$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3725c9bb-b9b7-38e3-8fd4-6a035871509a.roa File: 3725c9bb-b9b7-38e3-8fd4-6a035871509a.roa (raw, json) Hash identifier: CdS3zbHK6/PQAabbjBDTx8pJ7QnFj8WvIBGM7Lpk44c= Subject key identifier: DD:02:17:D2:27:04:83:2F:95:37:D5:60:A6:BA:24:3B:91:31:58:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E166D671C3010CAAC25500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3725c9bb-b9b7-38e3-8fd4-6a035871509a.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.70.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:66:d6:71:c3:01:0c:aa:c2:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=3f9beba2-3be7-415a-84c4-dfb95756c05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:8d:80:3f:9c:9f:b9:a2:34:42:d0:08:2b: 1f:c4:db:15:b1:41:56:c8:19:80:88:9d:b1:87:8c: d6:a0:99:46:08:e2:73:7f:50:cc:40:98:24:fd:05: a9:b6:66:5a:0f:95:46:29:92:df:b8:7b:4a:5c:58: 2e:b4:8e:b9:29:a0:9d:c9:cf:98:64:e8:ca:2d:92: a8:eb:a4:bd:d3:f8:4e:91:9a:d8:93:d8:fc:3a:6b: 26:29:85:84:17:9d:3d:a7:29:a9:92:11:0d:3b:65: df:e7:31:78:d5:73:34:13:a2:64:ba:bd:04:61:74: a6:02:4e:89:74:9b:ca:d4:30:15:97:e9:a2:66:f4: 24:bc:c5:bb:fa:80:03:13:40:2a:cc:21:0b:20:b5: 79:e8:77:94:a7:4c:a2:77:e8:9b:39:0f:f8:7b:4f: 84:5c:22:10:85:a2:17:01:2f:e3:e0:34:aa:27:5b: 80:e1:03:6c:bc:a5:dc:c1:7d:cf:7a:70:39:b5:13: 4b:e7:f7:43:61:2a:ae:22:c4:d6:4e:92:67:c2:8b: 1a:40:cf:29:54:f7:f2:5d:0a:60:98:2d:66:4f:ff: 6c:ec:c4:3c:9b:53:73:47:b4:a1:00:55:ff:dc:33: a3:25:c5:80:30:e0:c3:12:9e:52:b6:bf:2b:2c:64: 5d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:02:17:D2:27:04:83:2F:95:37:D5:60:A6:BA:24:3B:91:31:58:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3725c9bb-b9b7-38e3-8fd4-6a035871509a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b3:6c:be:f8:61:7e:7a:d9:47:08:41:9e:81:99:5b:29:30: 29:20:6f:29:2d:12:e0:b6:e2:11:e4:6c:bb:21:3e:d2:d7:2e: 54:05:32:da:62:c5:b6:5f:69:23:14:ec:5e:f5:7a:55:31:26: 96:ed:f1:6b:99:7d:ed:21:7d:c9:6d:b8:45:9a:2e:02:d7:26: d3:8b:d7:90:65:a6:ff:25:00:b7:d0:e3:f5:0e:eb:6f:f9:99: 83:ab:6c:f3:ca:0b:80:c5:fb:0f:9e:0f:12:8b:50:d4:33:eb: 40:c2:ca:08:43:06:75:9c:d6:a4:92:95:5e:6d:8e:ca:a3:1c: 93:98:5d:3f:4c:f5:21:5d:40:51:7f:06:cb:be:cf:32:9b:e4: 0c:34:82:48:c0:a6:2c:12:30:bc:9d:b5:a6:a9:28:14:5b:c7: dd:9a:f2:58:22:07:c2:8b:93:5e:0c:1d:86:ee:fa:0d:c4:7d: a2:d4:f7:11:f9:f0:e2:2e:6f:48:fa:1e:9b:7d:96:13:29:f9: 25:01:aa:16:a7:64:3a:c5:2b:b4:84:f2:30:7f:db:49:54:fa: a7:c9:04:16:c8:1b:e8:20:b2:ea:c2:93:51:01:5f:96:91:de: 5e:f9:b0:7b:53:6a:16:c9:b5:a3:cf:48:ed:4f:8c:1c:8f:9e: e9:08:59:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4WbWccMBDKrCVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk M2Y5YmViYTItM2JlNy00MTVhLTg0YzQtZGZiOTU3NTZjMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa6NgD+cn7miNELQCCsfxNsVsUFWyBmAiJ2x h4zWoJlGCOJzf1DMQJgk/QWptmZaD5VGKZLfuHtKXFgutI65KaCdyc+YZOjKLZKo 66S90/hOkZrYk9j8OmsmKYWEF509pympkhENO2Xf5zF41XM0E6Jkur0EYXSmAk6J dJvK1DAVl+miZvQkvMW7+oADE0AqzCELILV56HeUp0yid+ibOQ/4e0+EXCIQhaIX AS/j4DSqJ1uA4QNsvKXcwX3PenA5tRNL5/dDYSquIsTWTpJnwosaQM8pVPfyXQpg mC1mT/9s7MQ8m1NzR7ShAFX/3DOjJcWAMODDEp5Str8rLGRdxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0CF9InBIMvlTfVYKa6JDuRMVgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzcyNWM5YmItYjliNy0z OGUzLThmZDQtNmEwMzU4NzE1MDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+zbL74YX562UcIQZ6BmVspMCkgbyktEuC24hHkbLshPtLXLlQFMtpi xbZfaSMU7F71elUxJpbt8WuZfe0hfcltuEWaLgLXJtOL15Blpv8lALfQ4/UO62/5 mYOrbPPKC4DF+w+eDxKLUNQz60DCyghDBnWc1qSSlV5tjsqjHJOYXT9M9SFdQFF/ Bsu+zzKb5Aw0gkjApiwSMLydtaapKBRbx92a8lgiB8KLk14MHYbu+g3EfaLU9xH5 8OIub0j6Hpt9lhMp+SUBqhanZDrFK7SE8jB/20lU+qfJBBbIG+ggsurCk1EBX5aR 3l75sHtTahbJtaPPSO1PjByPnukIWf8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:15:44 2025 by rpki-client