$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa File: 357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa (raw, json) Hash identifier: wcWkiIm9mX4jgb1/UPCOzBdL0CZ6/tbOjPlpfD4YICg= Subject key identifier: 05:D7:6D:EE:17:C8:8C:C5:B4:90:8F:BA:60:92:32:E6:2D:8D:F8:0D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818B4F763051FFEF115E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.64.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8b:4f:76:30:51:ff:ef:11:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=cf089e87-3c29-4656-8efb-e1d573d8988d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:97:6b:9d:b0:22:ba:d2:59:3a:e0:16:02: 30:ce:40:23:a9:a6:b4:95:8a:e1:08:4f:d4:73:13: d8:75:43:3f:03:39:b8:cd:d4:3c:05:f1:71:ad:f5: 85:01:3c:7d:1f:f6:d6:6e:f9:af:68:b0:72:d9:aa: c3:f0:a4:9b:66:2b:0b:4d:44:56:67:39:c8:61:20: 45:73:8c:1e:bd:07:24:0a:fa:5f:c7:8f:9d:75:7b: 3b:58:42:e0:85:51:45:58:ae:85:d2:0d:36:1b:06: 53:dc:16:c7:91:21:91:9e:75:62:f8:9d:86:d6:ca: fe:11:fe:e6:56:55:30:a7:fd:41:04:9d:69:0f:a2: 63:5b:8d:b9:5a:e8:1d:ac:c3:15:70:b5:9f:71:38: da:0f:a3:22:27:d2:8b:c7:79:f3:7d:09:93:c2:25: 9b:ad:a4:f7:33:5b:af:61:9b:d4:5f:a2:00:1f:b2: bd:9c:21:9c:2f:74:2c:e3:69:19:ea:b2:ca:d1:c6: d8:66:68:79:d5:6e:fa:98:c9:7e:e2:66:75:64:78: 5c:75:f2:33:de:1b:ee:89:d3:50:53:10:f8:c2:9d: 1e:c1:90:00:80:1b:f5:89:2d:9a:0c:01:fd:4d:cd: bd:f8:dc:8b:6f:b8:f3:ec:70:20:23:ed:0a:76:42: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D7:6D:EE:17:C8:8C:C5:B4:90:8F:BA:60:92:32:E6:2D:8D:F8:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/357ba2a2-7d1d-32f0-a8bd-ee55a9ff505a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:db:fc:5a:9f:69:20:dc:fc:a6:10:ce:50:7f:74:e7:f2:38: 0e:7d:04:68:6a:29:0b:42:91:e1:40:20:22:5a:fd:8a:f5:08: dc:00:a2:4e:34:2d:de:91:a4:b9:55:e6:c6:2f:66:a0:f3:3e: 67:a6:79:93:a2:04:e9:a3:c7:1e:4d:14:67:22:c4:23:3b:d6: f3:ca:04:83:7c:4f:a3:24:3e:40:4b:99:0d:f0:4b:29:e5:94: 41:8e:07:2c:fb:ad:24:69:f5:e7:ca:0d:fb:62:ad:ae:25:df: 61:3b:58:68:c0:19:06:e3:1c:2c:b4:c5:21:8f:74:80:b4:7f: 57:af:68:d4:41:b8:76:1f:82:7b:0d:0f:02:ea:28:41:b1:71: 6c:29:7f:85:d8:38:cb:5b:5d:2e:eb:7e:c2:43:29:db:a5:15: 0f:df:3d:1f:26:66:16:eb:d5:ca:00:f2:2b:45:c2:1c:b2:bb: c6:5d:1c:f3:cf:7c:52:b7:35:ec:30:2a:be:b8:48:5e:34:9a: 8a:d8:b0:6c:03:5e:ef:5e:6c:4b:1f:43:ee:4b:62:62:be:e2: 39:6e:48:78:3a:af:a1:94:b6:7b:50:88:a2:11:2a:58:af:cc: 87:5c:fa:05:52:84:d8:9d:43:7d:f5:e5:72:4a:d7:9f:f0:75: 4d:c1:a5:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYtPdjBR/+8RXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk Y2YwODllODctM2MyOS00NjU2LThlZmItZTFkNTczZDg5ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso2Xa52wIrrSWTrgFgIwzkAjqaa0lYrhCE/U cxPYdUM/Azm4zdQ8BfFxrfWFATx9H/bWbvmvaLBy2arD8KSbZisLTURWZznIYSBF c4wevQckCvpfx4+ddXs7WELghVFFWK6F0g02GwZT3BbHkSGRnnVi+J2G1sr+Ef7m VlUwp/1BBJ1pD6JjW425WugdrMMVcLWfcTjaD6MiJ9KLx3nzfQmTwiWbraT3M1uv YZvUX6IAH7K9nCGcL3Qs42kZ6rLK0cbYZmh51W76mMl+4mZ1ZHhcdfIz3hvuidNQ UxD4wp0ewZAAgBv1iS2aDAH9Tc29+NyLb7jz7HAgI+0KdkKSiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXXbe4XyIzFtJCPumCSMuYtjfgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzU3YmEyYTItN2QxZC0z MmYwLWE4YmQtZWU1NWE5ZmY1MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErECQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfb/FqfaSDc/KYQzlB/dOfyOA59BGhqKQtCkeFAICJa/Yr1CNwAok40 Ld6RpLlV5sYvZqDzPmemeZOiBOmjxx5NFGcixCM71vPKBIN8T6MkPkBLmQ3wSynl lEGOByz7rSRp9efKDftira4l32E7WGjAGQbjHCy0xSGPdIC0f1evaNRBuHYfgnsN DwLqKEGxcWwpf4XYOMtbXS7rfsJDKdulFQ/fPR8mZhbr1coA8itFwhyyu8ZdHPPP fFK3NewwKr64SF40morYsGwDXu9ebEsfQ+5LYmK+4jluSHg6r6GUtntQiKIRKliv zIdc+gVShNidQ3315XJK15/wdU3BpTY= -----END CERTIFICATE-----Generated at Sat Apr 5 06:42:00 2025 by rpki-client