$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a2f5f37-9c52-3cff-bf73-4095009e313a.roa File: 5a2f5f37-9c52-3cff-bf73-4095009e313a.roa (raw, json) Hash identifier: 973veXX3NOW9/HCZMF4bt1sFJGYnaOYPcEuam6HrUBg= Subject key identifier: A4:8E:F2:A2:2A:33:CF:E7:DB:C6:5A:9A:83:1D:40:0A:C6:87:39:C6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908819427D02F9AB5A0657300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a2f5f37-9c52-3cff-bf73-4095009e313a.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:94:27:d0:2f:9a:b5:a0:65:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=681b3eb9-0e38-4d68-946a-bd3c5a9b8beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:14:09:c1:af:e1:98:ef:8a:21:2c:59:76:e3: 79:64:17:dc:fa:32:46:23:4a:2b:f5:4b:c6:22:47: 77:43:00:5a:a9:d8:f6:f1:4d:15:56:57:6c:ce:9d: 74:58:72:26:4c:49:be:00:b0:24:6f:c1:40:89:75: e8:41:80:8c:bd:a7:31:e7:96:75:a0:8f:e1:fd:0f: 28:de:b2:47:37:9f:90:a2:ac:c6:4f:00:c6:5d:ba: 22:81:10:c0:68:d6:7c:6a:ff:85:d0:5b:71:6a:46: 83:fd:cc:c9:c6:1b:82:9a:6a:4d:85:48:de:ac:e4: 5f:e4:09:83:e0:17:d8:17:a3:cd:85:97:d5:3c:ff: b7:c8:d8:1b:42:14:de:2e:cc:6b:15:6e:ef:b6:80: 4d:51:1c:84:12:df:d9:63:01:a3:3c:54:08:e4:8d: df:f9:ef:31:38:44:7b:dd:2f:1e:f9:94:27:af:a4: 44:bb:22:6c:a6:75:42:da:5f:71:29:ca:17:91:f9: 7d:c0:f3:55:50:b0:91:7a:d6:83:55:b6:74:05:71: a7:34:be:c0:28:56:3a:e7:a5:0b:8f:4b:92:70:b3: 37:8e:98:6d:1c:9e:0e:55:eb:f4:7c:bf:b6:08:d9: 6d:49:fa:f6:29:36:ac:a9:2a:a9:f7:66:a6:10:81: 62:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8E:F2:A2:2A:33:CF:E7:DB:C6:5A:9A:83:1D:40:0A:C6:87:39:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a2f5f37-9c52-3cff-bf73-4095009e313a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cf:8e:72:86:27:6e:30:36:71:d4:86:c6:d5:b7:04:40:64: ce:bb:2f:4f:e8:8a:e0:a2:cf:a6:0a:06:f6:e2:75:a8:68:d6: 43:96:02:ec:0f:63:25:54:d3:58:aa:77:3b:c0:d0:27:e3:0e: 8e:9f:aa:d5:e3:cb:1d:ff:cd:9f:b5:0d:9f:24:02:ef:a1:30: c5:05:df:8d:19:db:81:a9:aa:75:01:5e:81:50:44:61:19:3b: f1:68:51:1e:99:24:42:69:fd:4c:5e:86:d3:42:ca:3b:56:91: 0f:04:0e:30:a3:5b:77:f1:9d:b6:f7:93:5b:25:ba:f8:38:24: f4:f0:23:01:88:16:ac:d8:bf:0a:db:c0:b2:26:d7:bd:8a:66: 47:a6:db:cb:f1:6c:14:be:9b:45:8e:1e:9f:48:25:da:7d:70: f3:7c:f2:28:97:99:c6:34:ed:48:fa:b4:b9:4b:19:bf:55:1e: 70:23:ea:5b:6c:3d:78:8d:0c:90:df:35:c1:fd:8c:ac:b1:c0: 9a:cd:2f:f9:79:35:20:bc:bf:81:a1:4d:16:88:da:e0:57:dc: 9c:ae:61:96:48:5a:66:ee:db:c2:ae:48:50:43:8d:2d:a7:77: 50:c7:39:da:14:a5:c8:aa:53:ab:50:c4:d1:f4:ac:de:23:2b: 0c:7b:c5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZQn0C+ataBlcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NjgxYjNlYjktMGUzOC00ZDY4LTk0NmEtYmQzYzVhOWI4YmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihQJwa/hmO+KISxZduN5ZBfc+jJGI0or9UvG Ikd3QwBaqdj28U0VVldszp10WHImTEm+ALAkb8FAiXXoQYCMvacx55Z1oI/h/Q8o 3rJHN5+QoqzGTwDGXboigRDAaNZ8av+F0FtxakaD/czJxhuCmmpNhUjerORf5AmD 4BfYF6PNhZfVPP+3yNgbQhTeLsxrFW7vtoBNURyEEt/ZYwGjPFQI5I3f+e8xOER7 3S8e+ZQnr6REuyJspnVC2l9xKcoXkfl9wPNVULCRetaDVbZ0BXGnNL7AKFY656UL j0uScLM3jphtHJ4OVev0fL+2CNltSfr2KTasqSqp92amEIFifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSO8qIqM8/n28ZamoMdQArGhznGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWEyZjVmMzctOWM1Mi0z Y2ZmLWJmNzMtNDA5NTAwOWUzMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTPjnKGJ24wNnHUhsbVtwRAZM67L0/oiuCiz6YKBvbidaho1kOWAuwP YyVU01iqdzvA0CfjDo6fqtXjyx3/zZ+1DZ8kAu+hMMUF340Z24GpqnUBXoFQRGEZ O/FoUR6ZJEJp/UxehtNCyjtWkQ8EDjCjW3fxnbb3k1sluvg4JPTwIwGIFqzYvwrb wLIm172KZkem28vxbBS+m0WOHp9IJdp9cPN88iiXmcY07Uj6tLlLGb9VHnAj6lts PXiNDJDfNcH9jKyxwJrNL/l5NSC8v4GhTRaI2uBX3JyuYZZIWmbu28KuSFBDjS2n d1DHOdoUpciqU6tQxNH0rN4jKwx7xcA= -----END CERTIFICATE-----Generated at Sat Apr 5 07:57:02 2025 by rpki-client