$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4dcd747d-494e-3b39-9dbc-c71f39d1014f.roa File: 4dcd747d-494e-3b39-9dbc-c71f39d1014f.roa (raw, json) Hash identifier: spHsYmK4a+/SugWXmVoQnaLAGlK2AR+Y2EjwvfCvux0= Subject key identifier: 07:8E:9C:C9:15:CF:0E:A5:11:2A:35:71:F0:CF:8A:5A:BC:E9:D7:13 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B579C9F3E0FD18B82131200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4dcd747d-494e-3b39-9dbc-c71f39d1014f.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:57:9c:9f:3e:0f:d1:8b:82:13:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=1b517590-14a2-419a-95e4-70b668e9737b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:c7:1f:9c:d4:81:11:cb:61:a8:f5:81:89: be:6a:77:60:45:b6:fe:5e:17:9b:a2:07:58:11:c1: 6d:cc:d5:10:c8:ce:79:7e:7f:9a:95:bd:20:86:17: d0:5f:e8:a3:d5:6c:ec:0b:9e:52:20:bb:07:34:cd: 6e:c3:85:6a:c5:32:a0:ae:36:16:25:41:0c:76:89: 62:9b:a3:11:35:9f:f2:e0:db:b7:aa:ef:ac:d6:d2: 33:22:30:b6:0e:22:d6:6b:58:d6:d8:de:38:01:1a: 90:42:de:c8:6f:ea:3c:2d:b3:8b:fd:cd:d5:fb:46: 00:82:d5:a2:90:8b:aa:b9:df:54:d1:8b:16:ca:6a: b1:81:92:c3:bb:01:43:86:df:91:ed:63:0e:24:0a: d6:18:83:d2:ee:ce:d0:2a:0b:a3:2d:61:4e:3f:ae: 5b:06:90:ab:1d:ee:38:7a:7a:89:3c:46:6a:c4:97: 13:eb:70:f7:a4:fb:9d:e8:d3:36:6d:26:da:88:be: e7:1a:ab:cb:36:5c:d2:ee:c7:25:1d:10:0f:e8:77: 70:f6:9b:08:f7:5b:f2:3e:3d:70:46:00:16:a5:94: f3:c6:3c:88:88:f6:c2:1b:37:23:4c:d2:33:78:15: 2d:ba:e2:17:71:89:08:a2:ec:2a:52:87:1d:b9:b4: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8E:9C:C9:15:CF:0E:A5:11:2A:35:71:F0:CF:8A:5A:BC:E9:D7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4dcd747d-494e-3b39-9dbc-c71f39d1014f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:18:ac:f8:64:6f:de:b6:c2:7a:cc:82:dc:7c:9a:00:4b:ce: fa:cb:09:24:73:9c:cf:d1:58:cf:fb:4b:66:30:df:a3:50:83: d2:bf:36:e0:4d:ed:17:41:0c:8f:ab:f4:05:2e:45:8e:63:e7: 04:95:f0:2f:f8:64:fa:e1:14:6d:04:88:a2:68:5a:80:43:4f: af:55:f7:fd:80:85:6a:c9:46:e1:8d:33:50:33:60:5d:31:d6: 68:dc:62:28:74:7e:72:26:83:3b:67:42:da:82:92:ac:57:62: 1f:69:d3:86:0f:ce:76:4f:2e:f3:0a:1a:65:d5:b7:cf:37:08: ae:18:37:6f:b4:80:fc:99:ec:ca:af:dd:44:68:44:83:17:c3: 4c:de:2e:f9:57:49:5a:1d:a8:4e:cf:49:68:e0:fe:cf:4c:eb: 39:45:04:3f:70:09:29:b2:44:62:f9:77:c9:1c:82:f6:98:2a: 4a:99:02:9b:dd:3e:84:a0:4b:9d:b1:26:e9:8b:ac:a9:f5:bf: 54:67:5f:15:52:c6:ba:c3:b9:5e:49:72:17:9d:bc:28:bb:5c: f4:83:6e:17:5f:4f:d1:82:59:95:7b:fc:f5:25:78:95:03:72: eb:3f:4e:50:81:4d:c7:0f:e8:c7:ed:2b:d7:ea:3d:8a:b8:e7: 34:04:48:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7V5yfPg/Ri4ITEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk MWI1MTc1OTAtMTRhMi00MTlhLTk1ZTQtNzBiNjY4ZTk3MzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi23HH5zUgRHLYaj1gYm+andgRbb+XhebogdY EcFtzNUQyM55fn+alb0ghhfQX+ij1WzsC55SILsHNM1uw4VqxTKgrjYWJUEMdoli m6MRNZ/y4Nu3qu+s1tIzIjC2DiLWa1jW2N44ARqQQt7Ib+o8LbOL/c3V+0YAgtWi kIuqud9U0YsWymqxgZLDuwFDht+R7WMOJArWGIPS7s7QKgujLWFOP65bBpCrHe44 enqJPEZqxJcT63D3pPud6NM2bSbaiL7nGqvLNlzS7sclHRAP6Hdw9psI91vyPj1w RgAWpZTzxjyIiPbCGzcjTNIzeBUtuuIXcYkIouwqUocdubS/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeOnMkVzw6lESo1cfDPilq86dcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGRjZDc0N2QtNDk0ZS0z YjM5LTlkYmMtYzcxZjM5ZDEwMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrEQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALsYrPhkb962wnrMgtx8mgBLzvrLCSRznM/RWM/7S2Yw36NQg9K/NuBN 7RdBDI+r9AUuRY5j5wSV8C/4ZPrhFG0EiKJoWoBDT69V9/2AhWrJRuGNM1AzYF0x 1mjcYih0fnImgztnQtqCkqxXYh9p04YPznZPLvMKGmXVt883CK4YN2+0gPyZ7Mqv 3URoRIMXw0zeLvlXSVodqE7PSWjg/s9M6zlFBD9wCSmyRGL5d8kcgvaYKkqZApvd PoSgS52xJumLrKn1v1RnXxVSxrrDuV5JchedvCi7XPSDbhdfT9GCWZV7/PUleJUD cus/TlCBTccP6MftK9fqPYq45zQESJ8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:18 2025 by rpki-client