$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0def017e-b46a-3dd2-a5bd-59bebc5852eb.roa File: 0def017e-b46a-3dd2-a5bd-59bebc5852eb.roa (raw, json) Hash identifier: LnqnpOyvEt+6rqEHG8QzleGlCO5KiglecSmIIiMNzv0= Subject key identifier: 1C:D0:4C:AD:DD:C0:59:E6:80:07:85:CB:CD:7D:7F:1F:06:84:CA:EF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285846F7AE22B829BD7643E3C0D6B8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0def017e-b46a-3dd2-a5bd-59bebc5852eb.roa Signing time: Thu 22 Aug 2024 12:00:00 +0000 ROA not before: Thu 22 Aug 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.18.0/24 maxlen: 24 172.68.19.0/24 maxlen: 24 172.68.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:f7:ae:22:b8:29:bd:76:43:e3:c0:d6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 22 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=592ca251-90f2-4869-8f78-1983a6c343fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:7b:b3:b4:18:02:70:c7:d1:c0:7f:29:2c: 2b:1c:d9:01:e0:90:6a:da:b7:90:09:f8:7d:73:fa: ca:0d:53:66:99:bc:fa:de:e6:85:aa:4a:b0:39:55: 43:5d:d3:39:91:de:69:51:6d:e6:67:72:6e:46:f1: bd:aa:99:3d:f3:4d:b1:ad:6d:7f:e8:f2:58:cf:e0: 0d:ef:04:5c:ac:78:f3:23:14:a8:e1:d2:eb:9d:15: 89:1c:05:af:80:c0:6c:c9:a7:f2:dd:f0:18:55:9e: f5:9c:ab:27:cc:5d:f3:ac:9a:7d:52:1f:84:14:ea: 04:94:9e:e9:22:41:0a:05:3e:1e:52:78:61:32:2f: dd:9a:29:c0:c8:5c:56:9d:66:41:94:f7:2d:da:67: 90:29:6f:e8:80:62:bd:a7:11:a7:78:ca:b5:14:b2: 61:08:d9:f4:91:13:f0:79:5f:06:2a:f0:ff:e2:67: bc:bd:24:bb:83:4b:99:8d:8d:45:be:85:d8:a9:1e: a0:c8:c0:d5:f7:c9:c9:57:c3:40:e3:a4:fa:88:37: a7:aa:25:24:a6:05:9a:5d:a0:6f:c3:e2:b3:ba:24: 28:a7:b8:ca:35:0b:c6:71:bd:b1:c5:77:1c:42:c1: 89:0b:7d:99:8b:63:9b:c6:b8:94:a9:82:ae:03:0f: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D0:4C:AD:DD:C0:59:E6:80:07:85:CB:CD:7D:7F:1F:06:84:CA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0def017e-b46a-3dd2-a5bd-59bebc5852eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.18.0/23 172.68.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:55:a5:9e:16:d3:c2:5b:55:cf:90:5e:4a:1e:1e:e2:de:ac: 5c:3c:8d:de:e8:7a:53:46:9d:b2:87:50:25:48:64:e6:5e:a9: f8:2b:95:62:64:9b:81:94:d4:60:ac:a4:fe:1e:ed:88:ad:d9: e3:e4:e7:bd:e3:23:53:71:55:b1:df:00:be:65:a3:7d:20:c9: 71:b6:c7:dd:21:5a:60:b0:26:46:9b:fe:de:a1:3a:a4:77:ac: b8:a0:1a:e1:51:d7:3c:a5:cf:fd:13:b9:e3:01:50:2a:0f:d3: ed:ca:f7:8c:ea:0b:49:15:8e:8e:0e:88:09:f6:92:04:96:8b: f2:81:e1:ac:43:97:df:75:63:1f:25:e9:68:3d:23:4b:ab:e2: ec:f4:fc:f7:29:2c:3f:b7:84:67:f1:80:4f:da:5b:d9:79:75: 62:8c:21:e3:bf:a0:a8:21:03:f9:b5:a1:5c:47:dd:2e:c7:34: 08:58:63:1b:3b:8f:ff:51:75:bc:a9:53:eb:79:3a:5f:6e:ec: c5:24:70:d4:73:55:33:77:31:d3:6e:ad:23:c1:b5:86:db:04: ec:4c:29:00:3e:0f:9f:94:e8:48:af:3e:e8:96:43:5c:53:97: 8b:4a:8b:5e:fe:91:6d:5f:a1:7e:19:d3:a2:49:e6:d7:d8:14: a1:fe:dd:08 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEb3riK4Kb12Q+PA1rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDgyMjEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk NTkyY2EyNTEtOTBmMi00ODY5LThmNzgtMTk4M2E2YzM0M2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kJ7s7QYAnDH0cB/KSwrHNkB4JBq2reQCfh9 c/rKDVNmmbz63uaFqkqwOVVDXdM5kd5pUW3mZ3JuRvG9qpk9802xrW1/6PJYz+AN 7wRcrHjzIxSo4dLrnRWJHAWvgMBsyafy3fAYVZ71nKsnzF3zrJp9Uh+EFOoElJ7p IkEKBT4eUnhhMi/dminAyFxWnWZBlPct2meQKW/ogGK9pxGneMq1FLJhCNn0kRPw eV8GKvD/4me8vSS7g0uZjY1FvoXYqR6gyMDV98nJV8NA46T6iDenqiUkpgWaXaBv w+KzuiQop7jKNQvGcb2xxXccQsGJC32Zi2ObxriUqYKuAw8ttQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBzQTK3dwFnmgAeFy819fx8GhMrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGRlZjAxN2UtYjQ2YS0z ZGQyLWE1YmQtNTliZWJjNTg1MmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrEQSAwQA rER5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACxVpZ4W08JbVc+QXkoeHuLerFw8jd7oelNGnbKHUCVIZOZe qfgrlWJkm4GU1GCspP4e7Yit2ePk573jI1NxVbHfAL5lo30gyXG2x90hWmCwJkab /t6hOqR3rLigGuFR1zylz/0TueMBUCoP0+3K94zqC0kVjo4OiAn2kgSWi/KB4axD l991Yx8l6Wg9I0ur4uz0/PcpLD+3hGfxgE/aW9l5dWKMIeO/oKghA/m1oVxH3S7H NAhYYxs7j/9RdbypU+t5Ol9u7MUkcNRzVTN3MdNurSPBtYbbBOxMKQA+D5+U6Eiv PuiWQ1xTl4tKi17+kW1foX4Z06JJ5tfYFKH+3Qg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:15 2025 by rpki-client