtg8i5++HJKsGgWRqKg8+aNhXwDqJ4LFITrJWnY85Y0qTBTJQ Vj0eWBFxGGKH581u0MoexpjeR8wpVEUIgFp2yLG+iJwYTfx2SkxCE9D5ctCJ/DPU yz/Lk35gX4QHz+Ll/tEFkVb/eS0J26MP9WNnbO1LpF4TCUyp+QieZi24HxKTNbGN E9XN3a3c3LSKEM4T2mEh5OqPR+006yyzr2Dqciw/gcWeAHQtZne2ZBn2R5WMi5rx ldU5Ib7kvZdieYQSj96+/Wp0Hl2Oe8Iqg/ADrIVzXWuDX/bUTFA2/dHOpat5nHZD Z48X2+J56KdnA55M1cnL9ZnIxRQR6wU= -----END CERTIFICATE-----Generated at Tue Jul 1 15:29:52 2025 by rpki-client