$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21730146-f2f2-33ce-89bc-c573fac4dbd0.roa File: 21730146-f2f2-33ce-89bc-c573fac4dbd0.roa (raw, json) Hash identifier: j8jv6Jmf+NzeZSvRjEpCsCT1Dh1t6C9fyfCbdJFkF9s= Subject key identifier: F0:BF:C3:8C:81:D2:1E:D6:E8:94:B7:D1:01:FB:03:B2:24:93:C0:BC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B5A45F4CB394221A3C68680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21730146-f2f2-33ce-89bc-c573fac4dbd0.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.70.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:5a:45:f4:cb:39:42:21:a3:c6:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=fb6486b4-341e-4ba6-8593-7f1fc491dd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ad:b6:28:c9:56:aa:9b:9a:d5:97:37:00:06: 05:4a:a1:ba:08:9e:00:5e:fa:8d:23:62:49:bc:f1: e0:c3:bc:a7:2b:e5:be:c9:59:04:1b:a1:6b:5c:df: b3:2a:e1:19:48:4b:d2:6c:d2:8e:14:5c:72:8a:a1: 6a:a1:82:15:f6:20:00:c4:eb:21:89:ab:92:9c:0a: 5b:35:23:4b:ea:46:07:b0:b4:76:68:5d:1c:5f:cf: 95:5d:53:f6:45:59:23:3c:e9:01:a1:7d:10:a4:ca: 0c:bf:12:39:c7:f1:b2:61:2c:d7:31:54:fc:a5:05: 9e:5a:f4:31:f6:01:64:07:39:e1:cf:12:ec:d5:09: 25:5f:05:c4:d6:b8:82:b7:51:d3:83:2f:bf:9c:13: 2a:cd:53:6a:31:6b:2e:c6:13:24:22:71:82:ec:f6: 93:f0:35:24:af:fa:de:a2:08:d0:47:33:b4:2a:d7: 2d:6e:c7:b0:13:3f:45:31:a0:2a:28:95:fa:b3:19: 66:22:62:5f:f8:3b:2f:27:10:22:6b:f8:d7:4a:80: 43:a2:24:e6:27:09:28:04:65:e5:f9:df:dd:d7:b9: be:e9:36:44:91:2c:23:5a:94:a2:0c:1c:da:d5:57: c7:2c:ff:1a:5d:b5:47:71:b9:5e:e2:e2:69:ca:52: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BF:C3:8C:81:D2:1E:D6:E8:94:B7:D1:01:FB:03:B2:24:93:C0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21730146-f2f2-33ce-89bc-c573fac4dbd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:79:e7:4f:20:f5:06:c0:0f:df:5c:75:ef:be:3d:52:9c:a6: 84:a3:b4:be:78:f7:c8:d0:f8:58:6c:a1:ed:e6:76:f5:21:b0: d3:b3:81:4b:5a:e0:48:6b:90:9a:18:41:2e:7a:c9:35:b8:8b: e5:07:bc:9d:d3:41:de:9d:75:d3:ea:e0:bb:7d:9b:19:b9:71: 5d:3c:a7:30:06:5e:ff:ab:8c:0e:99:f8:cf:97:15:30:ca:08: 11:8c:ed:b6:2c:4b:84:03:45:37:ba:44:e0:1f:16:f0:07:e4: c4:a8:52:72:a7:f1:43:86:a8:06:d8:6e:da:ce:79:9e:88:92: 29:73:a9:47:f6:3f:24:ca:dd:b5:f8:0e:06:46:b5:01:9b:d4: dc:24:24:90:32:71:6f:c3:76:10:61:53:ce:5f:4a:0d:1b:99: a7:ce:33:db:1b:d6:21:4b:7b:bc:34:fa:99:1a:2b:cf:13:73: 51:e8:57:b6:16:38:df:20:07:84:64:e7:da:da:73:f8:bd:a5: ea:3f:be:29:5d:16:2a:0c:d8:3d:83:46:8f:60:49:5a:f3:93: ec:ae:f3:f2:ca:d5:c4:0d:45:88:68:d2:17:fb:bf:cc:e8:14: 3e:78:af:09:52:65:9b:75:93:67:d1:2d:27:d8:5f:f5:dd:89: 75:c4:24:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7WkX0yzlCIaPGhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk ZmI2NDg2YjQtMzQxZS00YmE2LTg1OTMtN2YxZmM0OTFkZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq22KMlWqpua1Zc3AAYFSqG6CJ4AXvqNI2JJ vPHgw7ynK+W+yVkEG6FrXN+zKuEZSEvSbNKOFFxyiqFqoYIV9iAAxOshiauSnApb NSNL6kYHsLR2aF0cX8+VXVP2RVkjPOkBoX0QpMoMvxI5x/GyYSzXMVT8pQWeWvQx 9gFkBznhzxLs1QklXwXE1riCt1HTgy+/nBMqzVNqMWsuxhMkInGC7PaT8DUkr/re ogjQRzO0KtctbsewEz9FMaAqKJX6sxlmImJf+DsvJxAia/jXSoBDoiTmJwkoBGXl +d/d17m+6TZEkSwjWpSiDBza1VfHLP8aXbVHcble4uJpylLqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC/w4yB0h7W6JS30QH7A7Ikk8C8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjE3MzAxNDYtZjJmMi0z M2NlLTg5YmMtYzU3M2ZhYzRkYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR5508g9QbAD99cde++PVKcpoSjtL5498jQ+Fhsoe3mdvUhsNOzgUta 4EhrkJoYQS56yTW4i+UHvJ3TQd6dddPq4Lt9mxm5cV08pzAGXv+rjA6Z+M+XFTDK CBGM7bYsS4QDRTe6ROAfFvAH5MSoUnKn8UOGqAbYbtrOeZ6IkilzqUf2PyTK3bX4 DgZGtQGb1NwkJJAycW/DdhBhU85fSg0bmafOM9sb1iFLe7w0+pkaK88Tc1HoV7YW ON8gB4Rk59rac/i9peo/vildFioM2D2DRo9gSVrzk+yu8/LK1cQNRYho0hf7v8zo FD54rwlSZZt1k2fRLSfYX/XdiXXEJN4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:49 2025 by rpki-client