$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5db87f2a-9ad3-3d46-801b-97f355b63a2f.roa File: 5db87f2a-9ad3-3d46-801b-97f355b63a2f.roa (raw, json) Hash identifier: keVUT3Sv6W3bOw6ekTxzpG9qVgLBBrCmpyNXoXk16CM= Subject key identifier: D5:E2:96:2A:87:F6:22:23:28:06:A0:48:A4:AE:BA:1F:AF:69:CC:47 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818B06C8421BC1B92938B0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5db87f2a-9ad3-3d46-801b-97f355b63a2f.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.64.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8b:06:c8:42:1b:c1:b9:29:38:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=5b947f7a-33e1-4afb-b90e-deba9f23e978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:4c:91:e2:71:fc:b0:8d:df:0f:b9:19:3f: 27:d7:50:8d:b2:4b:af:70:1a:40:c1:7b:6c:99:75: 5c:cf:76:d3:d7:89:20:01:aa:0a:29:f6:a5:10:3b: 68:9e:2e:43:05:c3:6a:ab:8a:f2:64:6b:36:44:51: 9a:85:99:dd:3c:05:2f:d2:ca:63:f1:b8:e9:54:c1: 1d:c2:76:f7:df:fb:59:30:29:62:7a:26:35:8c:a0: 4c:f5:53:7b:e5:ee:1f:4f:ff:75:cf:67:83:7e:77: 72:d0:33:da:f5:7c:4d:06:45:a1:78:c3:f0:fd:58: d3:34:7d:81:6f:41:aa:b5:46:06:9e:4c:95:55:19: 3a:6f:59:25:1c:f1:59:f0:0e:39:48:9d:12:22:32: 02:b1:47:60:9f:69:be:48:1f:43:dd:e5:6b:e0:cc: 37:c6:2c:0f:2a:9b:96:01:7b:a4:e4:2a:f9:65:f9: fa:88:7d:19:22:31:7c:70:57:58:9c:5d:f7:79:f2: a2:ef:52:a3:24:d1:21:c6:47:11:5d:ac:32:ef:c6: 78:8c:c7:0a:d8:7c:ab:66:b7:98:de:34:dd:fe:4f: 02:02:d8:2e:ae:16:06:b2:91:da:e7:2c:ac:f0:78: 59:b9:8f:0e:7f:ef:85:32:0d:b8:1c:c3:59:76:09: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:96:2A:87:F6:22:23:28:06:A0:48:A4:AE:BA:1F:AF:69:CC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5db87f2a-9ad3-3d46-801b-97f355b63a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:24:42:62:f6:5a:ee:45:82:95:c9:d2:38:ee:53:90:00:df: 38:34:50:44:2f:83:02:ba:af:dc:b7:1a:ab:8b:0c:91:5b:63: c9:62:43:78:ff:22:01:4c:30:60:64:1c:45:da:75:cf:d8:17: 78:a3:13:d5:af:bf:f5:92:f9:c6:94:ee:97:9f:33:77:60:3f: 5a:ce:8c:ce:1b:f3:14:96:8f:8e:15:72:c8:5d:31:43:2f:2f: ee:82:59:c1:48:54:e5:94:ff:0a:93:d9:94:8e:a7:b6:63:d2: a0:3a:4a:02:3b:3d:19:07:14:94:c5:97:21:88:fe:6c:bc:75: b4:ec:cc:ce:65:b4:ac:e0:b0:17:76:8c:35:cd:51:32:a5:da: 0a:39:5a:cc:87:42:45:5b:f5:a5:d9:56:85:52:31:e4:a5:ff: 5b:51:e5:fe:80:3d:78:ea:af:f0:e3:4a:40:65:98:d2:65:bc: 11:90:66:1a:92:b3:c4:c0:e9:06:18:97:04:da:c3:50:8d:e3: 88:c5:aa:fc:f6:29:5e:b7:99:b9:54:38:cc:aa:05:19:8d:48: bd:a1:3b:1f:71:1a:3b:9a:b1:02:c5:dd:37:49:c9:45:73:4e: dc:7f:33:62:ad:a8:08:e8:d9:04:4d:f0:b9:14:6b:52:c3:e7: 79:b2:ef:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYsGyEIbwbkpOLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NWI5NDdmN2EtMzNlMS00YWZiLWI5MGUtZGViYTlmMjNlOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0exMkeJx/LCN3w+5GT8n11CNskuvcBpAwXts mXVcz3bT14kgAaoKKfalEDtoni5DBcNqq4ryZGs2RFGahZndPAUv0spj8bjpVMEd wnb33/tZMClieiY1jKBM9VN75e4fT/91z2eDfndy0DPa9XxNBkWheMPw/VjTNH2B b0GqtUYGnkyVVRk6b1klHPFZ8A45SJ0SIjICsUdgn2m+SB9D3eVr4Mw3xiwPKpuW AXuk5Cr5Zfn6iH0ZIjF8cFdYnF33efKi71KjJNEhxkcRXawy78Z4jMcK2HyrZreY 3jTd/k8CAtgurhYGspHa5yys8HhZuY8Of++FMg24HMNZdgnTWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXiliqH9iIjKAagSKSuuh+vacxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWRiODdmMmEtOWFkMy0z ZDQ2LTgwMWItOTdmMzU1YjYzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8kQmL2Wu5FgpXJ0jjuU5AA3zg0UEQvgwK6r9y3GquLDJFbY8liQ3j/ IgFMMGBkHEXadc/YF3ijE9Wvv/WS+caU7pefM3dgP1rOjM4b8xSWj44VcshdMUMv L+6CWcFIVOWU/wqT2ZSOp7Zj0qA6SgI7PRkHFJTFlyGI/my8dbTszM5ltKzgsBd2 jDXNUTKl2go5WsyHQkVb9aXZVoVSMeSl/1tR5f6APXjqr/DjSkBlmNJlvBGQZhqS s8TA6QYYlwTaw1CN44jFqvz2KV63mblUOMyqBRmNSL2hOx9xGjuasQLF3TdJyUVz Ttx/M2KtqAjo2QRN8LkUa1LD53my7+g= -----END CERTIFICATE-----Generated at Sat Apr 5 07:34:01 2025 by rpki-client