$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa File: 34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa (raw, json) Hash identifier: URsEZNZvdi6scVdL1ZN1gV40Ot6w+QcWbzxASgM09ns= Subject key identifier: 58:21:C9:49:73:9D:E6:5D:47:DD:DE:07:00:F5:03:71:9F:1E:4B:83 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C09E21B923E4376618900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:09:e2:1b:92:3e:43:76:61:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=ad41ddd2-7890-4f02-832d-9e69a7e09377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:66:ce:ab:5f:8b:1a:f1:4d:1a:1d:7b:30:4f: 55:e2:fd:2e:89:e7:f0:2c:56:21:12:17:a1:2b:ff: 35:02:9c:a4:ba:58:32:ec:70:47:82:74:6c:46:6c: 9a:e0:d5:1d:4d:26:c4:c7:fa:5c:89:d2:d3:9c:e8: 23:47:c1:a1:27:be:52:09:ba:f6:b0:45:f6:90:a5: 9d:3c:8d:8a:b4:65:98:43:21:40:95:da:87:f7:d6: 67:d7:d9:0b:df:1a:ed:d3:64:f8:e2:a2:e0:e8:a7: af:8a:39:8c:9c:ae:23:3b:0d:45:08:5a:b4:83:df: 91:48:ff:c4:7d:9c:33:a2:e5:96:d3:87:b9:d8:86: b7:ad:87:59:79:bf:d9:b3:4b:a6:7f:c4:1e:f0:5d: 05:4e:a4:56:5e:0b:1c:32:60:b0:4c:74:2a:91:47: ed:d6:df:04:e2:ff:28:92:70:2d:ab:e4:11:ab:60: 22:80:c7:af:d0:9a:ad:a0:81:1e:4a:b3:83:ab:3d: b9:02:5d:d1:50:de:a4:67:f7:41:24:f0:39:7b:6d: ce:4a:db:29:3a:3d:a4:5e:d9:b6:bc:f4:d0:3f:fa: cd:f5:ca:2b:ff:0e:ad:2a:52:f4:2c:3e:42:f1:ac: 37:c2:37:41:f2:9b:35:e1:91:db:5d:73:67:67:c8: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:21:C9:49:73:9D:E6:5D:47:DD:DE:07:00:F5:03:71:9F:1E:4B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34fec83d-6cef-34d4-97c0-8ffc18ca10b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:42:32:a9:2c:57:a6:84:ff:dc:02:83:31:78:a5:d7:78:b9: 0b:38:c9:e0:d4:56:24:ea:e3:e6:66:f4:f6:0a:da:21:c1:0d: 96:9e:c3:33:f8:17:68:00:b8:5a:b3:a8:28:e1:2b:f7:c8:51: 6b:b9:7c:c8:58:18:8d:31:d5:a6:cf:97:07:32:b3:d4:b1:9f: f4:a9:ed:cc:07:70:f6:56:c9:6e:86:a1:fd:f6:80:13:03:31: a0:73:d7:6b:80:47:b9:e4:2c:2a:55:85:2d:a3:9a:d4:2a:c7: a0:9a:9a:ef:80:d5:7b:e2:21:c9:cd:5a:32:8b:af:42:6b:10: 9e:cb:b4:69:6b:10:24:f0:b2:52:91:8e:bd:7d:61:58:e9:0e: b6:71:6f:eb:de:20:34:06:0a:32:e6:97:dd:41:84:17:45:72: 71:72:ca:77:cc:13:f8:e0:ae:03:cc:a6:d3:2d:4b:00:28:27: 29:69:eb:a9:35:93:9b:e1:cb:f0:06:71:44:81:6b:99:04:05: aa:08:0e:6f:cd:94:c9:ac:d6:25:ae:94:3a:de:8b:0a:89:2c: 4c:03:70:50:8d:df:be:ee:3d:7d:57:b9:95:c6:ed:44:9b:26: 97:c8:58:6b:84:0b:5f:a1:b4:6a:42:26:bc:36:90:66:0c:ad: ca:21:64:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAniG5I+Q3ZhiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk YWQ0MWRkZDItNzg5MC00ZjAyLTgzMmQtOWU2OWE3ZTA5Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGbOq1+LGvFNGh17ME9V4v0uiefwLFYhEheh K/81Apykulgy7HBHgnRsRmya4NUdTSbEx/pcidLTnOgjR8GhJ75SCbr2sEX2kKWd PI2KtGWYQyFAldqH99Zn19kL3xrt02T44qLg6KevijmMnK4jOw1FCFq0g9+RSP/E fZwzouWW04e52Ia3rYdZeb/Zs0umf8Qe8F0FTqRWXgscMmCwTHQqkUft1t8E4v8o knAtq+QRq2AigMev0JqtoIEeSrODqz25Al3RUN6kZ/dBJPA5e23OStspOj2kXtm2 vPTQP/rN9cor/w6tKlL0LD5C8aw3wjdB8ps14ZHbXXNnZ8hDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFghyUlzneZdR93eBwD1A3GfHkuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzRmZWM4M2QtNmNlZi0z NGQ0LTk3YzAtOGZmYzE4Y2ExMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBCMqksV6aE/9wCgzF4pdd4uQs4yeDUViTq4+Zm9PYK2iHBDZaewzP4 F2gAuFqzqCjhK/fIUWu5fMhYGI0x1abPlwcys9Sxn/Sp7cwHcPZWyW6Gof32gBMD MaBz12uAR7nkLCpVhS2jmtQqx6Camu+A1XviIcnNWjKLr0JrEJ7LtGlrECTwslKR jr19YVjpDrZxb+veIDQGCjLml91BhBdFcnFyynfME/jgrgPMptMtSwAoJylp66k1 k5vhy/AGcUSBa5kEBaoIDm/NlMms1iWulDreiwqJLEwDcFCN377uPX1XuZXG7USb JpfIWGuEC1+htGpCJrw2kGYMrcohZGs= -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:32 2025 by rpki-client