$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e8c213c-8feb-39dd-982a-ad58773612b4.roa File: 2e8c213c-8feb-39dd-982a-ad58773612b4.roa (raw, json) Hash identifier: DH3kWmG/smEaij3tJXqYjQ+ENyolZREtRyTVOosDnmI= Subject key identifier: CF:15:59:DB:7F:24:98:A3:FE:48:A2:36:76:7A:DB:DF:82:42:1E:DB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C098C8A28EC04A2116400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e8c213c-8feb-39dd-982a-ad58773612b4.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:09:8c:8a:28:ec:04:a2:11:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=fbbeb372-f1bd-4671-ad31-c63f3a86fa5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:a4:f8:02:cf:16:a0:f6:56:35:2f:42:a8: be:02:32:4d:bd:cd:1a:2d:92:a1:30:99:8b:42:f0: e0:00:6d:1c:5b:d8:56:f6:a3:9c:6d:5b:af:58:fe: d3:bc:44:12:a9:25:51:22:91:08:50:99:f2:41:39: 83:6f:ef:6d:d8:2b:f5:7e:de:4c:04:d5:c0:04:be: 30:05:8e:f5:29:67:db:04:c2:fc:b6:c7:6b:da:08: 0a:82:bb:5d:3f:88:c0:13:23:b4:48:e3:05:8a:8e: e9:4e:12:81:e4:a0:a5:a9:b7:37:9f:6e:d5:8d:05: 36:81:5a:6c:aa:cc:09:fb:36:c7:22:5c:d4:87:bc: 55:a2:fb:d0:4b:23:33:e9:84:64:c2:9f:4f:ae:da: 01:8f:8d:f2:22:c8:2d:5d:28:0c:1d:d4:4a:37:3a: 47:a2:12:57:db:6d:db:65:69:da:e5:ab:48:bf:88: e5:1d:fd:51:35:d3:20:50:d8:2e:9c:f2:f1:b1:8b: f4:dd:d1:ad:43:c0:c1:02:c4:59:5f:61:9d:41:65: 29:78:d5:0f:31:33:ed:49:46:24:4c:c8:71:6d:e3: 55:39:d7:3c:21:db:d6:85:10:b7:cc:cc:36:73:74: 3d:98:dc:0f:a8:8d:9a:22:f3:dc:30:88:37:6c:03: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:15:59:DB:7F:24:98:A3:FE:48:A2:36:76:7A:DB:DF:82:42:1E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e8c213c-8feb-39dd-982a-ad58773612b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0d:9e:39:a1:78:47:ba:43:8f:5a:96:a5:eb:59:83:bf:62: 71:21:92:9d:57:6f:10:34:69:2c:13:ba:5c:de:7d:01:f3:e5: 4f:64:c2:65:45:a8:e4:d2:b2:3e:b2:b8:0d:e1:8b:86:5e:ac: 77:6a:d8:37:5c:df:a9:4f:ee:0d:45:74:af:69:ef:01:a0:0d: 88:a6:c4:9f:35:04:1a:97:1a:20:e5:84:ec:0b:5b:86:d9:90: 89:09:b4:e7:a4:68:fa:eb:35:c1:60:7a:4d:94:bb:31:ad:07: c2:32:4e:cc:2a:e1:dd:d3:df:31:b4:35:33:ff:9d:21:d6:e7: 3c:a8:f6:e5:d8:32:4e:c9:cd:db:4f:dc:37:4b:81:f7:34:1f: c4:b6:3a:22:7a:48:66:f6:9a:86:2a:d5:2b:02:54:e1:d9:7b: 61:53:58:f0:f9:c7:4f:9a:ea:08:b7:be:14:ec:ec:73:34:53: 4c:2b:e1:e7:f9:b0:9a:ea:e1:0d:9b:10:be:e0:1f:57:15:24: 90:a6:3c:6a:ac:a4:a5:cc:7f:a8:7c:d3:b7:65:6d:d0:67:5a: fe:23:3b:16:51:77:39:42:0b:2c:2e:b9:af:0a:70:97:8e:20: 21:f4:3a:6b:11:c1:dc:09:9b:31:5b:38:1e:5a:fe:8b:66:2b: 48:4b:f0:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAmMiijsBKIRZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZmJiZWIzNzItZjFiZC00NjcxLWFkMzEtYzYzZjNhODZmYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY+k+ALPFqD2VjUvQqi+AjJNvc0aLZKhMJmL QvDgAG0cW9hW9qOcbVuvWP7TvEQSqSVRIpEIUJnyQTmDb+9t2Cv1ft5MBNXABL4w BY71KWfbBML8tsdr2ggKgrtdP4jAEyO0SOMFio7pThKB5KClqbc3n27VjQU2gVps qswJ+zbHIlzUh7xVovvQSyMz6YRkwp9PrtoBj43yIsgtXSgMHdRKNzpHohJX223b ZWna5atIv4jlHf1RNdMgUNgunPLxsYv03dGtQ8DBAsRZX2GdQWUpeNUPMTPtSUYk TMhxbeNVOdc8IdvWhRC3zMw2c3Q9mNwPqI2aIvPcMIg3bAP/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8VWdt/JJij/kiiNnZ629+CQh7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU4YzIxM2MtOGZlYi0z OWRkLTk4MmEtYWQ1ODc3MzYxMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArET6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkNnjmheEe6Q49alqXrWYO/YnEhkp1XbxA0aSwTulzefQHz5U9kwmVF qOTSsj6yuA3hi4ZerHdq2Ddc36lP7g1FdK9p7wGgDYimxJ81BBqXGiDlhOwLW4bZ kIkJtOekaPrrNcFgek2UuzGtB8IyTswq4d3T3zG0NTP/nSHW5zyo9uXYMk7JzdtP 3DdLgfc0H8S2OiJ6SGb2moYq1SsCVOHZe2FTWPD5x0+a6gi3vhTs7HM0U0wr4ef5 sJrq4Q2bEL7gH1cVJJCmPGqspKXMf6h807dlbdBnWv4jOxZRdzlCCywuua8KcJeO ICH0OmsRwdwJmzFbOB5a/otmK0hL8OY= -----END CERTIFICATE-----Generated at Sat Apr 5 08:37:24 2025 by rpki-client