$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f781fa5-216a-318d-81c3-28358b633e96.roa File: 1f781fa5-216a-318d-81c3-28358b633e96.roa (raw, json) Hash identifier: AIPYQN14qujluYgL2+b/dwxAIemdWtRAzua3E+Ya2cA= Subject key identifier: 4F:CD:84:A3:82:54:33:1B:B2:14:83:FC:4E:E3:37:24:90:1B:3D:84 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69C1AF491AC05B8FCDE89 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f781fa5-216a-318d-81c3-28358b633e96.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9c:1a:f4:91:ac:05:b8:fc:de:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=5caaa107-2160-4494-b08a-ce50862e3c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:c4:15:c6:af:18:8b:84:12:b5:82:1a:13: 98:cc:44:ff:8a:15:9c:4c:e4:65:4f:c6:5e:a1:4f: e5:6d:6c:79:c7:10:59:da:76:26:d8:99:50:ad:88: 39:2d:e8:3c:b3:cb:dd:41:5f:04:c9:cc:52:95:a7: 82:1c:c8:fd:f1:27:3c:85:c6:8f:94:23:b1:72:9f: e5:69:64:1a:64:ac:9e:a0:d8:88:de:4c:77:23:a6: 72:e9:a7:f8:40:48:58:f0:39:94:17:4c:57:d3:37: 74:00:bc:51:29:d4:cd:9d:21:ad:c9:16:96:01:e5: c4:1e:b5:a1:bd:5c:81:1f:7f:7f:ed:f0:ce:1a:a9: ce:02:76:21:5d:bf:ad:31:cb:91:3c:01:8e:67:11: 75:e8:57:ba:58:c3:e8:6f:30:60:af:a1:ee:6e:05: 26:0e:0d:bf:c4:eb:6e:6e:c0:40:74:90:8a:b4:44: 29:07:bd:0d:e8:37:32:96:cc:31:bc:5a:86:ad:0b: fd:16:78:87:2a:2b:86:fb:91:ab:3c:78:fd:06:92: 18:7e:d2:7b:2d:33:8b:95:b9:3d:40:da:da:e9:ab: c4:41:79:80:81:e9:ac:15:38:a9:9d:5a:32:1c:d2: 49:2b:66:73:74:65:53:21:3c:6a:ee:01:4a:ce:6c: 16:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CD:84:A3:82:54:33:1B:B2:14:83:FC:4E:E3:37:24:90:1B:3D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f781fa5-216a-318d-81c3-28358b633e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7e:69:1a:13:eb:cd:47:31:3e:be:3b:05:5e:e6:0d:41:a7: c7:9f:35:64:df:f9:b8:82:a4:3e:c6:3a:72:a2:09:09:16:85: be:7c:a2:52:6c:1e:3a:f4:93:e4:3c:f2:c6:1c:7b:63:ef:63: 67:b0:67:0d:05:fb:db:a3:62:59:14:7f:6f:91:a3:b5:b8:a5: 06:47:04:03:bc:7e:8e:19:05:a1:6b:65:87:09:7f:0a:cd:3d: 98:af:4d:08:2d:0d:c0:3c:ee:5d:e8:3f:95:ae:96:15:a0:2f: f8:15:2c:13:93:50:e8:e9:da:d4:2c:28:ef:83:34:31:79:d8: 81:23:9e:55:c2:a9:7b:5c:cf:c6:5b:e5:64:ab:73:62:cf:00: c5:69:7d:3b:20:a1:48:82:aa:0d:84:73:fd:56:6b:cd:92:7f: 50:f5:2e:85:6c:17:cf:32:a7:71:c1:82:07:ea:27:fd:ac:55: 72:a0:3f:90:2a:f0:97:8e:23:02:97:a2:91:1d:e5:93:8d:af: 84:d1:9f:6a:1c:a6:d7:6c:50:71:5c:f8:e3:14:15:39:50:36: 86:d2:91:a2:57:72:7a:7f:cf:96:f0:d7:d3:85:46:a3:8e:c3: a8:6c:19:0a:1d:6b:c4:b6:bb:38:b1:7b:08:7d:72:8d:5e:01: 50:d3:33:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pwa9JGsBbj83okwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk NWNhYWExMDctMjE2MC00NDk0LWIwOGEtY2U1MDg2MmUzYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTHEFcavGIuEErWCGhOYzET/ihWcTORlT8Ze oU/lbWx5xxBZ2nYm2JlQrYg5Leg8s8vdQV8EycxSlaeCHMj98Sc8hcaPlCOxcp/l aWQaZKyeoNiI3kx3I6Zy6af4QEhY8DmUF0xX0zd0ALxRKdTNnSGtyRaWAeXEHrWh vVyBH39/7fDOGqnOAnYhXb+tMcuRPAGOZxF16Fe6WMPobzBgr6HubgUmDg2/xOtu bsBAdJCKtEQpB70N6DcylswxvFqGrQv9FniHKiuG+5GrPHj9BpIYftJ7LTOLlbk9 QNra6avEQXmAgemsFTipnVoyHNJJK2ZzdGVTITxq7gFKzmwWkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/NhKOCVDMbshSD/E7jNySQGz2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWY3ODFmYTUtMjE2YS0z MThkLTgxYzMtMjgzNThiNjMzZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrESMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp+aRoT681HMT6+OwVe5g1Bp8efNWTf+biCpD7GOnKiCQkWhb58olJs Hjr0k+Q88sYce2PvY2ewZw0F+9ujYlkUf2+Ro7W4pQZHBAO8fo4ZBaFrZYcJfwrN PZivTQgtDcA87l3oP5WulhWgL/gVLBOTUOjp2tQsKO+DNDF52IEjnlXCqXtcz8Zb 5WSrc2LPAMVpfTsgoUiCqg2Ec/1Wa82Sf1D1LoVsF88yp3HBggfqJ/2sVXKgP5Aq 8JeOIwKXopEd5ZONr4TRn2ocptdsUHFc+OMUFTlQNobSkaJXcnp/z5bw19OFRqOO w6hsGQoda8S2uzixewh9co1eAVDTM0M= -----END CERTIFICATE-----Generated at Sat Apr 5 10:18:09 2025 by rpki-client