$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c16522c-bee8-3d1f-92fd-66bbe64216d4.roa File: 5c16522c-bee8-3d1f-92fd-66bbe64216d4.roa (raw, json) Hash identifier: dJn69JuaHG3+fq8N/HL3EY7ci+1iVFrL7BcCjZC0l5A= Subject key identifier: E0:AD:C5:57:4E:9B:02:2F:53:7B:E1:8E:29:2D:25:AE:B6:C0:49:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285848AF2B749B4354F37E7AA7E5A4 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c16522c-bee8-3d1f-92fd-66bbe64216d4.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:74:9b:43:54:f3:7e:7a:a7:e5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=f832fd1e-801f-4c73-81f9-9b226b400eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:4c:14:c5:cd:1b:5a:96:99:c3:3b:2e:40: 32:1b:35:99:be:c0:aa:5e:a7:27:40:1f:48:4b:75: 3e:bc:ee:86:3b:77:31:6d:27:3b:f8:d4:da:eb:b4: c2:7c:66:10:01:74:e7:22:ad:81:5d:df:97:b8:26: c4:ed:8b:d1:28:05:98:d7:7a:6a:c6:19:9c:2c:41: 91:92:5c:fd:2a:87:54:38:88:8e:a2:18:e5:0d:ad: 9a:bf:ca:b2:b1:b2:7c:fc:8e:67:b1:5e:66:ce:0b: a9:c3:e0:72:b6:1f:98:1e:17:73:7c:67:21:ec:28: 0b:4a:7e:e3:5f:45:71:93:0b:19:22:47:24:54:3e: 00:d4:9c:e0:e5:e7:c6:91:fc:ed:12:d3:18:c6:7c: cd:0c:93:cf:fa:27:19:a4:c1:37:da:e6:ec:1f:1e: 13:b7:92:54:c0:5c:ed:e4:27:36:f9:47:84:89:a9: 1b:1b:a7:2a:03:9d:b7:e3:b0:25:13:b6:07:c4:34: bc:76:17:71:13:b0:15:93:0e:de:d7:09:bf:bc:19: 26:ab:c0:d2:80:4c:a1:b7:c5:0c:bc:9d:96:40:b1: 60:b6:44:e6:45:09:a4:13:9b:bc:97:0b:76:e6:e0: ed:5a:53:79:c1:14:8a:3f:97:32:ca:84:a3:d6:c0: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AD:C5:57:4E:9B:02:2F:53:7B:E1:8E:29:2D:25:AE:B6:C0:49:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c16522c-bee8-3d1f-92fd-66bbe64216d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e0:81:30:bc:e3:47:e5:27:ca:f9:cc:3b:f6:c4:a1:91:be: b1:81:80:ad:12:1d:dc:26:df:3d:72:eb:f3:c1:54:32:0d:d6: 39:bf:a2:1f:fc:55:04:4f:f8:6c:ee:cd:fd:30:ba:ca:b0:45: 76:9f:20:65:fc:55:dd:aa:e9:92:81:ce:95:e2:1e:a2:b0:f2: a1:23:65:af:d8:f2:39:42:4d:71:50:c6:c5:bc:42:38:d4:3f: c8:2e:d5:13:88:be:ed:45:51:3b:02:ef:e3:69:a8:b2:b9:33: 75:47:50:60:4f:f1:9d:68:05:20:0a:3a:a1:5c:e8:0b:80:28: 61:3b:4c:1f:4b:30:be:e9:8d:bb:e4:b1:e7:8c:65:02:82:38: 94:69:1f:e8:fc:70:39:4a:c0:af:70:dd:64:29:72:20:3c:0e: 5b:bd:8a:e6:18:df:d8:f4:85:84:04:15:e5:12:23:3f:ed:99: 99:c6:44:bc:d7:8a:10:1c:50:08:03:0b:22:82:72:d0:5c:a8: df:2e:24:55:ef:77:b7:11:8a:85:5a:65:35:0d:99:d7:97:d9: cc:a9:30:3f:16:b1:c7:30:1a:e6:d1:78:8a:ab:df:7e:09:70: 06:83:d7:78:6a:a5:fb:46:50:13:c1:85:c0:ee:f0:c5:44:4e: a7:eb:a5:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3SbQ1Tzfnqn5aQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjgzMmZkMWUtODAxZi00YzczLTgxZjktOWIyMjZiNDAwZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDdMFMXNG1qWmcM7LkAyGzWZvsCqXqcnQB9I S3U+vO6GO3cxbSc7+NTa67TCfGYQAXTnIq2BXd+XuCbE7YvRKAWY13pqxhmcLEGR klz9KodUOIiOohjlDa2av8qysbJ8/I5nsV5mzgupw+Byth+YHhdzfGch7CgLSn7j X0VxkwsZIkckVD4A1Jzg5efGkfztEtMYxnzNDJPP+icZpME32ubsHx4Tt5JUwFzt 5Cc2+UeEiakbG6cqA52347AlE7YHxDS8dhdxE7AVkw7e1wm/vBkmq8DSgEyht8UM vJ2WQLFgtkTmRQmkE5u8lwt25uDtWlN5wRSKP5cyyoSj1sBy9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCtxVdOmwIvU3vhjiktJa62wElQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWMxNjUyMmMtYmVlOC0z ZDFmLTkyZmQtNjZiYmU2NDIxNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfggTC840flJ8r5zDv2xKGRvrGBgK0SHdwm3z1y6/PBVDIN1jm/oh/8 VQRP+Gzuzf0wusqwRXafIGX8Vd2q6ZKBzpXiHqKw8qEjZa/Y8jlCTXFQxsW8QjjU P8gu1ROIvu1FUTsC7+NpqLK5M3VHUGBP8Z1oBSAKOqFc6AuAKGE7TB9LML7pjbvk seeMZQKCOJRpH+j8cDlKwK9w3WQpciA8Dlu9iuYY39j0hYQEFeUSIz/tmZnGRLzX ihAcUAgDCyKCctBcqN8uJFXvd7cRioVaZTUNmdeX2cypMD8WsccwGubReIqr334J cAaD13hqpftGUBPBhcDu8MVETqfrpfM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:39 2025 by rpki-client