$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa File: bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa (raw, json) Hash identifier: +B4QllMKWXBXqX26NxNHIZA5cF2YSlk93mE4QjCDJ+I= Subject key identifier: A4:1E:1E:2D:06:B2:9D:3C:4B:BC:76:95:02:76:26:9C:90:3F:96:D4 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584953C41B36FC7F20E791A74680 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 23470 IP address blocks: 172.96.172.0/24 maxlen: 24 172.96.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1b:36:fc:7f:20:e7:91:a7:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=af3a049c-e304-4496-9865-d826cbf2a5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:ce:c3:21:ec:fe:95:bb:a5:c4:0d:7b:51: a2:dc:53:43:eb:6c:1e:49:fd:b4:18:78:48:0a:fd: 88:83:0d:be:f1:d7:69:0c:03:59:2a:ee:d0:14:15: b7:c2:eb:26:cd:a4:ff:01:8a:5d:72:43:54:54:72: 77:06:09:19:58:57:41:72:b8:5a:97:64:e3:ae:e1: 12:14:35:33:f7:52:9c:1d:13:ff:f3:8a:bb:7e:e7: bf:11:ef:03:59:1a:17:e1:86:48:d7:bc:73:e6:da: f7:16:66:f1:07:9e:17:35:4e:6f:5c:f7:ba:cc:ad: 2c:56:a9:b9:2d:81:6b:42:32:b7:f4:b8:ff:8f:40: 71:1f:8b:db:c4:25:e9:3d:e7:86:48:05:47:d6:5e: 39:1a:1c:da:4c:f4:4f:ee:91:10:45:b7:5f:58:a2: 38:e4:ec:64:10:20:34:f9:20:b0:56:bf:ae:ed:d0: a1:b9:10:da:2b:8c:6b:32:cd:a7:31:a7:51:60:af: 8b:56:63:1c:61:a5:7a:70:71:04:e6:a6:8d:bb:f1: 45:a7:c1:be:5c:2b:eb:ed:fd:ce:4c:a7:96:0c:b7: 71:9e:05:51:03:3d:32:d8:76:cc:2f:5e:57:91:29: f3:22:82:af:99:ad:46:53:0d:2b:11:be:3a:3d:4a: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1E:1E:2D:06:B2:9D:3C:4B:BC:76:95:02:76:26:9C:90:3F:96:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 172.96.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:43:f2:05:8f:f8:dd:e3:7b:99:5c:37:fe:03:6f:e5:eb:ed: 18:79:54:0b:02:ad:45:1e:4c:ca:97:29:a3:9f:97:bb:ee:4c: 44:61:4c:e3:33:ad:ca:9d:60:2c:3d:e4:fe:c6:cd:20:78:a9: 66:07:b6:bd:1c:27:b4:14:91:7f:0e:d4:99:ac:ae:72:56:51: 7d:2a:b9:dd:54:36:2f:f3:fe:1c:29:29:78:99:3d:c8:6a:e6: b4:93:67:f5:63:0a:7a:cc:ac:a7:e6:ad:9e:5a:ec:05:61:86: 9c:5a:ed:37:87:b2:00:22:b1:22:c3:9d:05:a3:25:c7:f8:04: 54:1a:84:86:c4:d3:eb:b5:a5:4a:dd:c1:30:d0:36:41:0a:5c: 75:ab:57:e8:86:54:3a:75:95:4e:c1:10:b4:d8:24:ba:06:ef: 1a:37:7c:79:ff:e2:21:e0:f7:12:2f:b2:13:ee:87:e4:2d:9c: 9c:24:e7:e7:b6:2d:a9:ed:e3:39:37:2a:66:03:57:13:71:f8: 28:a6:3f:99:0d:c2:db:f9:53:3f:d3:b1:dd:3e:72:9f:25:2f: 2c:0d:19:53:d9:ad:08:29:ee:9f:5e:ed:60:bc:86:44:4e:57: 43:a9:79:25:c1:60:c3:43:3b:ef:cc:e4:d7:44:c0:51:2f:31: 40:87:39:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBs2/H8g55GnRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWYzYTA0OWMtZTMwNC00NDk2LTk4NjUtZDgyNmNiZjJhNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gfOwyHs/pW7pcQNe1Gi3FND62weSf20GHhI Cv2Igw2+8ddpDANZKu7QFBW3wusmzaT/AYpdckNUVHJ3BgkZWFdBcrhal2TjruES FDUz91KcHRP/84q7fue/Ee8DWRoX4YZI17xz5tr3FmbxB54XNU5vXPe6zK0sVqm5 LYFrQjK39Lj/j0BxH4vbxCXpPeeGSAVH1l45GhzaTPRP7pEQRbdfWKI45OxkECA0 +SCwVr+u7dChuRDaK4xrMs2nMadRYK+LVmMcYaV6cHEE5qaNu/FFp8G+XCvr7f3O TKeWDLdxngVRAz0y2HbML15XkSnzIoKvma1GUw0rEb46PUo+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQeHi0Gsp08S7x2lQJ2JpyQP5bUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYmY3ZTZmMGQtYjY4OS0z ZGM5LTlmMzYtMWZjNjljYmYzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVD8gWP+N3je5lcN/4Db+Xr7Rh5VAsCrUUeTMqXKaOfl7vuTERhTOMz rcqdYCw95P7GzSB4qWYHtr0cJ7QUkX8O1JmsrnJWUX0qud1UNi/z/hwpKXiZPchq 5rSTZ/VjCnrMrKfmrZ5a7AVhhpxa7TeHsgAisSLDnQWjJcf4BFQahIbE0+u1pUrd wTDQNkEKXHWrV+iGVDp1lU7BELTYJLoG7xo3fHn/4iHg9xIvshPuh+QtnJwk5+e2 Lant4zk3KmYDVxNx+CimP5kNwtv5Uz/Tsd0+cp8lLywNGVPZrQgp7p9e7WC8hkRO V0OpeSXBYMNDO+/M5NdEwFEvMUCHOWU= -----END CERTIFICATE-----Generated at Sat Apr 12 04:55:02 2025 by rpki-client