$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/676c3ada-4e38-3a8d-8dfe-54c8fe40216b.roa File: 676c3ada-4e38-3a8d-8dfe-54c8fe40216b.roa (raw, json) Hash identifier: R9Qn4fjY3zsJLzrLQ82o7ZIwI9RSy93DAk3xJRPQj8U= Subject key identifier: 9F:A9:CA:F6:E4:69:83:28:95:AD:05:B7:16:A4:28:35:4C:E1:D2:59 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473AD9E2E02A1D2751D84DE800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/676c3ada-4e38-3a8d-8dfe-54c8fe40216b.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.15.0/24 maxlen: 24 172.68.245.0/24 maxlen: 24 172.68.246.0/24 maxlen: 24 172.70.133.0/24 maxlen: 24 172.70.134.0/24 maxlen: 24 172.70.135.0/24 maxlen: 24 173.245.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:d9:e2:e0:2a:1d:27:51:d8:4d:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=c49b4e8b-7776-488a-8a87-4cf699d19af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:41:9f:fe:4d:f4:50:53:a9:a7:c0:d8:85: 1f:f3:cf:14:ab:58:2f:60:75:e2:45:60:c1:70:1f: 70:c8:ec:6f:7f:a1:24:ee:c9:6f:9c:c3:af:c5:1d: 99:09:6f:91:3f:54:83:94:37:c4:58:88:bb:fd:34: 08:27:32:82:a3:45:4f:11:be:a9:e8:97:05:a7:2b: 6c:80:1c:5e:6a:14:1f:d4:b2:e6:48:0f:0c:08:42: d7:61:6f:24:34:0e:82:6f:0f:f2:51:e3:9a:cd:a0: f1:0a:9f:f0:84:de:b1:cf:eb:aa:dc:d7:0c:2f:30: 43:98:a9:0e:28:78:d9:d3:ad:86:b5:03:c9:d1:41: 8b:95:79:72:08:46:d9:ba:8c:12:c7:5c:d4:cb:46: f2:93:20:97:37:5f:12:34:52:41:29:57:fa:40:a0: 42:a1:bb:ac:c2:41:e2:03:73:ef:0b:8f:b6:35:13: 96:a3:69:3e:5a:b0:2f:6b:26:e6:77:c5:fc:49:92: 05:27:62:74:92:3d:41:27:e1:4f:9b:55:17:af:a8: 19:1d:8a:d4:06:d0:8f:4e:8a:dd:a0:e8:2a:8a:15: 1e:53:39:0a:d6:04:82:83:a5:10:9e:a1:63:04:ef: a9:e0:9e:22:4c:d7:bf:75:18:76:1e:eb:a0:a5:b6: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A9:CA:F6:E4:69:83:28:95:AD:05:B7:16:A4:28:35:4C:E1:D2:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/676c3ada-4e38-3a8d-8dfe-54c8fe40216b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.15.0/24 172.68.245.0-172.68.246.255 172.70.133.0-172.70.135.255 173.245.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8a:e8:00:67:40:d2:08:e4:34:51:73:ff:c2:8c:0b:c7:7b: 18:37:51:37:52:7f:c6:c0:b8:da:6f:5c:53:0c:24:9e:0a:2d: 63:7e:1e:64:03:fd:16:91:c7:b9:6f:f6:f7:22:08:0b:03:10: 09:3f:56:c1:58:03:c2:56:1d:17:98:e6:8e:29:89:6e:b4:46: ef:db:b9:09:2a:51:d1:02:2c:b1:6e:a2:de:11:65:7b:97:b8: 0d:54:d1:f7:28:a6:05:a0:63:bf:4a:29:c3:84:83:42:fc:81: 1d:f3:30:c1:75:d9:03:06:62:03:b1:33:b2:53:8e:6d:c1:7d: 51:6e:e6:c6:aa:96:67:ef:64:bc:59:9b:b1:b1:e0:39:c5:c8: 23:7a:24:cc:df:ce:83:0d:e9:a0:99:aa:5a:0f:a1:93:8c:dd: 4a:92:d1:90:02:b0:34:a5:b9:32:aa:69:69:95:5f:48:54:3e: 49:49:14:fc:cc:5e:72:10:c1:d8:a3:33:d9:5b:23:b1:10:81: f9:01:1e:6e:4d:7b:08:0f:c6:2f:19:ff:74:c4:d6:38:df:83: 46:e5:31:5a:7f:75:81:42:8a:27:c0:4c:22:62:5d:0d:27:a7: 1d:0b:bd:b4:c5:17:21:0f:ca:89:43:9a:1c:08:e6:24:cc:86: ff:86:21:79 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEc62eLgKh0nUdhN6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk YzQ5YjRlOGItNzc3Ni00ODhhLThhODctNGNmNjk5ZDE5YWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6dBn/5N9FBTqafA2IUf888Uq1gvYHXiRWDB cB9wyOxvf6Ek7slvnMOvxR2ZCW+RP1SDlDfEWIi7/TQIJzKCo0VPEb6p6JcFpyts gBxeahQf1LLmSA8MCELXYW8kNA6Cbw/yUeOazaDxCp/whN6xz+uq3NcMLzBDmKkO KHjZ062GtQPJ0UGLlXlyCEbZuowSx1zUy0bykyCXN18SNFJBKVf6QKBCobuswkHi A3PvC4+2NROWo2k+WrAvaybmd8X8SZIFJ2J0kj1BJ+FPm1UXr6gZHYrUBtCPTord oOgqihUeUzkK1gSCg6UQnqFjBO+p4J4iTNe/dRh2HuugpbacEwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFJ+pyvbkaYMola0FtxakKDVM4dJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjc2YzNhZGEtNGUzOC0z YThkLThkZmUtNTRjOGZlNDAyMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQArEQPMAwD BACsRPUDBACsRPYwDAMEAKxGhQMEA6xGgAMEAK31PzBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCqiugAZ0DS COQ0UXP/wowLx3sYN1E3Un/GwLjab1xTDCSeCi1jfh5kA/0Wkce5b/b3IggLAxAJ P1bBWAPCVh0XmOaOKYlutEbv27kJKlHRAiyxbqLeEWV7l7gNVNH3KKYFoGO/SinD hINC/IEd8zDBddkDBmIDsTOyU45twX1RbubGqpZn72S8WZuxseA5xcgjeiTM386D DemgmapaD6GTjN1KktGQArA0pbkyqmlplV9IVD5JSRT8zF5yEMHYozPZWyOxEIH5 AR5uTXsID8YvGf90xNY434NG5TFaf3WBQoonwEwiYl0NJ6cdC720xRchD8qJQ5oc COYkzIb/hiF5 -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:14 2025 by rpki-client