$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af978aa-bda8-37a1-862a-d533e2940e37.roa File: 2af978aa-bda8-37a1-862a-d533e2940e37.roa (raw, json) Hash identifier: UYmGXOy4AT+pdNccKHu1eFPuTVEr9GM4KbAuQRVRe/k= Subject key identifier: CF:0B:9F:11:A0:EF:E2:19:69:F2:1E:F9:39:8F:1E:B6:04:7B:1F:6C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584940395676329924806BE92D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af978aa-bda8-37a1-862a-d533e2940e37.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.69.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:56:76:32:99:24:80:6b:e9:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=57d6adab-5762-4571-903b-174ba84c228c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:82:f5:f2:62:bb:5a:b7:b9:d8:94:fc:cd:b4: 24:ba:e5:f7:4c:f5:64:81:e4:97:fa:b2:03:a4:1a: 35:e6:70:d3:df:b3:e9:bc:64:12:17:bc:9a:07:1e: bf:b2:7c:49:ca:da:3d:df:3a:6e:75:66:99:b0:27: d2:5d:bf:cc:43:f6:53:2f:70:d8:78:60:2b:b6:b1: 16:08:87:04:21:de:db:9a:df:dd:d5:9b:02:43:44: 91:17:f8:d5:30:45:02:9e:53:e1:c2:e3:b9:6c:f9: 65:b2:d6:cb:2e:7e:b6:45:c3:2f:d0:c6:bf:40:19: bf:69:61:8a:d4:3e:4b:89:a8:1a:7f:36:e0:d1:b9: 81:4a:f8:cb:be:1a:61:32:a3:06:6a:c5:b5:ca:08: bb:08:f4:e0:6c:d4:7b:12:ec:29:58:d6:75:e8:e4: 35:c4:9a:d4:a1:13:56:01:d6:2e:65:fb:53:af:95: ea:3d:46:45:dc:cc:a7:ce:2a:e8:93:eb:3f:d5:0e: ee:46:6e:c8:d8:7b:2c:1c:c4:87:86:48:66:f1:71: 63:df:8a:69:d3:40:98:1e:1f:06:50:c8:6e:4b:c6: 40:db:8f:96:da:66:cf:23:28:05:7b:e0:5d:e8:e3: 20:75:a1:9c:ba:e9:9d:3a:44:8d:8c:e9:20:73:0d: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0B:9F:11:A0:EF:E2:19:69:F2:1E:F9:39:8F:1E:B6:04:7B:1F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af978aa-bda8-37a1-862a-d533e2940e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:70:ed:94:7c:de:9e:9c:da:32:14:99:10:10:d1:26:d9:a2: 85:7a:eb:52:01:34:f7:5b:6a:b4:5a:46:2f:c2:d8:fb:c4:17: a1:bc:3e:30:cc:b2:f2:75:10:cf:83:3d:2d:d7:04:fa:fd:6e: be:03:f8:cb:74:94:02:47:c2:62:7d:f5:44:5e:93:00:63:6b: eb:eb:c4:2d:f0:83:80:60:ec:d7:43:4f:f7:51:f5:62:74:d7: 61:df:6a:35:ef:19:4e:4e:1d:e2:6a:16:9a:b1:48:43:1d:fe: e4:5d:b2:5f:8c:71:f6:49:be:6b:fb:77:db:7e:52:aa:bf:85: 55:87:f7:27:12:11:c9:31:2a:ae:10:bd:14:c4:fb:d7:16:c0: b5:0d:a0:d3:2f:07:74:e1:66:ef:f9:6e:b0:d0:cd:15:ce:23: c1:ce:cf:ad:ea:2b:18:cf:00:3c:a3:60:f3:7f:46:3e:61:28: 03:eb:ef:02:35:40:17:4f:0e:e4:ff:18:be:55:a7:dc:52:2a: c2:82:78:e9:cc:6d:de:b8:09:69:f9:e2:b4:8d:d1:15:de:7f: d5:84:41:4b:6a:09:f8:18:87:25:4d:ff:12:3c:d3:d8:9e:b8: 91:04:e5:aa:12:40:8f:9f:92:59:e9:5c:2e:93:34:08:bb:5b: 26:5f:ac:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOVZ2MpkkgGvpLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NTdkNmFkYWItNTc2Mi00NTcxLTkwM2ItMTc0YmE4NGMyMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4L18mK7Wre52JT8zbQkuuX3TPVkgeSX+rID pBo15nDT37PpvGQSF7yaBx6/snxJyto93zpudWaZsCfSXb/MQ/ZTL3DYeGArtrEW CIcEId7bmt/d1ZsCQ0SRF/jVMEUCnlPhwuO5bPllstbLLn62RcMv0Ma/QBm/aWGK 1D5Liagafzbg0bmBSvjLvhphMqMGasW1ygi7CPTgbNR7EuwpWNZ16OQ1xJrUoRNW AdYuZftTr5XqPUZF3Mynzirok+s/1Q7uRm7I2HssHMSHhkhm8XFj34pp00CYHh8G UMhuS8ZA24+W2mbPIygFe+Bd6OMgdaGcuumdOkSNjOkgcw1f+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8LnxGg7+IZafIe+TmPHrYEex9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmFmOTc4YWEtYmRhOC0z N2ExLTg2MmEtZDUzM2UyOTQwZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1w7ZR83p6c2jIUmRAQ0SbZooV661IBNPdbarRaRi/C2PvEF6G8PjDM svJ1EM+DPS3XBPr9br4D+Mt0lAJHwmJ99URekwBja+vrxC3wg4Bg7NdDT/dR9WJ0 12HfajXvGU5OHeJqFpqxSEMd/uRdsl+McfZJvmv7d9t+Uqq/hVWH9ycSEckxKq4Q vRTE+9cWwLUNoNMvB3ThZu/5brDQzRXOI8HOz63qKxjPADyjYPN/Rj5hKAPr7wI1 QBdPDuT/GL5Vp9xSKsKCeOnMbd64CWn54rSN0RXef9WEQUtqCfgYhyVN/xI809ie uJEE5aoSQI+fklnpXC6TNAi7WyZfrAE= -----END CERTIFICATE-----Generated at Sat Apr 5 07:51:38 2025 by rpki-client