$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2bff93b5-3013-3d84-8eb6-77ed24c0664b.roa File: 2bff93b5-3013-3d84-8eb6-77ed24c0664b.roa (raw, json) Hash identifier: dzjAjzLBl3EpHsfo7lx9iqXbEngLswS6ymWmd9fbDgM= Subject key identifier: 29:BD:E5:16:8D:C1:42:36:90:FE:34:0D:ED:EB:E1:1A:A6:8D:9B:39 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473ACC1F530D37FE20FD589480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2bff93b5-3013-3d84-8eb6-77ed24c0664b.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.69.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:cc:1f:53:0d:37:fe:20:fd:58:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=dccbf0ec-7cd2-4826-a442-ad2895b405b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:94:60:4a:ce:64:43:df:65:57:17:6e:79: 9d:9a:24:67:c2:64:e7:ec:32:19:2e:69:2a:6a:8d: d2:5e:cf:4a:4c:b4:90:fd:db:e5:4b:29:3a:4d:1d: 7f:f9:6f:bd:57:19:88:d6:c1:e7:d6:c6:0e:9e:ae: 8f:96:87:7a:e5:9c:65:f2:61:91:00:15:bf:7a:89: 82:cc:90:b7:7e:28:70:03:34:53:8a:f4:51:12:16: 65:fa:f1:7a:38:22:1a:ab:17:0d:63:e0:39:e2:ee: 33:3e:88:29:be:2e:52:39:a5:17:dc:02:2a:fc:66: d8:68:f5:70:81:26:1b:22:5e:b2:b5:cf:6c:79:a7: 58:07:86:8c:1e:52:b9:48:a5:23:c0:9f:25:64:03: ee:d0:65:99:f4:bc:d9:d2:89:13:9c:2a:08:02:39: 5f:d7:9a:e9:b7:1e:5c:0b:30:59:ab:82:f3:eb:f0: 76:6d:b3:9c:26:62:29:7b:06:41:fc:9e:be:ba:b2: 49:a7:c2:db:18:95:2a:21:75:13:59:bf:f4:f9:2d: 37:7c:40:4f:0c:95:62:1e:80:b6:c7:81:d6:96:64: d6:03:f2:55:ea:35:8c:3a:e9:15:7b:34:19:45:4a: 42:8b:b7:dc:d6:13:b6:46:c3:20:f6:a4:5e:8d:0f: 16:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BD:E5:16:8D:C1:42:36:90:FE:34:0D:ED:EB:E1:1A:A6:8D:9B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2bff93b5-3013-3d84-8eb6-77ed24c0664b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a9:14:bc:03:4f:80:dc:6c:1b:f1:71:ba:ae:f5:7b:a7:f6: 35:f2:27:f8:4a:24:53:1d:d6:3b:6f:20:d9:82:66:33:b7:61: 1f:68:c7:e7:39:12:9b:60:ec:09:85:02:62:3d:58:f1:bc:54: c2:31:75:7a:62:40:78:eb:fb:e0:b8:1d:14:6c:2b:0e:39:90: f0:b3:7f:ba:26:b6:72:f5:c1:1d:a3:18:a3:a9:20:90:a8:30: c3:7b:57:ed:a2:25:ef:42:86:4b:57:ce:83:3b:90:4c:53:4a: 03:59:b6:e3:ce:1d:db:5d:a7:b7:96:5c:ee:50:4b:d3:88:d5: 84:a5:51:9d:1d:00:c5:7d:41:97:31:47:6d:4e:3f:be:34:d6: 14:e4:c2:19:ae:e1:ff:81:b4:a0:95:4b:46:ad:31:cd:8f:27: c7:c1:08:b6:8c:41:8a:ce:0a:7f:8a:92:74:a8:94:86:a4:98: 05:a2:3d:e9:b5:f0:ca:8e:ea:81:65:5f:15:83:93:04:26:7d: 74:d7:65:9e:9e:6e:2f:00:ec:6d:ed:6f:07:84:f8:42:2a:f3: cd:33:a4:70:cb:ec:20:78:2f:71:6f:49:10:1c:08:53:bb:1a: 75:eb:e7:e5:cb:34:ef:1b:39:64:02:8e:35:54:f5:52:1f:04: 2c:9c:eb:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6zB9TDTf+IP1YlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk ZGNjYmYwZWMtN2NkMi00ODI2LWE0NDItYWQyODk1YjQwNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9CUYErOZEPfZVcXbnmdmiRnwmTn7DIZLmkq ao3SXs9KTLSQ/dvlSyk6TR1/+W+9VxmI1sHn1sYOnq6Plod65Zxl8mGRABW/eomC zJC3fihwAzRTivRREhZl+vF6OCIaqxcNY+A54u4zPogpvi5SOaUX3AIq/GbYaPVw gSYbIl6ytc9seadYB4aMHlK5SKUjwJ8lZAPu0GWZ9LzZ0okTnCoIAjlf15rptx5c CzBZq4Lz6/B2bbOcJmIpewZB/J6+urJJp8LbGJUqIXUTWb/0+S03fEBPDJViHoC2 x4HWlmTWA/JV6jWMOukVezQZRUpCi7fc1hO2RsMg9qRejQ8WdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm95RaNwUI2kP40De3r4RqmjZs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmJmZjkzYjUtMzAxMy0z ZDg0LThlYjYtNzdlZDI0YzA2NjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOpFLwDT4DcbBvxcbqu9Xun9jXyJ/hKJFMd1jtvINmCZjO3YR9ox+c5 Eptg7AmFAmI9WPG8VMIxdXpiQHjr++C4HRRsKw45kPCzf7omtnL1wR2jGKOpIJCo MMN7V+2iJe9ChktXzoM7kExTSgNZtuPOHdtdp7eWXO5QS9OI1YSlUZ0dAMV9QZcx R21OP7401hTkwhmu4f+BtKCVS0atMc2PJ8fBCLaMQYrOCn+KknSolIakmAWiPem1 8MqO6oFlXxWDkwQmfXTXZZ6ebi8A7G3tbweE+EIq880zpHDL7CB4L3FvSRAcCFO7 GnXr5+XLNO8bOWQCjjVU9VIfBCyc6+Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:04 2025 by rpki-client