$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34d5c6be-0066-3764-af05-db0e88c7a96c.roa File: 34d5c6be-0066-3764-af05-db0e88c7a96c.roa (raw, json) Hash identifier: F64NEuSzzgfvz219BROCfxUi0pEXAHMVP3J3O3TS4nk= Subject key identifier: BF:AB:3F:3B:1E:B3:EE:B3:6A:E4:81:81:5E:83:C8:63:48:2F:88:60 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818E454CEE62AD8310F680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34d5c6be-0066-3764-af05-db0e88c7a96c.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.67.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8e:45:4c:ee:62:ad:83:10:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=62e9746b-66af-4cda-a847-8e46016d2417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:f9:3a:12:8b:3f:df:0d:0c:1a:ee:16:f0: cd:8c:c4:33:d7:d7:e1:58:f2:2f:37:4e:6b:10:72: 21:66:2a:3d:d5:25:1e:f3:c0:75:54:4a:65:61:0d: d3:78:cc:87:09:12:3c:fa:15:a5:c0:22:02:06:29: f2:49:ec:21:8c:9d:ac:cf:32:ce:fb:62:9c:89:2b: a4:1b:2b:ae:c0:de:a5:c3:8c:a1:54:f9:fb:81:68: ca:c1:45:9a:f0:43:a8:2d:eb:20:d0:5d:b2:dc:77: 96:0a:19:64:30:77:e0:f3:e6:e1:ac:28:dd:d4:20: b0:9b:0d:2a:8c:8b:8f:c8:55:10:0b:d5:2a:64:d0: 92:f1:14:0e:9a:37:42:75:d5:13:f6:c9:af:3b:a5: 73:3c:14:f7:ce:9c:eb:a3:14:c9:4a:f4:c6:be:2f: 92:ea:23:5a:59:a7:ec:47:40:f7:ca:98:14:75:97: 7e:6c:44:74:44:0d:3b:b0:67:6a:e9:47:6c:16:11: 45:40:d3:04:f8:54:60:ad:15:0d:a9:ef:03:a6:98: 73:c5:a8:31:34:48:a7:b8:5a:13:83:25:9b:b0:7e: f9:a9:e0:90:b3:4e:c8:e5:0d:07:13:49:ff:b8:53: 42:b0:67:6b:41:86:e2:20:c9:c3:bc:8d:2c:23:0d: 44:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AB:3F:3B:1E:B3:EE:B3:6A:E4:81:81:5E:83:C8:63:48:2F:88:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34d5c6be-0066-3764-af05-db0e88c7a96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.67.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:23:07:59:f7:4c:1e:69:c7:11:f1:52:ab:f8:fa:d6:04:ab: 9b:68:c3:1d:68:cb:86:51:f9:e1:52:a4:e7:b9:17:81:0d:28: 2c:3f:ff:4f:68:bc:a5:41:59:4c:f1:53:a5:bf:04:d7:b4:b0: 7b:b9:2e:41:fd:9a:ff:bf:36:95:8f:c0:3a:52:74:41:fe:22: f0:1d:f6:1c:7a:f4:80:21:b7:e3:92:fc:f6:b5:b2:8e:a3:0b: 75:54:87:27:3b:da:fb:ca:27:d1:9a:20:e9:cb:ee:4b:59:3b: a8:30:5c:83:86:4d:f0:97:fd:a4:85:f4:39:bd:2a:91:3b:39: 61:d6:42:b2:61:d4:79:f0:0b:32:b7:1c:dc:8a:e1:32:1d:95: 69:a0:f8:8c:5a:3d:11:ad:29:9b:eb:9a:79:37:2a:7c:ff:4a: 85:9a:b6:a5:3f:f8:ee:bf:4d:f0:6b:98:6f:8f:15:13:bf:bc: ba:f9:31:0a:68:54:86:90:08:3c:e8:37:2c:68:01:fd:a9:cf: 98:d3:2e:73:15:28:5e:75:9e:4c:0c:36:01:bf:9e:99:87:48: 79:57:ff:8e:26:38:b4:b3:11:5a:57:37:64:2b:a0:e3:2f:9b: d4:4b:00:cd:b9:cc:11:99:29:ec:70:e9:3e:2e:73:7a:7d:7b: 2d:b9:b2:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgY5FTO5irYMQ9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NjJlOTc0NmItNjZhZi00Y2RhLWE4NDctOGU0NjAxNmQyNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhL5OhKLP98NDBruFvDNjMQz19fhWPIvN05r EHIhZio91SUe88B1VEplYQ3TeMyHCRI8+hWlwCICBinySewhjJ2szzLO+2KciSuk GyuuwN6lw4yhVPn7gWjKwUWa8EOoLesg0F2y3HeWChlkMHfg8+bhrCjd1CCwmw0q jIuPyFUQC9UqZNCS8RQOmjdCddUT9smvO6VzPBT3zpzroxTJSvTGvi+S6iNaWafs R0D3ypgUdZd+bER0RA07sGdq6UdsFhFFQNME+FRgrRUNqe8DpphzxagxNEinuFoT gyWbsH75qeCQs07I5Q0HE0n/uFNCsGdrQYbiIMnDvI0sIw1EJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+rPzses+6zauSBgV6DyGNIL4hgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzRkNWM2YmUtMDA2Ni0z NzY0LWFmMDUtZGIwZTg4YzdhOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErENgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0jB1n3TB5pxxHxUqv4+tYEq5towx1oy4ZR+eFSpOe5F4ENKCw//09o vKVBWUzxU6W/BNe0sHu5LkH9mv+/NpWPwDpSdEH+IvAd9hx69IAht+OS/Pa1so6j C3VUhyc72vvKJ9GaIOnL7ktZO6gwXIOGTfCX/aSF9Dm9KpE7OWHWQrJh1HnwCzK3 HNyK4TIdlWmg+IxaPRGtKZvrmnk3Knz/SoWatqU/+O6/TfBrmG+PFRO/vLr5MQpo VIaQCDzoNyxoAf2pz5jTLnMVKF51nkwMNgG/npmHSHlX/44mOLSzEVpXN2QroOMv m9RLAM25zBGZKexw6T4uc3p9ey25sjI= -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:45 2025 by rpki-client