$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00de3cfe-fd8f-31ab-8dc8-c5173251b9cd.roa File: 00de3cfe-fd8f-31ab-8dc8-c5173251b9cd.roa (raw, json) Hash identifier: Dyv4Zsu+4B8Gr+q0TrV9zDSrRMUZigAQIsqGWzgBkIw= Subject key identifier: C7:98:D6:46:26:61:8E:70:0A:FC:43:9F:53:55:48:94:04:18:DD:03 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BF8DED6517BDE35C40570 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00de3cfe-fd8f-31ab-8dc8-c5173251b9cd.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f8:de:d6:51:7b:de:35:c4:05:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=5ad8fbf9-3261-4e6a-886d-f866a13163c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2e:4a:e3:14:83:9c:26:32:cf:6a:c7:71:07: 6b:4b:32:62:83:bd:b2:15:d6:b2:07:1d:b5:a9:db: 3c:68:3f:d3:5a:cb:04:8c:7e:5c:c9:be:8d:fb:86: 4c:13:8e:52:71:19:d1:88:de:22:ba:de:d0:3a:5b: c2:49:42:54:ee:6d:8e:8a:eb:bf:31:6c:5d:af:04: da:0f:09:c0:5f:04:16:d7:07:81:4e:b6:5a:c4:00: d2:84:66:5a:b2:48:03:4c:7d:dd:42:4e:0e:de:e5: 34:be:0b:6b:1f:54:2a:64:07:9c:21:08:74:6b:91: 4d:aa:af:fb:c7:d3:87:91:08:a9:98:0e:e1:ab:2d: 90:4b:4b:72:c5:49:bb:80:09:99:59:74:18:f0:8c: 0f:4f:da:ac:5b:30:f1:5e:76:3c:5e:f9:0c:4a:ba: f6:67:e2:62:79:2c:0d:f0:97:4b:64:d5:4c:5e:b1: 16:f5:b1:5f:14:28:5b:dc:47:11:22:50:bb:26:57: 9f:94:3a:c2:6d:1e:75:06:31:82:4e:4b:0c:f2:83: 1d:3f:1f:e5:e1:9f:77:76:47:21:79:b3:df:1d:5e: 30:b7:3d:c9:db:f0:d9:56:37:db:74:a9:60:13:b7: b1:74:9a:0c:7e:5e:15:81:fb:92:bc:62:b4:05:b8: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:98:D6:46:26:61:8E:70:0A:FC:43:9F:53:55:48:94:04:18:DD:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00de3cfe-fd8f-31ab-8dc8-c5173251b9cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:5a:2f:6e:03:7b:ac:88:a7:c9:6e:4b:b9:cc:9d:39:0d:90: b9:76:b0:e6:04:c8:c2:84:52:d1:50:12:44:5f:b1:3d:0d:f7: 69:d7:8b:07:41:2d:00:89:da:43:b8:27:71:d4:ed:12:c6:87: 0d:be:22:65:33:41:a9:0c:4c:43:b9:4a:bd:4d:e3:d7:e6:79: fd:56:70:6e:85:48:58:f1:a8:c9:2b:59:61:c4:b1:54:49:4d: 51:d7:bb:cf:21:64:95:fe:3b:03:a5:8a:0c:9c:2c:d8:44:0d: 44:cb:c9:95:ed:97:8a:e5:86:60:57:f4:5c:4b:44:92:88:62: 32:68:d6:6a:ea:e3:fe:30:65:c0:70:87:de:10:41:29:7a:72: 19:d1:5a:63:a6:b0:88:8d:20:96:c0:05:af:7b:7c:24:a0:13: 8b:79:3b:a4:79:c4:46:3c:01:ee:85:48:47:2b:b6:04:45:8f: 73:1a:1d:73:eb:43:27:53:b0:75:ac:10:4a:67:23:0a:a9:f1: 46:0f:8d:c9:f4:03:78:e5:85:03:e2:20:ff:fa:34:21:0c:3f: 03:5a:5c:ee:6f:6e:13:0e:24:be:90:50:23:92:c8:d6:b4:26: 68:f1:ff:f2:71:d2:4d:9d:89:0b:22:f5:9c:fc:bd:89:6f:a8: b3:48:47:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/je1lF73jXEBXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NWFkOGZiZjktMzI2MS00ZTZhLTg4NmQtZjg2NmExMzE2M2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS5K4xSDnCYyz2rHcQdrSzJig72yFdayBx21 qds8aD/TWssEjH5cyb6N+4ZME45ScRnRiN4iut7QOlvCSUJU7m2Oiuu/MWxdrwTa DwnAXwQW1weBTrZaxADShGZaskgDTH3dQk4O3uU0vgtrH1QqZAecIQh0a5FNqq/7 x9OHkQipmA7hqy2QS0tyxUm7gAmZWXQY8IwPT9qsWzDxXnY8XvkMSrr2Z+JieSwN 8JdLZNVMXrEW9bFfFChb3EcRIlC7JleflDrCbR51BjGCTksM8oMdPx/l4Z93dkch ebPfHV4wtz3J2/DZVjfbdKlgE7exdJoMfl4VgfuSvGK0BbigKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeY1kYmYY5wCvxDn1NVSJQEGN0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDBkZTNjZmUtZmQ4Zi0z MWFiLThkYzgtYzUxNzMyNTFiOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZaL24De6yIp8luS7nMnTkNkLl2sOYEyMKEUtFQEkRfsT0N92nXiwdB LQCJ2kO4J3HU7RLGhw2+ImUzQakMTEO5Sr1N49fmef1WcG6FSFjxqMkrWWHEsVRJ TVHXu88hZJX+OwOligycLNhEDUTLyZXtl4rlhmBX9FxLRJKIYjJo1mrq4/4wZcBw h94QQSl6chnRWmOmsIiNIJbABa97fCSgE4t5O6R5xEY8Ae6FSEcrtgRFj3MaHXPr QydTsHWsEEpnIwqp8UYPjcn0A3jlhQPiIP/6NCEMPwNaXO5vbhMOJL6QUCOSyNa0 Jmjx//Jx0k2diQsi9Zz8vYlvqLNIR7c= -----END CERTIFICATE-----Generated at Sat Apr 5 04:37:50 2025 by rpki-client