$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/325d1ed0-3e8d-3abb-aa3c-6109e8eb2b52.roa File: 325d1ed0-3e8d-3abb-aa3c-6109e8eb2b52.roa (raw, json) Hash identifier: sRjCOcPref1QRNRid6a6sSt9jyTuGQ82lF/sFkbAil0= Subject key identifier: 69:95:5A:9C:7D:1E:1E:B0:7B:87:C6:C5:2D:40:D5:14:1B:9D:E5:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69C8059E4EB6E80519B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/325d1ed0-3e8d-3abb-aa3c-6109e8eb2b52.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9c:80:59:e4:eb:6e:80:51:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=dd26e5ef-01e8-4168-82d5-dfa0779877ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:82:5c:a6:3b:9d:f9:d1:91:f8:04:4f:51: ce:3b:40:3d:b9:36:5b:a5:b5:69:ce:31:06:3f:2d: f1:3f:76:74:6a:16:72:cb:2e:2e:cd:0b:aa:06:f7: 62:ea:13:34:fa:57:17:0f:9c:77:54:09:ef:25:63: 72:8e:9a:19:61:32:3d:f4:58:dd:41:52:5e:5e:7e: e4:71:82:b9:e4:67:10:93:21:a5:e8:a2:e8:f6:e0: c3:d7:2c:7b:be:43:0d:a7:ff:8f:a8:61:52:69:68: 6f:e1:f6:fb:e0:49:47:bf:fc:7c:f4:9e:a8:17:1d: 40:96:61:60:27:1f:09:a9:3c:8b:2d:45:35:76:b7: 74:89:7a:4c:9f:10:c8:f8:49:fb:48:0f:cd:59:0e: 0b:96:83:d4:62:46:2a:08:c5:52:54:97:09:b6:9a: fb:58:97:f8:99:21:2e:cd:e1:9a:9c:32:47:6f:f0: e1:d2:c6:2c:6c:9c:77:61:bd:75:a2:f8:03:48:e7: e7:77:20:d8:aa:24:c8:2d:f3:05:c2:f7:b7:96:5f: 96:a9:d8:49:e3:cb:b3:e3:e1:c0:ee:34:50:22:ad: 2d:35:cb:c6:ae:c6:fe:2a:18:ed:e0:68:00:46:40: d0:78:4c:de:cb:8e:51:17:72:e5:52:1e:a9:0a:f1: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:95:5A:9C:7D:1E:1E:B0:7B:87:C6:C5:2D:40:D5:14:1B:9D:E5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/325d1ed0-3e8d-3abb-aa3c-6109e8eb2b52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:71:29:ff:69:15:f0:a2:fb:57:d4:1e:43:89:d7:41:cd:37: cf:e9:b1:07:2d:32:4e:c7:9c:26:88:18:e7:17:ba:a5:76:de: 40:18:9e:c2:64:e1:ac:e4:78:9b:32:f0:10:36:a7:44:4f:ff: af:c3:1c:d1:88:52:b0:2c:1b:e5:69:b1:f1:5b:ab:b4:dd:bc: 7e:2a:b2:a2:4c:40:f8:86:95:77:db:db:54:be:41:f5:4f:42: ca:7f:da:2d:87:30:b3:ce:61:82:22:8f:57:12:7a:0d:80:bf: 2e:f1:de:27:4f:ce:1b:4b:b0:4a:cb:6f:51:2f:79:7d:e6:a0: 35:f9:af:66:43:c9:f3:16:b8:0d:07:bf:4e:99:af:70:2a:cf: f7:71:6b:96:ef:15:32:cd:d7:21:a3:3b:eb:31:21:d6:6e:23: 14:4e:13:a5:ba:2c:0d:ee:61:43:b3:5b:03:f9:83:f9:b9:a1: f1:52:cb:72:db:a8:4e:7c:0a:ca:e6:f4:7c:69:dc:aa:a4:5a: 62:6a:29:3b:fe:7e:ae:2b:ae:a8:65:57:6f:46:32:be:c2:60: d4:26:16:5e:7d:3a:3f:c2:11:9c:bc:50:80:2a:04:77:91:84: 6a:37:fe:eb:9c:7f:ed:80:5d:b1:fd:47:dd:ab:5f:32:35:f7: 91:2f:7e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pyAWeTrboBRm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZGQyNmU1ZWYtMDFlOC00MTY4LTgyZDUtZGZhMDc3OTg3N2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1OCXKY7nfnRkfgET1HOO0A9uTZbpbVpzjEG Py3xP3Z0ahZyyy4uzQuqBvdi6hM0+lcXD5x3VAnvJWNyjpoZYTI99FjdQVJeXn7k cYK55GcQkyGl6KLo9uDD1yx7vkMNp/+PqGFSaWhv4fb74ElHv/x89J6oFx1AlmFg Jx8JqTyLLUU1drd0iXpMnxDI+En7SA/NWQ4LloPUYkYqCMVSVJcJtpr7WJf4mSEu zeGanDJHb/Dh0sYsbJx3Yb11ovgDSOfndyDYqiTILfMFwve3ll+WqdhJ48uz4+HA 7jRQIq0tNcvGrsb+Khjt4GgARkDQeEzey45RF3LlUh6pCvEo/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmVWpx9Hh6we4fGxS1A1RQbneVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzI1ZDFlZDAtM2U4ZC0z YWJiLWFhM2MtNjEwOWU4ZWIyYjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrESUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdxKf9pFfCi+1fUHkOJ10HNN8/psQctMk7HnCaIGOcXuqV23kAYnsJk 4azkeJsy8BA2p0RP/6/DHNGIUrAsG+VpsfFbq7TdvH4qsqJMQPiGlXfb21S+QfVP Qsp/2i2HMLPOYYIij1cSeg2Avy7x3idPzhtLsErLb1EveX3moDX5r2ZDyfMWuA0H v06Zr3Aqz/dxa5bvFTLN1yGjO+sxIdZuIxROE6W6LA3uYUOzWwP5g/m5ofFSy3Lb qE58Csrm9Hxp3KqkWmJqKTv+fq4rrqhlV29GMr7CYNQmFl59Oj/CEZy8UIAqBHeR hGo3/uucf+2AXbH9R92rXzI195EvfsA= -----END CERTIFICATE-----Generated at Sun Apr 6 11:51:54 2025 by rpki-client