$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/346b0604-a4dd-345c-9c23-8b8c6112222e.roa File: 346b0604-a4dd-345c-9c23-8b8c6112222e.roa (raw, json) Hash identifier: iWZRB67VXVxTtCcaWms30E1kr0dI+KekC1sf0tY8Q5k= Subject key identifier: 25:AE:14:A3:84:8E:A3:04:65:F0:28:A1:2C:42:2E:79:D0:27:F0:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858496E497C13C64F24E0681A47A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/346b0604-a4dd-345c-9c23-8b8c6112222e.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 13335 IP address blocks: 172.68.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:7c:13:c6:4f:24:e0:68:1a:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=0843ca98-8991-4a9c-812b-46a098dff332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:c1:42:3d:c5:a8:67:1c:eb:a3:7c:64:57: 20:72:14:56:2f:30:e4:9b:ab:a6:f4:84:e1:2a:ba: 1c:9c:d7:7c:d1:05:2d:5d:66:d2:bb:36:78:98:27: c1:71:2c:b3:3e:70:4b:1a:a0:52:56:71:94:49:5c: 02:56:61:10:d1:51:40:44:8a:41:09:27:9d:76:7d: 63:41:9a:4d:78:91:9c:4c:bf:aa:bb:fe:4f:c3:ab: ed:77:1c:f2:38:5b:7d:3d:26:d8:2f:9d:28:22:c6: 7b:e9:3f:84:f5:b2:44:c3:a6:8a:0e:a2:94:1a:af: 97:a8:29:26:da:cd:cc:13:4c:e7:16:5e:10:0e:44: e0:c8:a3:d7:14:c7:20:87:5f:99:e8:d6:32:4e:a9: 65:fb:bb:b5:f5:77:b9:53:40:bc:73:1c:69:df:71: b4:8d:59:f1:0b:15:67:21:4d:0f:5e:bd:17:20:af: d3:d6:15:9f:3e:57:43:5f:33:cf:0b:bd:89:37:48: ca:9e:da:fb:8a:25:f8:6f:dd:76:f1:53:d8:33:92: c2:45:9d:6d:74:ab:1b:31:97:21:08:c3:24:38:b6: 50:89:3e:3d:76:00:59:de:bc:0a:8b:6a:f1:38:53: 74:8d:c1:1c:83:08:c1:b6:8d:3f:a8:1e:dc:09:18: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AE:14:A3:84:8E:A3:04:65:F0:28:A1:2C:42:2E:79:D0:27:F0:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/346b0604-a4dd-345c-9c23-8b8c6112222e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ac:5a:df:3f:3b:99:c2:d3:f5:10:7c:65:67:aa:59:97:8c: d4:32:43:b3:37:a4:3c:4d:15:44:b2:23:12:63:2c:78:22:8a: 83:58:51:81:e9:f2:e1:b6:af:6d:b1:23:ad:9c:31:97:66:99: 88:55:f0:44:e7:31:02:63:34:d3:42:d3:43:88:5f:48:bc:b0: d6:5f:53:bd:a5:c8:7a:59:ff:32:d3:4d:dd:58:03:f2:19:72: ff:0f:9a:f1:f2:26:23:3d:5f:fb:30:dc:53:88:b4:ce:9e:15: b9:57:8d:15:1e:df:a2:96:01:f9:a8:01:da:a5:8b:a9:fc:b5: a6:58:e1:47:a8:47:bd:6d:4e:3e:cb:05:e0:ba:37:5f:51:44: 91:38:e2:ae:b4:96:7d:ab:44:d9:21:09:4e:6a:c2:8a:1c:25: 8c:1e:00:14:3c:8c:74:24:d5:0e:f8:a1:72:bb:53:5f:2e:4d: 4f:fc:db:5c:4c:d0:d1:19:c6:94:46:4e:d4:5d:b9:95:dc:3b: 67:d9:45:84:8d:b5:be:8f:ed:a4:cf:eb:43:0b:d8:b4:4a:90: 22:1d:b7:9c:f9:f0:58:03:64:75:5b:79:e8:10:20:57:72:ab: ca:31:86:df:a4:1c:44:6d:a6:aa:e2:ed:f2:df:59:ee:f1:45: 24:60:f5:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSXwTxk8k4GgaR6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk MDg0M2NhOTgtODk5MS00YTljLTgxMmItNDZhMDk4ZGZmMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmXBQj3FqGcc66N8ZFcgchRWLzDkm6um9ITh KrocnNd80QUtXWbSuzZ4mCfBcSyzPnBLGqBSVnGUSVwCVmEQ0VFARIpBCSeddn1j QZpNeJGcTL+qu/5Pw6vtdxzyOFt9PSbYL50oIsZ76T+E9bJEw6aKDqKUGq+XqCkm 2s3ME0znFl4QDkTgyKPXFMcgh1+Z6NYyTqll+7u19Xe5U0C8cxxp33G0jVnxCxVn IU0PXr0XIK/T1hWfPldDXzPPC72JN0jKntr7iiX4b9128VPYM5LCRZ1tdKsbMZch CMMkOLZQiT49dgBZ3rwKi2rxOFN0jcEcgwjBto0/qB7cCRgxpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWuFKOEjqMEZfAooSxCLnnQJ/DIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzQ2YjA2MDQtYTRkZC0z NDVjLTljMjMtOGI4YzYxMTIyMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWsWt8/O5nC0/UQfGVnqlmXjNQyQ7M3pDxNFUSyIxJjLHgiioNYUYHp 8uG2r22xI62cMZdmmYhV8ETnMQJjNNNC00OIX0i8sNZfU72lyHpZ/zLTTd1YA/IZ cv8PmvHyJiM9X/sw3FOItM6eFblXjRUe36KWAfmoAdqli6n8taZY4UeoR71tTj7L BeC6N19RRJE44q60ln2rRNkhCU5qwoocJYweABQ8jHQk1Q74oXK7U18uTU/821xM 0NEZxpRGTtRduZXcO2fZRYSNtb6P7aTP60ML2LRKkCIdt5z58FgDZHVbeegQIFdy q8oxht+kHERtpqri7fLfWe7xRSRg9dc= -----END CERTIFICATE-----Generated at Thu Apr 10 07:35:44 2025 by rpki-client