$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05e25e41-b63c-30d6-abf0-18e4bbcfe06d.roa File: 05e25e41-b63c-30d6-abf0-18e4bbcfe06d.roa (raw, json) Hash identifier: /o2kNOH4XELKigQBoXsTQXTScAELaql0Tmnb81ROKc8= Subject key identifier: BC:85:55:89:2E:5C:76:2E:D4:EE:D0:43:45:D8:16:11:6F:DC:12:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328583F3C6AC8290708BA9581164800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05e25e41-b63c-30d6-abf0-18e4bbcfe06d.roa Signing time: Tue 13 Sep 2022 12:00:00 +0000 ROA not before: Tue 13 Sep 2022 12:00:00 +0000 ROA not after: Mon 18 Oct 2027 04:00:00 +0000 asID: 13335 IP address blocks: 172.70.44.0/24 maxlen: 24 172.70.45.0/24 maxlen: 24 172.70.46.0/24 maxlen: 24 172.70.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3f:3c:6a:c8:29:07:08:ba:95:81:16:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 13 12:00:00 2022 GMT Not After : Oct 18 04:00:00 2027 GMT Subject: CN=09cd4267-965f-42da-a73f-f271e98ed6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6c:fc:cf:47:44:40:d0:c0:70:9a:34:6f:1f: 79:72:b7:0c:57:94:e8:ba:57:b2:41:70:d5:67:1c: 01:c7:ce:3d:52:84:9d:63:48:a5:9a:68:ff:fd:ed: 26:35:9e:be:de:db:9d:07:b9:10:cd:cf:cc:ba:dc: 43:a0:b1:5f:bc:2c:3d:8e:b2:71:98:9d:94:fd:7d: d3:35:03:64:7c:d3:ad:3a:92:3e:d1:64:03:25:b5: 4f:95:96:b2:cf:c5:2c:ad:1b:c6:2f:c0:d2:17:c5: 15:30:dd:87:a0:0f:b4:97:57:76:d0:be:fc:b1:bf: 6d:8a:01:a6:57:d7:39:e6:5a:bb:71:1f:46:87:fe: 6a:f1:42:54:b7:fd:ea:a2:32:02:80:68:15:46:31: f0:8d:2f:cf:7d:e2:ca:3a:04:1e:b0:d6:ac:0a:8e: 8d:a8:8f:af:c0:05:83:b5:37:ec:e5:ba:35:6d:cc: b3:ad:6f:9f:61:1d:06:52:8e:68:97:2f:63:4e:c2: 1c:1b:27:4b:9b:b1:35:e6:d1:43:93:99:12:d3:71: d9:54:0a:fb:96:d9:65:57:a8:c0:ef:62:47:c8:b7: 8c:09:32:e4:6a:6e:69:87:86:98:bc:f8:25:6e:00: 21:88:7a:c0:82:48:47:39:1c:79:0a:5a:e6:92:9b: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:85:55:89:2E:5C:76:2E:D4:EE:D0:43:45:D8:16:11:6F:DC:12:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05e25e41-b63c-30d6-abf0-18e4bbcfe06d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:34:da:70:ae:ab:1b:b3:1e:a9:7f:74:53:15:46:7d:fb:84: d5:da:45:12:ee:83:e7:ae:95:f9:a3:16:1d:4f:50:7e:a9:88: 6b:ac:76:58:55:22:6a:85:53:82:9c:25:e4:ca:6e:94:97:23: 71:78:ee:af:72:fb:70:82:79:57:26:36:8a:03:08:be:22:4d: 9e:85:75:dd:62:29:eb:e1:81:59:6a:a9:9f:ab:a1:60:06:bd: f7:a8:15:18:46:da:ab:69:11:1f:75:7a:8c:d3:d5:5b:e1:bd: ae:bd:a7:3c:6b:11:06:83:a5:1b:4b:a8:54:2f:57:3c:79:64: 40:c4:ba:43:19:c2:0d:ca:65:0a:1a:1a:10:3e:58:18:f4:6d: 0e:99:33:f8:5b:86:6f:dd:56:46:9b:04:37:7d:80:53:5e:00: 05:b3:85:5f:31:90:e4:ba:c0:8b:c6:c9:e2:af:b2:ab:ca:66: 6e:44:88:5a:29:1c:4b:0c:97:cd:0f:6d:03:76:20:cc:0c:63: dd:df:dc:6f:fc:64:24:d5:fa:66:5b:ae:68:3e:f2:f0:3f:5e: 65:a3:38:6f:ea:bb:a9:61:56:fc:f5:0f:a8:07:28:65:77:20: 8d:1b:d4:12:e1:16:f5:2b:a3:c8:9f:d4:57:ad:65:f8:17:5a: da:61:cc:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD88asgpBwi6lYEWSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIyMDkxMzEyMDAwMFoXDTI3MTAxODA0MDAwMFowLzEtMCsGA1UEAxMk MDljZDQyNjctOTY1Zi00MmRhLWE3M2YtZjI3MWU5OGVkNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2z8z0dEQNDAcJo0bx95crcMV5TouleyQXDV ZxwBx849UoSdY0ilmmj//e0mNZ6+3tudB7kQzc/MutxDoLFfvCw9jrJxmJ2U/X3T NQNkfNOtOpI+0WQDJbVPlZayz8UsrRvGL8DSF8UVMN2HoA+0l1d20L78sb9tigGm V9c55lq7cR9Gh/5q8UJUt/3qojICgGgVRjHwjS/PfeLKOgQesNasCo6NqI+vwAWD tTfs5bo1bcyzrW+fYR0GUo5oly9jTsIcGydLm7E15tFDk5kS03HZVAr7ltllV6jA 72JHyLeMCTLkam5ph4aYvPglbgAhiHrAgkhHORx5ClrmkptdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyFVYkuXHYu1O7QQ0XYFhFv3BIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDVlMjVlNDEtYjYzYy0z MGQ2LWFiZjAtMThlNGJiY2ZlMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo02nCuqxuzHql/dFMVRn37hNXaRRLug+eulfmjFh1PUH6piGusdlhV ImqFU4KcJeTKbpSXI3F47q9y+3CCeVcmNooDCL4iTZ6Fdd1iKevhgVlqqZ+roWAG vfeoFRhG2qtpER91eozT1Vvhva69pzxrEQaDpRtLqFQvVzx5ZEDEukMZwg3KZQoa GhA+WBj0bQ6ZM/hbhm/dVkabBDd9gFNeAAWzhV8xkOS6wIvGyeKvsqvKZm5EiFop HEsMl80PbQN2IMwMY93f3G/8ZCTV+mZbrmg+8vA/XmWjOG/qu6lhVvz1D6gHKGV3 II0b1BLhFvUro8if1FetZfgXWtphzCI= -----END CERTIFICATE-----Generated at Fri Mar 14 08:04:56 2025 by rpki-client