$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa File: 4702aa40-4077-3e55-a44b-27f1cb8e885d.roa (raw, json) Hash identifier: tORGP5xZAv+UMgQ9x3i3UNJam1HBrMHOP5syD0XiBco= Subject key identifier: CA:73:BA:89:18:9D:79:13:03:AB:7F:DF:0C:F3:35:83:52:43:92:09 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584917DC21B964269C7603730980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 132892 IP address blocks: 172.70.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:21:b9:64:26:9c:76:03:73:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=c8b28d96-e4d5-41e3-95ec-13ffd51921b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:98:fc:00:f4:92:17:48:fd:30:80:06:a9:27: 56:b7:43:a5:69:bf:d5:9e:d8:86:6c:d6:df:f3:ba: b8:4d:9f:89:e8:bc:62:85:be:f2:d5:ec:c3:a4:b4: 93:71:8c:ee:ff:0d:8b:63:e1:06:64:bf:69:78:b2: f8:f4:ff:25:c0:af:d0:d5:19:f7:56:0f:e7:72:6b: fa:5c:84:ee:e2:c5:39:8b:af:67:3e:e5:04:48:a4: c1:e3:1f:6a:2f:19:05:75:e6:05:6c:b0:4b:3f:7f: 08:73:b8:31:93:b8:be:a3:57:56:da:b5:2b:51:de: 44:98:46:05:9f:73:92:73:c8:8f:d0:5a:24:a3:e5: d0:86:7f:d3:07:46:59:6c:a9:cf:d2:3d:82:b4:e3: e3:11:a3:b8:21:5b:6f:53:b6:07:c0:58:77:80:09: 06:7c:b5:a8:08:14:46:0a:e5:b0:78:b6:d0:e4:3e: 06:4a:b6:db:89:0a:64:dd:9d:16:78:70:6b:cb:40: 21:04:5c:5b:33:b6:20:2c:6c:de:a8:94:3f:c0:00: 91:ba:16:31:7a:ad:c8:3d:a2:4c:f1:ec:8b:a8:d1: 08:cf:3e:5c:ed:12:dc:3f:be:28:98:e2:e6:79:9d: a9:3c:56:86:cd:7b:a2:8f:35:1b:56:3b:ab:e6:60: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:BA:89:18:9D:79:13:03:AB:7F:DF:0C:F3:35:83:52:43:92:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4702aa40-4077-3e55-a44b-27f1cb8e885d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:08:ad:0e:ec:70:ac:c0:bf:1c:c4:3d:b9:c4:13:8b:5a:48: d3:0c:e3:32:93:ba:84:3b:07:7e:80:27:79:1f:8f:1c:6c:dc: e0:d6:93:c7:64:8d:0d:37:41:7b:65:3a:6c:ce:f0:bf:c9:67: f7:fd:9b:fa:eb:bf:30:1b:a6:a2:e1:21:70:d5:a7:42:eb:c2: ec:a9:1d:74:3a:ec:a3:04:9c:17:ab:ac:ee:d9:a1:03:2d:82: 41:09:d8:11:5d:f1:64:30:ae:7f:d4:5e:50:80:2f:39:43:a7: 48:17:64:11:93:e3:92:59:59:c0:35:bd:60:e8:a6:6e:90:71: 73:0c:67:f6:4f:71:0c:02:41:c4:50:47:b7:f7:8c:ab:e9:cc: d0:32:8c:95:cd:1f:72:96:c6:9c:53:b5:94:f6:85:6e:a9:ce: 5b:70:a4:af:c9:b6:ea:d3:ed:26:ce:aa:67:29:7a:0a:f8:8a: 0d:ed:2a:52:ea:ee:a1:56:d5:e9:c5:5a:62:46:57:e9:ad:e8: 96:be:37:49:e8:12:35:a7:59:fb:0c:15:1b:ff:e3:97:47:d8: 0a:90:c4:3e:5b:e5:8c:ce:c0:e9:d7:f7:70:5f:96:df:01:f9: 39:d4:aa:dc:9d:e7:e1:9f:36:68:cb:b9:4e:6b:72:c3:56:df: 64:f6:cd:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CG5ZCacdgNzCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YzhiMjhkOTYtZTRkNS00MWUzLTk1ZWMtMTNmZmQ1MTkyMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZj8APSSF0j9MIAGqSdWt0Olab/VntiGbNbf 87q4TZ+J6Lxihb7y1ezDpLSTcYzu/w2LY+EGZL9peLL49P8lwK/Q1Rn3Vg/ncmv6 XITu4sU5i69nPuUESKTB4x9qLxkFdeYFbLBLP38Ic7gxk7i+o1dW2rUrUd5EmEYF n3OSc8iP0Foko+XQhn/TB0ZZbKnP0j2CtOPjEaO4IVtvU7YHwFh3gAkGfLWoCBRG CuWweLbQ5D4GSrbbiQpk3Z0WeHBry0AhBFxbM7YgLGzeqJQ/wACRuhYxeq3IPaJM 8eyLqNEIzz5c7RLcP74omOLmeZ2pPFaGzXuijzUbVjur5mCCcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpzuokYnXkTA6t/3wzzNYNSQ5IJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDcwMmFhNDAtNDA3Ny0z ZTU1LWE0NGItMjdmMWNiOGU4ODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrEZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcIrQ7scKzAvxzEPbnEE4taSNMM4zKTuoQ7B36AJ3kfjxxs3ODWk8dk jQ03QXtlOmzO8L/JZ/f9m/rrvzAbpqLhIXDVp0LrwuypHXQ67KMEnBerrO7ZoQMt gkEJ2BFd8WQwrn/UXlCALzlDp0gXZBGT45JZWcA1vWDopm6QcXMMZ/ZPcQwCQcRQ R7f3jKvpzNAyjJXNH3KWxpxTtZT2hW6pzltwpK/JturT7SbOqmcpegr4ig3tKlLq 7qFW1enFWmJGV+mt6Ja+N0noEjWnWfsMFRv/45dH2AqQxD5b5YzOwOnX93Bflt8B +TnUqtyd5+GfNmjLuU5rcsNW32T2zY0= -----END CERTIFICATE-----Generated at Sat Apr 5 09:55:01 2025 by rpki-client