$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58a98270-924d-3af0-b630-6c0e47acc5a2.roa File: 58a98270-924d-3af0-b630-6c0e47acc5a2.roa (raw, json) Hash identifier: lEN77yWaB6m933JRC7RZxMQs+HQyI7I4Wv15Q6QfeAQ= Subject key identifier: B4:CB:2A:63:14:AB:E1:07:81:9E:C0:FB:E7:E8:8B:D7:ED:C9:D9:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C16B2675CF71196F958E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58a98270-924d-3af0-b630-6c0e47acc5a2.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:16:b2:67:5c:f7:11:96:f9:58:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=b8fab342-0cdc-4082-bd2b-c85fa2a31bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:0c:24:23:d0:43:e5:0a:9a:b8:a3:21:b8: 31:6e:bc:f4:ee:ef:d2:92:6d:04:72:e6:85:7c:9e: 6a:dc:a8:a7:44:58:bf:98:60:e0:cc:3c:10:fb:a5: 10:60:b7:97:a0:be:05:fe:40:49:7e:7d:75:af:5c: 29:b6:42:11:f2:55:40:6b:31:bf:54:16:83:b6:ff: 31:5a:1a:80:fb:06:c6:42:c6:c5:37:58:19:b6:26: 3c:86:13:c0:ab:95:e1:92:4f:f6:ee:09:c4:99:1e: 73:67:d9:2f:26:04:ad:3c:15:83:52:4a:03:0a:9e: 4a:33:99:78:79:be:12:73:38:9f:d1:f3:56:74:8d: 53:3d:ab:fe:f9:6b:76:a8:ed:e8:b8:d3:71:d8:3f: d1:2c:0f:9d:96:c9:51:c2:1e:4e:2b:f9:f0:4e:a4: c9:cc:d5:2f:21:7f:bf:c2:44:db:ee:2b:74:1a:99: 14:ff:cd:cd:48:93:8d:e1:03:83:2e:d3:2a:d7:8c: 52:97:79:47:cc:13:07:e1:dd:ad:f3:c9:74:85:26: 24:ab:ed:4e:76:52:60:b6:81:4a:6e:ec:6d:1d:ad: d5:ac:9a:78:12:c1:d4:d3:f6:bb:5f:c3:b5:a2:bc: 8a:83:a5:57:2d:68:d4:9d:db:3f:a2:cc:80:d7:41: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CB:2A:63:14:AB:E1:07:81:9E:C0:FB:E7:E8:8B:D7:ED:C9:D9:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58a98270-924d-3af0-b630-6c0e47acc5a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:76:e1:dd:35:3e:fb:02:64:e9:1b:eb:34:52:a3:0b:bb:73: 99:45:0e:c7:b3:0d:99:6a:17:96:ba:49:a5:b3:94:5b:83:ee: a0:4e:7c:1f:25:a0:b6:2d:72:4e:38:ff:e3:57:66:5d:64:b0: 5d:14:99:2a:62:9b:97:19:cc:1d:23:c5:8a:ab:1e:82:75:25: 9a:93:cb:59:63:12:f4:a6:7a:1d:62:aa:8d:6d:de:de:d5:d6: c1:ac:58:07:4a:70:62:24:cb:75:63:4a:50:45:72:a9:08:29: 97:43:1a:45:63:1b:0f:e7:65:57:6c:84:71:fb:ff:1a:7b:e6: 0a:30:5b:dd:6c:6f:fa:38:10:be:e6:07:81:02:01:2f:93:5b: 0f:c6:85:ec:a0:e0:6c:6a:c3:c8:45:55:42:4e:ae:30:da:a1: 4b:94:00:90:e0:e1:9f:5d:08:1b:4a:d6:ac:4d:37:77:b2:23: 0c:62:6b:41:0b:1e:42:db:12:ad:93:e1:d2:50:a6:a9:22:92: 71:58:ce:e4:9a:0c:0b:71:7e:0e:02:ba:ce:8a:3f:e7:1a:ec: af:6c:db:8b:46:75:95:34:60:fb:d6:0a:03:51:b1:11:5e:d4: 48:74:45:47:32:a6:ac:79:9a:b0:99:ea:37:84:55:0b:d9:18: d5:79:6b:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBayZ1z3EZb5WOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YjhmYWIzNDItMGNkYy00MDgyLWJkMmItYzg1ZmEyYTMxYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc8MJCPQQ+UKmrijIbgxbrz07u/Skm0EcuaF fJ5q3KinRFi/mGDgzDwQ+6UQYLeXoL4F/kBJfn11r1wptkIR8lVAazG/VBaDtv8x WhqA+wbGQsbFN1gZtiY8hhPAq5Xhkk/27gnEmR5zZ9kvJgStPBWDUkoDCp5KM5l4 eb4Sczif0fNWdI1TPav++Wt2qO3ouNNx2D/RLA+dlslRwh5OK/nwTqTJzNUvIX+/ wkTb7it0GpkU/83NSJON4QODLtMq14xSl3lHzBMH4d2t88l0hSYkq+1OdlJgtoFK buxtHa3VrJp4EsHU0/a7X8O1oryKg6VXLWjUnds/osyA10HE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTLKmMUq+EHgZ7A++foi9ftydkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNThhOTgyNzAtOTI0ZC0z YWYwLWI2MzAtNmMwZTQ3YWNjNWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd24d01PvsCZOkb6zRSowu7c5lFDsezDZlqF5a6SaWzlFuD7qBOfB8l oLYtck44/+NXZl1ksF0UmSpim5cZzB0jxYqrHoJ1JZqTy1ljEvSmeh1iqo1t3t7V 1sGsWAdKcGIky3VjSlBFcqkIKZdDGkVjGw/nZVdshHH7/xp75gowW91sb/o4EL7m B4ECAS+TWw/Gheyg4Gxqw8hFVUJOrjDaoUuUAJDg4Z9dCBtK1qxNN3eyIwxia0EL HkLbEq2T4dJQpqkiknFYzuSaDAtxfg4Cus6KP+ca7K9s24tGdZU0YPvWCgNRsRFe 1Eh0RUcypqx5mrCZ6jeEVQvZGNV5a3w= -----END CERTIFICATE-----Generated at Thu Apr 10 19:30:41 2025 by rpki-client