$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cacd8b5-e66d-3714-95da-8cf1a1034606.roa File: 4cacd8b5-e66d-3714-95da-8cf1a1034606.roa (raw, json) Hash identifier: 2uAYfwRZqqW6ajo4zEwZ2mb8CFCS2NmEPrHZeQuNuLE= Subject key identifier: 14:4E:8F:98:1C:B4:63:58:79:0C:08:F8:DE:DD:97:A9:C0:A3:12:F3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C08BD6D096B8C9A93F5E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cacd8b5-e66d-3714-95da-8cf1a1034606.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:08:bd:6d:09:6b:8c:9a:93:f5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=0c8de86d-be98-4c44-ac2e-0254efd273f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:55:10:e0:4d:13:75:b5:6b:a1:a7:bd:7f: e2:a8:10:c2:5c:4b:bb:ba:bb:d7:ac:9d:39:5e:39: 66:9c:61:2e:06:e9:a9:33:8b:2f:d0:a4:50:67:5b: 9f:dc:da:12:d7:d1:9c:ed:ed:ef:31:ee:a5:f2:42: b5:75:18:bf:6c:83:38:82:f8:32:66:59:a6:d4:c8: 39:e2:87:34:bd:f4:a2:d8:f6:da:17:ec:8b:ce:89: a4:29:64:53:9a:50:be:cc:9d:d2:de:a3:7c:c0:26: bd:3d:0f:a0:23:8c:fe:6b:eb:b1:38:57:4c:68:f7: 14:58:79:bd:11:62:23:25:e2:b0:41:e6:e6:9e:1a: 6e:14:10:3d:6d:31:19:27:24:a1:dd:36:c9:c7:cb: 20:fe:9e:68:14:d2:5e:57:32:5a:42:69:5a:25:1b: c8:87:7a:80:3e:e7:8a:2e:d0:bc:8a:4e:32:d6:58: d7:54:bc:6f:69:01:4d:f9:0d:d4:75:71:e2:99:fe: 55:19:cd:3e:45:60:c9:f4:4b:b0:12:49:9d:de:4a: d2:2a:c0:20:c7:f8:c0:be:b2:0d:88:c5:2e:ae:f2: c7:79:7c:38:ec:8b:89:92:b7:9b:f0:03:43:4f:4d: e1:63:96:cb:bb:29:07:60:0f:08:9b:46:18:29:4c: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4E:8F:98:1C:B4:63:58:79:0C:08:F8:DE:DD:97:A9:C0:A3:12:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4cacd8b5-e66d-3714-95da-8cf1a1034606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:c3:c5:7b:04:7a:fa:5e:03:3a:ff:92:1e:e6:fd:7f:8e:f3: c0:c4:b5:e9:48:20:de:4b:3e:b3:73:36:3e:7c:da:70:ca:fa: 80:64:1d:16:ec:7f:f5:6c:ad:d8:c5:ba:96:ef:5e:82:27:60: a2:b2:48:b6:55:de:06:79:5f:64:69:c3:9f:d5:b9:b7:9b:c5: 32:4b:96:a6:9f:5b:18:9d:7e:b9:59:72:9a:c3:e9:3a:c6:35: cc:79:c9:57:65:a0:bb:1a:1d:5f:80:07:21:7f:a7:3b:a7:bb: 2d:a5:8c:c3:d1:4a:2d:b5:dc:bf:a8:3d:1f:74:07:18:8d:09: 37:c0:84:f0:7c:eb:25:2b:16:6b:ba:59:c4:d2:c3:b5:e6:9d: f7:9b:e4:aa:25:b7:5c:1f:5c:bd:ee:53:25:f0:79:f0:b0:b3: d0:a4:f3:61:de:fb:46:05:a9:74:54:06:97:f4:4e:58:81:19: 86:f2:80:fb:18:e2:eb:8e:02:a0:1c:72:6a:bc:f5:12:ed:ca: 45:78:40:45:c4:06:7f:74:3d:ee:63:cf:da:c3:51:ef:6d:ae: 4f:9a:3a:87:30:0c:c1:d3:f8:d9:52:dd:07:4b:29:ea:36:1d: 6a:36:bb:d8:d5:27:f8:6b:e5:d5:86:a8:b0:c0:9f:cc:1c:e5: 6d:00:af:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAi9bQlrjJqT9eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MGM4ZGU4NmQtYmU5OC00YzQ0LWFjMmUtMDI1NGVmZDI3M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuARVEOBNE3W1a6GnvX/iqBDCXEu7urvXrJ05 XjlmnGEuBumpM4sv0KRQZ1uf3NoS19Gc7e3vMe6l8kK1dRi/bIM4gvgyZlmm1Mg5 4oc0vfSi2PbaF+yLzomkKWRTmlC+zJ3S3qN8wCa9PQ+gI4z+a+uxOFdMaPcUWHm9 EWIjJeKwQebmnhpuFBA9bTEZJySh3TbJx8sg/p5oFNJeVzJaQmlaJRvIh3qAPueK LtC8ik4y1ljXVLxvaQFN+Q3UdXHimf5VGc0+RWDJ9EuwEkmd3krSKsAgx/jAvrIN iMUurvLHeXw47IuJkreb8ANDT03hY5bLuykHYA8Im0YYKUy9jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBROj5gctGNYeQwI+N7dl6nAoxLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGNhY2Q4YjUtZTY2ZC0z NzE0LTk1ZGEtOGNmMWExMDM0NjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3DxXsEevpeAzr/kh7m/X+O88DEtelIIN5LPrNzNj582nDK+oBkHRbs f/VsrdjFupbvXoInYKKySLZV3gZ5X2Rpw5/VubebxTJLlqafWxidfrlZcprD6TrG Ncx5yVdloLsaHV+AByF/pzunuy2ljMPRSi213L+oPR90BxiNCTfAhPB86yUrFmu6 WcTSw7Xmnfeb5Kolt1wfXL3uUyXwefCws9Ck82He+0YFqXRUBpf0TliBGYbygPsY 4uuOAqAccmq89RLtykV4QEXEBn90Pe5jz9rDUe9trk+aOocwDMHT+NlS3QdLKeo2 HWo2u9jVJ/hr5dWGqLDAn8wc5W0Ar20= -----END CERTIFICATE-----Generated at Sat Apr 5 07:54:17 2025 by rpki-client