$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa File: 49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa (raw, json) Hash identifier: OLlsgK2BfWyjzi0pYrOykvpF7ElY52DEtWWrZPx5UsU= Subject key identifier: AE:0E:F1:4F:D7:A9:6A:8A:20:3A:AA:9D:EB:26:CC:E6:23:DD:40:64 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328583C56BFF49A431C452556815B40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa Signing time: Wed 22 Dec 2021 05:00:00 +0000 ROA not before: Wed 22 Dec 2021 05:00:00 +0000 ROA not after: Sun 23 Jan 2028 05:00:00 +0000 asID: 13335 IP address blocks: 172.70.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3c:56:bf:f4:9a:43:1c:45:25:56:81:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 22 05:00:00 2021 GMT Not After : Jan 23 05:00:00 2028 GMT Subject: CN=36262a30-ef42-431e-9f62-e8a35921be0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:77:1d:88:63:2c:cc:95:fd:d1:ea:e7:69: 72:5a:b6:98:2d:55:1f:5e:75:d8:b4:fd:14:91:aa: 9a:b8:86:ec:d8:03:ec:55:3c:41:37:ae:56:72:3e: 06:32:cd:99:d1:ab:8e:17:f8:9d:71:5f:dc:dd:57: fd:c0:21:36:a0:d1:a4:fb:2b:28:85:19:80:a5:60: 01:af:ba:18:1d:73:1e:a0:ec:64:13:b6:c6:7c:ce: 16:69:4b:aa:2b:e1:b7:d4:70:51:0e:a6:0d:55:b2: d7:aa:55:70:14:a7:92:aa:48:a1:5e:44:1d:4e:b4: a5:20:72:5b:cb:cf:09:90:3e:69:dc:ea:07:6d:bd: 6e:0c:06:f5:6f:6a:6f:d3:1d:6d:e2:d8:05:2d:2e: b9:77:1d:26:3d:cf:56:ed:6d:22:26:5c:5c:34:96: 96:99:c9:eb:c8:fd:33:44:8b:48:1d:a7:7c:bb:e1: a6:33:4d:35:25:43:0c:7a:94:a8:4f:ca:c1:f9:4c: 7d:df:9f:07:d7:94:f3:65:36:22:8e:c5:b6:eb:83: cf:2b:35:74:da:e0:a3:7a:15:7b:0d:18:c3:c5:90: be:f4:e4:98:83:6c:82:c8:be:fc:35:a4:30:77:93: d8:55:44:ed:d6:0e:62:fa:9d:02:75:18:4b:31:d9: 44:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0E:F1:4F:D7:A9:6A:8A:20:3A:AA:9D:EB:26:CC:E6:23:DD:40:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49e0559d-79b6-3fcf-8b22-16a4a1e8270a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:87:06:90:5d:3d:60:a0:6d:26:49:5d:c3:96:42:e1:6f:56: 64:3a:38:26:ba:3f:cc:0d:c9:42:93:b8:0b:1e:3c:9b:f9:c0: 46:d3:dd:74:91:73:46:e9:81:f2:71:54:71:a0:cb:d3:b2:90: 13:80:b6:9c:96:b5:61:e5:b2:e6:df:60:a3:db:80:e1:ad:5c: 63:4d:59:b7:13:97:2b:ea:28:34:63:0d:43:46:4f:09:33:6d: 4d:01:5d:56:72:06:57:bb:7c:82:a8:3d:4c:cb:ae:f1:98:86: 4a:ee:dd:66:6f:b1:70:28:79:b3:ce:2f:e3:c9:d9:9c:e2:5a: fe:75:6c:0f:ec:6d:8f:7d:38:7c:d3:74:5d:41:f2:51:70:c4: 4a:4d:dc:e8:5a:8f:21:91:30:bd:33:64:7f:e2:46:cb:9d:6c: 56:f7:d6:89:83:c7:b3:ce:f0:82:61:59:4b:cd:82:ed:ce:37: a1:a9:9f:19:15:df:a7:2f:45:46:6b:26:d6:83:75:cb:c9:8a: 9b:f1:54:31:40:66:de:dd:79:b1:1c:c3:1c:03:77:f9:17:67: c4:05:c5:bb:23:dc:bf:0b:c2:15:fb:b3:05:14:68:de:4e:f9: 45:82:8c:1b:51:71:d3:3f:52:2b:28:ce:8d:8d:66:1e:99:97: f0:dc:52:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxWv/SaQxxFJVaBW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIxMTIyMjA1MDAwMFoXDTI4MDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk MzYyNjJhMzAtZWY0Mi00MzFlLTlmNjItZThhMzU5MjFiZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor93HYhjLMyV/dHq52lyWraYLVUfXnXYtP0U kaqauIbs2APsVTxBN65Wcj4GMs2Z0auOF/idcV/c3Vf9wCE2oNGk+ysohRmApWAB r7oYHXMeoOxkE7bGfM4WaUuqK+G31HBRDqYNVbLXqlVwFKeSqkihXkQdTrSlIHJb y88JkD5p3OoHbb1uDAb1b2pv0x1t4tgFLS65dx0mPc9W7W0iJlxcNJaWmcnryP0z RItIHad8u+GmM001JUMMepSoT8rB+Ux9358H15TzZTYijsW264PPKzV02uCjehV7 DRjDxZC+9OSYg2yCyL78NaQwd5PYVUTt1g5i+p0CdRhLMdlExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4O8U/XqWqKIDqqnesmzOYj3UBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDllMDU1OWQtNzliNi0z ZmNmLThiMjItMTZhNGExZTgyNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeHBpBdPWCgbSZJXcOWQuFvVmQ6OCa6P8wNyUKTuAsePJv5wEbT3XSR c0bpgfJxVHGgy9OykBOAtpyWtWHlsubfYKPbgOGtXGNNWbcTlyvqKDRjDUNGTwkz bU0BXVZyBle7fIKoPUzLrvGYhkru3WZvsXAoebPOL+PJ2ZziWv51bA/sbY99OHzT dF1B8lFwxEpN3OhajyGRML0zZH/iRsudbFb31omDx7PO8IJhWUvNgu3ON6GpnxkV 36cvRUZrJtaDdcvJipvxVDFAZt7debEcwxwDd/kXZ8QFxbsj3L8LwhX7swUUaN5O +UWCjBtRcdM/Uisozo2NZh6Zl/DcUug= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:17 2025 by rpki-client