$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/50dc1da7-702e-396a-949f-de1e4b96e3cf.roa File: 50dc1da7-702e-396a-949f-de1e4b96e3cf.roa (raw, json) Hash identifier: 4PYdOqzXI793XEDuVmy+7VmUhwstpL8Op7uRw9jaz7A= Subject key identifier: 04:A9:D2:3D:4F:B1:F4:7D:87:D6:7D:14:FB:78:6C:7F:1F:2C:5E:D2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C121CC904D30080199A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/50dc1da7-702e-396a-949f-de1e4b96e3cf.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:12:1c:c9:04:d3:00:80:19:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=69aa4c8b-4d41-4c9d-91da-f32fcab38330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:07:1f:a0:64:b8:37:e6:cb:71:7f:8b:ac:06: 12:10:c9:e0:21:21:26:0b:75:9d:6a:49:18:5b:43: ba:f9:11:41:9a:79:15:b3:ab:48:33:d6:4b:96:9c: d1:c8:e1:5e:e3:5d:ab:94:cd:6f:55:45:aa:8a:4b: 4f:31:91:3a:a9:94:59:aa:af:74:9e:9a:82:32:1c: 3d:33:e2:10:07:20:76:76:1d:48:40:e7:a3:f6:93: f2:18:eb:c6:c3:e1:ab:0d:36:fc:a3:12:df:04:44: 4c:61:c0:84:b3:09:c9:4c:1b:75:f8:40:35:3f:6a: 1d:be:2c:1f:6c:84:b1:ad:98:78:45:0d:6d:1d:bc: 01:62:e8:d7:13:cb:92:b0:d2:fc:e3:95:2c:ba:c9: a1:6d:83:b7:b8:f8:ac:83:9a:27:71:c7:f9:c2:72: bf:c7:b9:21:ab:c1:e0:6e:26:7a:f3:1e:ec:1d:cc: d4:b7:88:dc:03:fb:69:43:e5:78:59:22:8c:d9:0f: 81:a9:9b:2c:13:01:a9:b2:cb:9c:80:5c:71:cb:a3: 9e:10:82:22:cd:4c:a0:19:61:a9:96:34:5a:71:74: f1:c2:38:c0:6f:f5:6d:bf:b7:8e:b6:20:00:21:3a: 39:20:88:76:a2:aa:b2:b5:fe:29:92:c7:6f:0f:ef: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A9:D2:3D:4F:B1:F4:7D:87:D6:7D:14:FB:78:6C:7F:1F:2C:5E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/50dc1da7-702e-396a-949f-de1e4b96e3cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:07:79:68:7a:30:d2:e6:81:cd:13:31:fc:63:f0:da:9a:53: a0:48:b7:1f:2f:05:de:49:8e:1b:68:a0:8a:e1:84:99:cd:d9: 8f:a1:42:74:94:48:0e:68:5e:bb:53:5c:9f:e9:f3:6f:b6:0c: a7:1a:86:0a:60:9a:bd:dd:6b:f8:a6:9d:94:f2:0f:d7:85:50: 63:15:6f:9a:ad:b9:62:b7:9b:a0:db:5f:0c:4b:04:dc:cd:90: 5c:d4:43:a1:97:f8:64:83:a2:e4:57:13:d0:ed:68:26:95:08: 42:31:47:b4:f9:d6:ed:35:80:aa:da:12:d7:23:7f:4d:32:dc: 8b:cd:ed:27:71:56:f1:56:ca:39:09:f1:f5:dc:a2:02:23:e4: a5:81:b3:06:b9:53:79:d2:c8:b7:b9:19:5a:d7:55:95:47:f7: 7d:2b:ce:60:1c:41:a6:ea:ac:ea:a0:f8:4d:69:10:86:21:37: 10:c3:a9:05:7c:a1:3b:78:98:db:7e:96:54:02:37:5e:bc:1c: bf:7e:be:30:9f:e7:24:86:85:48:3c:b8:8c:64:5e:4b:ac:cc: 12:5e:b9:fe:00:cc:2b:31:a5:0e:13:f8:18:48:a7:36:a1:78: 10:5b:29:0c:ec:7c:7a:49:d5:87:10:99:4a:31:3a:00:30:2f: a3:21:f6:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBIcyQTTAIAZmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NjlhYTRjOGItNGQ0MS00YzlkLTkxZGEtZjMyZmNhYjM4MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAcfoGS4N+bLcX+LrAYSEMngISEmC3WdakkY W0O6+RFBmnkVs6tIM9ZLlpzRyOFe412rlM1vVUWqiktPMZE6qZRZqq90npqCMhw9 M+IQByB2dh1IQOej9pPyGOvGw+GrDTb8oxLfBERMYcCEswnJTBt1+EA1P2odviwf bISxrZh4RQ1tHbwBYujXE8uSsNL845UsusmhbYO3uPisg5onccf5wnK/x7khq8Hg biZ68x7sHczUt4jcA/tpQ+V4WSKM2Q+BqZssEwGpssucgFxxy6OeEIIizUygGWGp ljRacXTxwjjAb/Vtv7eOtiAAITo5IIh2oqqytf4pksdvD+96OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASp0j1PsfR9h9Z9FPt4bH8fLF7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTBkYzFkYTctNzAyZS0z OTZhLTk0OWYtZGUxZTRiOTZlM2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcHeWh6MNLmgc0TMfxj8NqaU6BItx8vBd5JjhtooIrhhJnN2Y+hQnSU SA5oXrtTXJ/p82+2DKcahgpgmr3da/imnZTyD9eFUGMVb5qtuWK3m6DbXwxLBNzN kFzUQ6GX+GSDouRXE9DtaCaVCEIxR7T51u01gKraEtcjf00y3IvN7SdxVvFWyjkJ 8fXcogIj5KWBswa5U3nSyLe5GVrXVZVH930rzmAcQabqrOqg+E1pEIYhNxDDqQV8 oTt4mNt+llQCN168HL9+vjCf5ySGhUg8uIxkXkuszBJeuf4AzCsxpQ4T+BhIpzah eBBbKQzsfHpJ1YcQmUoxOgAwL6Mh9ik= -----END CERTIFICATE-----Generated at Wed Apr 9 19:48:20 2025 by rpki-client