$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11395984-80f0-3cf1-a18d-81394db2b106.roa File: 11395984-80f0-3cf1-a18d-81394db2b106.roa (raw, json) Hash identifier: OGiJ8mwLKbv2vAVA1BPH9oktTZUPwRPSZckqlkmGXgo= Subject key identifier: 62:50:16:75:38:9D:C1:3D:F4:48:C8:56:55:26:D1:19:1F:98:72:A5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C135623345AFF965DC880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11395984-80f0-3cf1-a18d-81394db2b106.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:13:56:23:34:5a:ff:96:5d:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=d5aaa1cb-276e-4a16-a367-9db200ef0eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:16:ce:c4:c1:4e:33:b7:ce:f3:4b:94:91: c9:8b:d3:cd:1b:bf:e1:b7:cc:a2:e6:74:99:c6:22: 2a:75:66:59:ec:94:08:d9:65:2d:b2:6b:f6:4d:54: ec:56:5b:9a:f7:3a:9e:4f:6a:3c:6c:6c:f1:4b:09: de:89:24:45:63:3b:4e:77:0d:a2:76:e3:30:8c:b2: bd:db:f5:3d:c7:f3:c7:4b:d8:5b:97:d5:3a:3e:23: 57:dc:c5:0e:34:53:54:e0:34:99:b6:be:19:89:44: 25:e8:1b:61:c7:72:b0:0d:5f:70:51:68:b1:54:7e: eb:4f:8b:61:94:fd:4f:08:3a:2d:32:14:0e:31:26: 66:a8:8c:ac:e3:3c:37:e1:09:cd:36:f9:d8:eb:a7: e5:8b:ba:65:8f:ec:1b:e6:59:f2:cb:4f:29:99:48: 52:21:34:cc:77:bc:a1:5d:a4:05:28:d5:05:17:19: 0c:02:c3:54:d3:c3:00:ac:3b:49:45:69:9c:1c:a5: f7:2e:37:4f:63:0c:04:87:3e:05:cf:24:ce:33:dd: d4:cd:ea:96:58:66:71:c4:9c:8d:e5:23:23:72:b2: 9f:15:e4:6c:c6:35:25:dc:0e:26:8a:e0:09:25:af: ce:bf:d3:2a:65:c8:ce:d7:32:ee:a1:1b:38:95:d5: 7e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:50:16:75:38:9D:C1:3D:F4:48:C8:56:55:26:D1:19:1F:98:72:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11395984-80f0-3cf1-a18d-81394db2b106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:ec:29:5c:80:86:b1:cb:51:3f:2d:cf:42:24:ee:a9:3b:17: 0d:d1:74:65:e4:8d:8a:26:54:3e:aa:34:16:b4:9b:a8:06:0d: f6:6b:0d:bd:77:b8:cc:13:9d:4a:10:30:d7:f3:ce:26:ea:9c: f5:9c:f8:f4:aa:7f:d2:96:83:e4:9a:67:9c:bb:9d:04:cb:fa: bb:99:40:d2:14:19:b1:42:7a:54:f9:02:36:e9:33:3e:c9:11: 53:92:f5:71:3f:10:6a:53:5c:7d:fb:58:d3:e5:83:f5:ff:b4: ce:99:80:65:13:f8:ba:ad:b9:4c:03:52:38:1c:71:42:aa:45: c9:a8:b6:b5:a3:66:40:a2:ab:4a:e7:28:d6:7a:3f:21:e0:53: 80:b0:02:d0:29:c1:27:03:73:c7:1c:d9:10:30:3e:f9:34:6c: b1:f0:79:b6:f4:3d:13:6d:27:a0:af:72:78:30:f6:d5:a0:a8: 64:6e:98:0c:0d:05:ae:72:43:49:c5:3e:8d:07:23:f1:0b:29: 7b:be:6b:bc:ec:1c:d2:ba:e0:4c:43:06:ca:29:df:90:3d:9e: 98:d0:47:a5:c7:8c:da:07:01:cc:8f:06:2d:da:9e:ef:d1:2f: 5f:9b:8c:58:91:96:4f:b1:f9:4e:d8:0c:0a:18:9e:a1:15:a3: 62:d6:47:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBNWIzRa/5ZdyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZDVhYWExY2ItMjc2ZS00YTE2LWEzNjctOWRiMjAwZWYwZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/wWzsTBTjO3zvNLlJHJi9PNG7/ht8yi5nSZ xiIqdWZZ7JQI2WUtsmv2TVTsVlua9zqeT2o8bGzxSwneiSRFYztOdw2iduMwjLK9 2/U9x/PHS9hbl9U6PiNX3MUONFNU4DSZtr4ZiUQl6Bthx3KwDV9wUWixVH7rT4th lP1PCDotMhQOMSZmqIys4zw34QnNNvnY66fli7plj+wb5lnyy08pmUhSITTMd7yh XaQFKNUFFxkMAsNU08MArDtJRWmcHKX3LjdPYwwEhz4FzyTOM93UzeqWWGZxxJyN 5SMjcrKfFeRsxjUl3A4miuAJJa/Ov9MqZcjO1zLuoRs4ldV+GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJQFnU4ncE99EjIVlUm0RkfmHKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTEzOTU5ODQtODBmMC0z Y2YxLWExOGQtODEzOTRkYjJiMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjsKVyAhrHLUT8tz0Ik7qk7Fw3RdGXkjYomVD6qNBa0m6gGDfZrDb13 uMwTnUoQMNfzzibqnPWc+PSqf9KWg+SaZ5y7nQTL+ruZQNIUGbFCelT5AjbpMz7J EVOS9XE/EGpTXH37WNPlg/X/tM6ZgGUT+LqtuUwDUjgccUKqRcmotrWjZkCiq0rn KNZ6PyHgU4CwAtApwScDc8cc2RAwPvk0bLHwebb0PRNtJ6Cvcngw9tWgqGRumAwN Ba5yQ0nFPo0HI/ELKXu+a7zsHNK64ExDBsop35A9npjQR6XHjNoHAcyPBi3anu/R L1+bjFiRlk+x+U7YDAoYnqEVo2LWR1w= -----END CERTIFICATE-----Generated at Sat Apr 5 10:10:54 2025 by rpki-client