$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa File: 276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa (raw, json) Hash identifier: 4XJPqmAxU4b46E26jC7MNlexk9UK2xhMgxv5DhPi190= Subject key identifier: 04:FE:DB:18:86:3F:AC:69:77:73:D9:3A:85:A5:C5:5A:E0:0F:5A:71 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818FA51DB6203043CCEDE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8f:a5:1d:b6:20:30:43:cc:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=1def9bed-1834-4c96-ae7d-9c7d00bf3560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:2c:b4:4d:d7:76:69:38:4d:79:22:6f:d7: 7a:7d:b0:8c:46:ea:a0:2a:3a:31:10:f6:e9:26:b0: 69:82:8a:c2:cb:c1:3e:3e:c8:af:51:4b:23:0c:ae: 8a:eb:64:a8:36:ad:30:03:45:4e:55:8b:67:4b:b7: bc:cc:eb:5c:ef:ac:28:97:ca:23:28:1f:8f:a3:85: d6:35:8a:29:45:48:b4:f6:98:b4:43:12:0c:1e:1b: 41:6b:b9:06:f3:eb:84:c4:8a:b5:54:ec:60:85:80: 46:d8:a7:2d:ab:cb:cc:b3:15:d2:09:6a:05:29:08: 40:a4:d8:9c:c1:34:ab:e3:d4:48:1b:2f:36:e7:78: 3e:66:bd:de:32:40:ff:1b:51:30:be:3e:69:7f:eb: 8c:0c:5a:b9:38:c8:7f:9c:10:6f:fd:ac:45:8e:b8: 92:ed:78:d8:6d:0f:b0:ed:c1:19:95:52:c1:40:b1: 9e:c5:41:82:05:16:0c:95:63:1c:a9:9f:44:98:85: 1d:3e:ee:7b:52:f3:47:f0:98:0e:cf:03:c7:d5:b3: 3b:0a:f7:d4:71:d0:cf:11:44:b6:d5:33:79:3c:35: a6:c0:4d:4e:fb:17:ce:29:30:3a:06:07:86:f7:4a: 95:4f:a4:6e:ca:d3:58:d0:2f:33:48:88:93:7f:b5: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FE:DB:18:86:3F:AC:69:77:73:D9:3A:85:A5:C5:5A:E0:0F:5A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/276c634e-f302-3b0d-8dc8-0ac2700dfb4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:eb:16:88:e0:78:58:76:58:9b:c0:3c:7b:59:ad:c6:56:ae: 9f:27:79:81:be:af:bf:0e:5c:7f:bf:53:be:bd:9c:75:44:c6: 62:7a:b5:0f:e0:50:60:8a:39:ba:ed:d3:96:99:9c:a0:2d:8a: 1c:e7:4a:a8:2c:03:01:c1:48:5e:6b:5f:bc:e5:8c:d5:a4:f5: 59:56:9c:cc:02:a5:80:7f:d5:05:e4:7f:d0:c8:ba:65:4e:d7: d4:de:71:51:60:78:fc:89:e8:b1:3a:d3:9f:b1:7d:c6:3b:7b: b5:ef:0f:5c:8c:ee:f0:d3:61:cb:47:6b:2c:a5:a7:a4:c7:6b: c5:48:49:15:19:4d:11:d9:01:9f:27:78:ff:3c:42:54:0a:6d: d8:23:6f:62:85:09:b5:bc:db:69:d1:89:86:3c:99:c8:c6:ec: 51:21:bd:49:b2:b7:d2:88:6b:c2:20:5c:67:d0:21:d5:58:62: 31:0b:7d:d6:cc:7d:2b:f2:06:0b:d0:fd:42:5b:45:b7:f7:a2: c9:62:40:07:7e:1d:95:5d:f1:a9:c1:a8:84:b6:44:96:05:5e: a8:89:d5:05:c5:b2:64:93:ed:72:e7:a9:40:44:18:0e:2f:ce: e9:51:c6:e8:e8:6a:aa:8f:1a:d9:81:d8:ea:c1:48:e9:ef:e6: 91:7c:4e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgY+lHbYgMEPM7eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MWRlZjliZWQtMTgzNC00Yzk2LWFlN2QtOWM3ZDAwYmYzNTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9AstE3Xdmk4TXkib9d6fbCMRuqgKjoxEPbp JrBpgorCy8E+PsivUUsjDK6K62SoNq0wA0VOVYtnS7e8zOtc76wol8ojKB+Po4XW NYopRUi09pi0QxIMHhtBa7kG8+uExIq1VOxghYBG2Kctq8vMsxXSCWoFKQhApNic wTSr49RIGy8253g+Zr3eMkD/G1Ewvj5pf+uMDFq5OMh/nBBv/axFjriS7XjYbQ+w 7cEZlVLBQLGexUGCBRYMlWMcqZ9EmIUdPu57UvNH8JgOzwPH1bM7CvfUcdDPEUS2 1TN5PDWmwE1O+xfOKTA6BgeG90qVT6RuytNY0C8zSIiTf7U16QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAT+2xiGP6xpd3PZOoWlxVrgD1pxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjc2YzYzNGUtZjMwMi0z YjBkLThkYzgtMGFjMjcwMGRmYjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDrFojgeFh2WJvAPHtZrcZWrp8neYG+r78OXH+/U769nHVExmJ6tQ/g UGCKObrt05aZnKAtihznSqgsAwHBSF5rX7zljNWk9VlWnMwCpYB/1QXkf9DIumVO 19TecVFgePyJ6LE605+xfcY7e7XvD1yM7vDTYctHayylp6THa8VISRUZTRHZAZ8n eP88QlQKbdgjb2KFCbW822nRiYY8mcjG7FEhvUmyt9KIa8IgXGfQIdVYYjELfdbM fSvyBgvQ/UJbRbf3osliQAd+HZVd8anBqIS2RJYFXqiJ1QXFsmST7XLnqUBEGA4v zulRxujoaqqPGtmB2OrBSOnv5pF8TgI= -----END CERTIFICATE-----Generated at Sat Apr 5 09:52:20 2025 by rpki-client