$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c5bc852-5a36-3b63-9420-58962a95c3e3.roa File: 2c5bc852-5a36-3b63-9420-58962a95c3e3.roa (raw, json) Hash identifier: Cv7vJYjK8hE2LQECivrv9c/JohbsIL65JseLieu8E74= Subject key identifier: 0F:7B:70:D3:EE:B5:47:5F:F3:0E:6C:07:99:B8:7F:7A:35:B9:AD:AB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E16DF3E6DBD2AE128803C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c5bc852-5a36-3b63-9420-58962a95c3e3.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.70.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:6d:f3:e6:db:d2:ae:12:88:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=378d93ca-2d67-4b52-bd74-2696a7e5b601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:4b:a1:68:c7:02:6c:df:b2:73:41:58:b3: dd:59:fc:20:7b:75:a4:84:69:fc:ff:6d:89:eb:ff: 43:9a:c8:c8:70:e3:a3:f6:f3:79:68:47:d8:db:ac: cb:95:6a:6a:72:03:14:e9:5d:3e:b2:d1:cb:a6:cf: ea:b0:f3:59:12:fc:3e:c4:df:47:93:5d:da:0b:fd: 7c:51:73:21:0b:a2:e8:e1:3f:66:8e:e3:39:9e:44: 56:38:db:a5:dd:ad:12:1f:5f:f5:58:89:da:d1:d3: f3:27:d1:34:a5:16:ec:89:05:05:22:4c:85:eb:14: ac:6b:4b:c6:14:d2:f2:01:61:cc:63:a4:56:e1:30: 3f:9c:56:e7:06:ca:59:83:2d:b2:77:8a:56:00:3e: 20:f6:c4:d6:d7:ac:82:13:df:6c:7a:09:d9:54:95: f5:40:f0:8f:a4:13:ee:01:c6:c8:af:83:3c:78:b0: 6e:67:96:78:b0:91:1a:f8:38:f4:0a:f9:f9:9a:6f: 97:6d:5d:95:9a:0e:2e:1e:5c:9b:e3:0c:ac:c6:7f: 5c:46:85:63:18:0d:bc:d3:cf:90:4b:06:6e:f8:52: d2:b6:e0:4d:be:7f:0d:16:84:c8:c9:dd:f9:cc:3d: b9:af:cf:d9:ff:e9:62:8b:31:c7:20:a3:c9:35:86: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7B:70:D3:EE:B5:47:5F:F3:0E:6C:07:99:B8:7F:7A:35:B9:AD:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2c5bc852-5a36-3b63-9420-58962a95c3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:fd:14:b0:e1:12:ee:70:fa:93:e2:32:82:ed:c2:ec:03:f2: 97:d8:8a:54:42:4d:b6:c0:ef:ea:80:b0:16:00:3a:68:f8:2b: a4:a2:02:6c:d3:8a:d1:ef:2c:a8:0e:f4:fa:a3:f4:0b:6e:13: 78:81:b8:ae:e4:06:9e:a4:fe:2e:20:cd:3b:c6:70:a4:d2:40: 00:0a:a7:37:34:05:46:b4:ec:92:e5:6b:01:46:08:f9:37:88: 5e:bc:b3:42:43:24:64:86:14:44:fb:e5:15:0d:a6:af:be:5d: 8c:97:8e:28:d7:ca:e3:a7:35:05:24:27:d5:42:a8:60:16:04: 40:ec:37:e4:06:3d:24:ca:05:7a:a4:13:22:11:fb:3f:3a:92: 46:1f:a9:21:68:5f:d3:50:3c:05:73:05:f9:63:1e:0a:ee:61: 65:0d:79:d5:1e:d8:e9:cd:9b:36:8e:cc:d7:40:69:28:11:16: 4c:15:6f:7e:98:be:07:5f:df:4f:52:2d:fa:84:3d:8f:14:7a: ad:bd:e6:27:58:7e:e4:33:a3:7f:b6:1b:bc:2f:b5:92:6f:be: 6f:b6:37:48:d0:c3:a2:36:ea:f1:91:eb:63:90:d7:41:07:c6: 7c:37:0e:52:9f:27:20:d1:9f:0a:d4:88:f6:32:ba:ee:ed:8c: 12:6f:f0:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4W3z5tvSrhKIA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk Mzc4ZDkzY2EtMmQ2Ny00YjUyLWJkNzQtMjY5NmE3ZTViNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusdLoWjHAmzfsnNBWLPdWfwge3WkhGn8/22J 6/9DmsjIcOOj9vN5aEfY26zLlWpqcgMU6V0+stHLps/qsPNZEvw+xN9Hk13aC/18 UXMhC6Lo4T9mjuM5nkRWONul3a0SH1/1WIna0dPzJ9E0pRbsiQUFIkyF6xSsa0vG FNLyAWHMY6RW4TA/nFbnBspZgy2yd4pWAD4g9sTW16yCE99segnZVJX1QPCPpBPu AcbIr4M8eLBuZ5Z4sJEa+Dj0Cvn5mm+XbV2Vmg4uHlyb4wysxn9cRoVjGA2808+Q SwZu+FLStuBNvn8NFoTIyd35zD25r8/Z/+liizHHIKPJNYZB1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA97cNPutUdf8w5sB5m4f3o1ua2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmM1YmM4NTItNWEzNi0z YjYzLTk0MjAtNTg5NjJhOTVjM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/9FLDhEu5w+pPiMoLtwuwD8pfYilRCTbbA7+qAsBYAOmj4K6SiAmzT itHvLKgO9Pqj9AtuE3iBuK7kBp6k/i4gzTvGcKTSQAAKpzc0BUa07JLlawFGCPk3 iF68s0JDJGSGFET75RUNpq++XYyXjijXyuOnNQUkJ9VCqGAWBEDsN+QGPSTKBXqk EyIR+z86kkYfqSFoX9NQPAVzBfljHgruYWUNedUe2OnNmzaOzNdAaSgRFkwVb36Y vgdf309SLfqEPY8Ueq295idYfuQzo3+2G7wvtZJvvm+2N0jQw6I26vGR62OQ10EH xnw3DlKfJyDRnwrUiPYyuu7tjBJv8OE= -----END CERTIFICATE-----Generated at Sat Apr 5 05:01:12 2025 by rpki-client