$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22c71e1e-4d5c-3018-b643-ca10d5260796.roa File: 22c71e1e-4d5c-3018-b643-ca10d5260796.roa (raw, json) Hash identifier: QWIeTJ03uxG7KD59Rc+PoQJXzI07RnikTXzRhnDQ2BA= Subject key identifier: 4F:17:F4:44:C6:EC:39:4B:64:A9:51:6C:1F:37:CB:44:23:11:D8:D6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818CF98C01EDEFF7A1EE00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22c71e1e-4d5c-3018-b643-ca10d5260796.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.65.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8c:f9:8c:01:ed:ef:f7:a1:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=0b8ef76a-50aa-459a-a2e9-9c89d092f4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:53:56:1c:85:e1:a9:11:8c:a7:65:fc:bf:7f: 44:8f:71:27:bb:0a:20:ae:c3:b7:4a:2b:0b:be:4a: 39:30:bb:2b:6d:82:4b:b9:17:32:7f:d9:b4:29:19: a9:bc:e8:4a:8d:48:a0:3b:b4:b6:ad:63:ec:e5:d2: e9:1e:c2:ea:1c:12:4a:50:49:a3:8d:6a:80:27:f8: 2f:cf:87:c8:e2:07:e8:5a:d3:ff:4c:43:bb:64:81: d4:a3:f8:17:18:fe:14:d8:7a:f5:75:77:2e:21:7b: ee:10:32:2d:7b:8f:10:2b:e8:36:b8:c9:c4:9b:84: 06:f7:cd:a1:c7:e7:ef:98:c0:b1:1d:2f:68:6a:47: aa:96:d2:51:24:b4:ed:cb:97:7c:0d:6a:78:ab:e0: 5b:4a:4c:f0:bf:7d:99:67:a3:58:42:25:02:21:a9: 57:e2:0a:67:49:a1:a7:0c:ec:68:cc:64:99:e1:eb: dd:cc:0c:fb:a3:a6:a4:66:22:4a:a3:0b:c6:05:18: 36:87:0a:1f:13:23:29:b9:95:b6:6a:8d:c7:21:3c: 32:45:b6:f2:5d:e5:8f:0c:b1:2d:6c:50:32:b2:8a: 40:d3:ed:f4:32:20:4d:f6:1a:f8:d4:7c:b6:cc:48: 52:64:20:e2:ec:6d:09:05:53:d7:49:be:4a:76:75: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:17:F4:44:C6:EC:39:4B:64:A9:51:6C:1F:37:CB:44:23:11:D8:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22c71e1e-4d5c-3018-b643-ca10d5260796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:17:3a:8f:8d:30:8e:0e:ae:16:fb:ce:bb:a8:6f:b5:21:aa: 84:9f:02:1a:17:49:c0:2c:72:7c:b5:c9:d3:5f:33:98:2a:d1: ea:e5:d1:41:4b:96:c3:10:77:c8:eb:ba:11:aa:be:4f:27:1d: 14:d4:64:29:84:c3:ef:70:44:e3:15:9d:45:2c:dc:e5:aa:d8: 5f:45:64:fe:53:cc:16:3e:56:c9:e1:c8:9c:f8:20:b6:1d:28: e5:b8:f8:39:cb:f0:c3:be:99:1b:31:86:2d:53:da:a0:6f:65: ab:5b:16:55:b8:9c:e3:c4:31:3b:e0:d6:84:78:52:39:a9:7a: d8:79:4c:4a:f4:4b:dd:3d:f5:a9:fd:01:b8:90:2d:92:e3:77: 7b:59:f8:f0:35:a2:ee:d6:89:85:28:f7:ee:a7:06:5b:01:72: fd:82:ba:91:da:7c:ba:6f:25:06:84:bd:3a:83:c1:8b:90:3b: 6f:ef:6a:4b:2a:5c:98:47:63:c9:a3:8d:0e:f1:4d:72:da:cb: df:fa:23:f4:74:7a:1c:70:74:4f:c6:4c:f7:07:61:7d:00:c5: ea:77:04:3c:d3:e9:53:4a:d9:a8:f3:ab:9c:c5:7c:20:d9:07: 46:03:98:77:b7:d5:19:b2:28:2b:64:a6:c4:5b:5e:ba:96:2e: c4:16:a4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYz5jAHt7/eh7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MGI4ZWY3NmEtNTBhYS00NTlhLWEyZTktOWM4OWQwOTJmNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FNWHIXhqRGMp2X8v39Ej3EnuwogrsO3SisL vko5MLsrbYJLuRcyf9m0KRmpvOhKjUigO7S2rWPs5dLpHsLqHBJKUEmjjWqAJ/gv z4fI4gfoWtP/TEO7ZIHUo/gXGP4U2Hr1dXcuIXvuEDIte48QK+g2uMnEm4QG982h x+fvmMCxHS9oakeqltJRJLTty5d8DWp4q+BbSkzwv32ZZ6NYQiUCIalX4gpnSaGn DOxozGSZ4evdzAz7o6akZiJKowvGBRg2hwofEyMpuZW2ao3HITwyRbbyXeWPDLEt bFAysopA0+30MiBN9hr41Hy2zEhSZCDi7G0JBVPXSb5KdnWCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8X9ETG7DlLZKlRbB83y0QjEdjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjJjNzFlMWUtNGQ1Yy0z MDE4LWI2NDMtY2ExMGQ1MjYwNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgXOo+NMI4Orhb7zruob7UhqoSfAhoXScAscny1ydNfM5gq0erl0UFL lsMQd8jruhGqvk8nHRTUZCmEw+9wROMVnUUs3OWq2F9FZP5TzBY+VsnhyJz4ILYd KOW4+DnL8MO+mRsxhi1T2qBvZatbFlW4nOPEMTvg1oR4Ujmpeth5TEr0S9099an9 AbiQLZLjd3tZ+PA1ou7WiYUo9+6nBlsBcv2CupHafLpvJQaEvTqDwYuQO2/vaksq XJhHY8mjjQ7xTXLay9/6I/R0ehxwdE/GTPcHYX0Axep3BDzT6VNK2ajzq5zFfCDZ B0YDmHe31RmyKCtkpsRbXrqWLsQWpD8= -----END CERTIFICATE-----Generated at Sat Apr 5 07:41:37 2025 by rpki-client