$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58dd4f57-05a2-3709-a383-4eb310e8b346.roa File: 58dd4f57-05a2-3709-a383-4eb310e8b346.roa (raw, json) Hash identifier: rFbEmFVnNaTsxlOZFTS79jwyvi7srUXdDMX0qF6PP88= Subject key identifier: 75:77:96:F6:D7:F7:47:37:41:EB:0F:35:FD:32:1B:49:3F:8C:CA:23 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C11ED9D191F7094648080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58dd4f57-05a2-3709-a383-4eb310e8b346.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:11:ed:9d:19:1f:70:94:64:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=2fe03575-c5e2-4914-a19c-5b48a16cf275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:1e:cd:35:07:d5:8c:70:46:25:0c:34:68: 2b:8f:98:a1:91:79:07:18:e5:7f:35:bf:c0:47:9b: b0:a3:b1:2f:ce:e1:a5:41:1b:8c:51:56:b5:81:54: 85:e4:a1:0f:07:3e:e9:9e:85:c3:60:c1:15:1b:2d: 24:cb:00:90:73:aa:3d:74:8f:65:ab:16:c2:05:66: 70:76:75:3a:a1:8f:40:cb:06:0c:80:9f:18:7d:8a: be:8a:f4:49:7a:33:81:0d:99:a5:86:cf:b2:21:a3: ab:8b:df:96:03:80:6d:4b:77:b2:26:53:71:de:6e: 1a:35:c5:85:d4:08:bf:2f:a0:ec:f5:99:c9:68:9f: 11:34:1a:04:51:11:39:4a:c8:dd:f0:82:9a:01:1f: 89:70:00:fb:cf:2f:64:18:db:02:3d:95:98:00:34: 6a:8c:5c:01:e2:31:01:da:2d:2f:08:d1:bb:6f:2e: 8d:0e:7d:35:1d:60:8d:96:fa:a8:9f:9f:91:a6:3c: 0d:4c:a8:16:0f:8e:29:40:f8:f8:9f:5b:df:d7:c0: 90:91:a3:74:8a:ec:11:39:9d:23:86:7a:f1:22:71: b7:3f:bc:9a:98:a1:58:99:8a:e5:12:87:c4:82:eb: 45:3e:94:74:a7:01:b4:29:f6:20:34:9a:ce:3d:2d: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:77:96:F6:D7:F7:47:37:41:EB:0F:35:FD:32:1B:49:3F:8C:CA:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/58dd4f57-05a2-3709-a383-4eb310e8b346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:93:10:18:b9:0b:75:96:eb:f8:40:4d:e8:cd:54:7d:4f:2a: 20:28:1e:93:8a:00:e5:da:b7:0d:f2:3d:38:f2:b1:dc:40:6e: 02:02:ca:b3:11:77:f9:5d:8b:c6:2c:f4:3e:03:e0:c5:a1:a3: b6:c4:c8:a6:e5:ee:c1:87:fe:41:4a:51:8a:28:01:75:24:d1: 7a:1e:9b:40:d0:c8:47:25:d3:76:b8:8b:fa:b8:fb:28:98:29: f5:9f:05:7a:b8:d3:a7:be:3c:1e:89:e6:65:0e:62:74:bb:0c: 30:ac:ad:fd:25:f0:8d:88:dc:a9:0c:3c:74:ba:9b:d4:59:6e: c3:ad:50:1c:7b:0e:37:3a:0e:71:d7:89:4c:60:16:85:01:50: 53:16:7a:9a:f4:4a:89:7c:e7:1e:a3:2e:0e:0e:74:f8:90:a5: c3:72:56:ab:4c:69:0b:5a:5f:93:10:e9:d8:48:94:b6:77:69: 79:4f:8c:8d:cb:2c:b6:20:cb:eb:e8:a3:e5:3c:d2:a4:3c:02: 7d:c8:18:2c:42:3b:89:e5:b5:3b:48:fe:52:b5:8c:70:98:ba: 75:b2:4b:d4:0a:f5:d6:f7:25:88:9a:a3:c3:f7:47:a9:0a:a3: e1:6e:72:76:d7:fa:25:6a:7e:d4:f1:58:26:b7:5a:cc:f0:01: 3f:73:03:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBHtnRkfcJRkgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MmZlMDM1NzUtYzVlMi00OTE0LWExOWMtNWI0OGExNmNmMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj8ezTUH1YxwRiUMNGgrj5ihkXkHGOV/Nb/A R5uwo7EvzuGlQRuMUVa1gVSF5KEPBz7pnoXDYMEVGy0kywCQc6o9dI9lqxbCBWZw dnU6oY9AywYMgJ8YfYq+ivRJejOBDZmlhs+yIaOri9+WA4BtS3eyJlNx3m4aNcWF 1Ai/L6Ds9ZnJaJ8RNBoEURE5Ssjd8IKaAR+JcAD7zy9kGNsCPZWYADRqjFwB4jEB 2i0vCNG7by6NDn01HWCNlvqon5+RpjwNTKgWD44pQPj4n1vf18CQkaN0iuwROZ0j hnrxInG3P7yamKFYmYrlEofEgutFPpR0pwG0KfYgNJrOPS2vnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV3lvbX90c3QesPNf0yG0k/jMojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNThkZDRmNTctMDVhMi0z NzA5LWEzODMtNGViMzEwZThiMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuTEBi5C3WW6/hATejNVH1PKiAoHpOKAOXatw3yPTjysdxAbgICyrMR d/ldi8Ys9D4D4MWho7bEyKbl7sGH/kFKUYooAXUk0Xoem0DQyEcl03a4i/q4+yiY KfWfBXq406e+PB6J5mUOYnS7DDCsrf0l8I2I3KkMPHS6m9RZbsOtUBx7Djc6DnHX iUxgFoUBUFMWepr0Sol85x6jLg4OdPiQpcNyVqtMaQtaX5MQ6dhIlLZ3aXlPjI3L LLYgy+voo+U80qQ8An3IGCxCO4nltTtI/lK1jHCYunWyS9QK9db3JYiao8P3R6kK o+FucnbX+iVqftTxWCa3WszwAT9zA88= -----END CERTIFICATE-----Generated at Sat Apr 5 07:57:04 2025 by rpki-client