$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddf7faa-8799-353b-8130-5ef3e25525ca.roa File: 5ddf7faa-8799-353b-8130-5ef3e25525ca.roa (raw, json) Hash identifier: Loa3BtpTjeCTyuF9+vD2ca61WA30uKS8myT3QyHAIzU= Subject key identifier: 79:AE:82:D2:88:B3:BE:8E:B7:31:4E:46:5A:80:C8:36:D3:47:9F:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69CC0D9990340FE7DA920 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddf7faa-8799-353b-8130-5ef3e25525ca.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9c:c0:d9:99:03:40:fe:7d:a9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=2044e040-d6a8-4b3d-876b-9f91ae94ae1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:53:37:23:3c:2d:ad:fc:cf:19:19:58:fe: 1c:bb:f3:a0:56:79:f8:cc:dc:39:d1:ff:72:1d:f2: 5e:4c:62:f6:e3:42:3d:f3:6a:7f:eb:c1:a9:6a:2e: de:0d:2d:c5:d6:10:4e:cd:8c:01:07:de:05:b1:90: c5:57:28:04:da:cc:c4:db:00:0e:73:19:13:3d:40: b5:d9:06:7c:41:60:3e:c1:39:14:f5:81:88:28:eb: c7:90:45:d3:dd:de:7a:6a:7e:a5:b3:a2:09:f6:49: 64:e4:8e:88:fa:31:b0:b8:f9:01:49:ff:a2:28:95: 63:03:12:cf:77:e9:3b:fd:00:69:c9:05:19:d4:a9: 1b:01:c1:2c:7d:c6:80:2e:2f:91:72:c7:ac:40:5f: 40:1b:3e:02:74:3c:26:8f:2c:29:ab:e1:d8:d4:34: 91:b0:5a:84:a4:95:d5:72:ee:e2:b7:7a:fa:2f:3a: 99:67:8c:cb:1c:02:25:5e:c9:83:b9:b9:a3:24:f2: a7:58:3c:7f:4e:00:c0:3f:00:38:f1:e9:87:2d:8e: 8a:4b:54:7a:0d:9f:5c:17:9c:53:3f:a1:98:84:ac: fa:89:15:83:2a:b7:a3:eb:78:55:46:80:5c:58:94: 57:7e:b0:3b:6e:31:1c:ea:d2:e4:0f:3f:c6:7e:64: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AE:82:D2:88:B3:BE:8E:B7:31:4E:46:5A:80:C8:36:D3:47:9F:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5ddf7faa-8799-353b-8130-5ef3e25525ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:42:2e:29:f6:e7:eb:93:79:a5:1b:c0:da:52:bf:e4:c5:bb: 92:57:7d:6a:d8:d8:3a:88:ec:ad:77:88:0c:28:1b:91:16:3d: 03:f6:ca:c3:43:20:4a:89:28:d1:f0:5a:b5:4a:ff:64:6a:da: 77:c3:7c:52:c5:eb:4a:44:61:fd:e9:8d:a5:eb:32:a0:63:df: 78:1c:87:be:05:2a:b8:fd:4c:13:db:70:a0:12:15:57:ef:8d: 00:67:1e:79:da:ee:34:7a:43:3e:1f:98:11:3b:0b:7b:31:6d: 54:ee:0f:18:68:32:42:81:99:30:9e:ab:9e:a8:2d:55:40:a9: 95:7a:5e:3a:51:9a:ce:be:9e:d6:fd:8f:e1:43:76:40:d5:4b: 88:0f:55:df:80:0d:67:5b:e6:2e:10:26:3f:8a:3c:09:c3:e1: 07:c0:13:a0:a7:66:aa:67:32:04:4a:09:4a:06:8b:2e:be:ee: 9a:87:c8:1b:00:2b:4c:b6:e6:a7:05:60:ae:f9:02:82:b7:07: aa:ff:eb:bb:4f:7e:9f:b3:dc:bf:77:c0:d4:b8:98:76:41:88: 22:0f:14:ed:50:8e:e2:b0:6e:a4:44:dd:e0:66:92:59:94:15: af:78:33:29:ce:e3:16:a2:11:ec:f7:62:fb:25:d6:e3:2e:ea: a8:18:cb:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pzA2ZkDQP59qSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MjA0NGUwNDAtZDZhOC00YjNkLTg3NmItOWY5MWFlOTRhZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXpTNyM8La38zxkZWP4cu/OgVnn4zNw50f9y HfJeTGL240I982p/68Gpai7eDS3F1hBOzYwBB94FsZDFVygE2szE2wAOcxkTPUC1 2QZ8QWA+wTkU9YGIKOvHkEXT3d56an6ls6IJ9klk5I6I+jGwuPkBSf+iKJVjAxLP d+k7/QBpyQUZ1KkbAcEsfcaALi+RcsesQF9AGz4CdDwmjywpq+HY1DSRsFqEpJXV cu7it3r6LzqZZ4zLHAIlXsmDubmjJPKnWDx/TgDAPwA48emHLY6KS1R6DZ9cF5xT P6GYhKz6iRWDKrej63hVRoBcWJRXfrA7bjEc6tLkDz/GfmRpOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmugtKIs76OtzFORlqAyDbTR58EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWRkZjdmYWEtODc5OS0z NTNiLTgxMzAtNWVmM2UyNTUyNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNCLin25+uTeaUbwNpSv+TFu5JXfWrY2DqI7K13iAwoG5EWPQP2ysND IEqJKNHwWrVK/2Rq2nfDfFLF60pEYf3pjaXrMqBj33gch74FKrj9TBPbcKASFVfv jQBnHnna7jR6Qz4fmBE7C3sxbVTuDxhoMkKBmTCeq56oLVVAqZV6XjpRms6+ntb9 j+FDdkDVS4gPVd+ADWdb5i4QJj+KPAnD4QfAE6CnZqpnMgRKCUoGiy6+7pqHyBsA K0y25qcFYK75AoK3B6r/67tPfp+z3L93wNS4mHZBiCIPFO1QjuKwbqRE3eBmklmU Fa94MynO4xaiEez3Yvsl1uMu6qgYyxo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:25:36 2025 by rpki-client