$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7264d290-210a-35f7-aac9-fd712ec1dbc0.roa File: 7264d290-210a-35f7-aac9-fd712ec1dbc0.roa (raw, json) Hash identifier: PIYO8O4b3EzKdAB8ZY2CN/wWj9bvsEzfrQpKld3HbtM= Subject key identifier: DE:73:61:EB:85:65:88:1F:0F:53:41:A3:8A:F3:1E:55:FC:10:DF:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69DA0C0B7FD78D410DB40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7264d290-210a-35f7-aac9-fd712ec1dbc0.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9d:a0:c0:b7:fd:78:d4:10:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=50ef7653-0148-46de-934f-829cf2cce52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:04:22:f5:d7:98:47:15:2f:2a:21:ae:bd: e2:80:1e:df:69:7a:06:60:bd:74:80:cf:d3:d0:7c: aa:e1:18:16:ce:02:8e:7c:d7:12:88:31:5d:b6:11: 1e:ab:11:b7:13:2e:49:ef:d3:52:3d:e4:41:19:c3: b3:1f:62:d3:37:bd:40:ac:61:c0:5e:6b:a9:8e:50: ad:c9:5d:0a:62:8d:20:f2:54:31:65:74:4f:c1:3a: e4:29:69:d8:71:22:27:3e:2c:97:45:cb:f6:51:80: 25:28:6a:e7:b2:5e:8e:db:59:53:6b:42:fa:d8:65: fa:71:ab:e1:89:c8:72:25:c3:4c:fc:56:38:1e:39: 51:e8:21:46:d2:25:62:d1:67:c7:ac:ed:56:1c:06: 0f:84:d1:ae:3b:94:cf:06:eb:20:d2:00:1a:ba:be: 89:11:46:9e:33:48:57:47:21:c8:74:23:53:dd:c6: d1:18:45:e9:80:88:6a:fc:f2:49:f2:c9:82:c0:99: da:d3:01:40:48:26:90:b8:87:fc:07:10:67:bc:94: f7:75:24:e3:fb:d9:51:54:31:ce:69:c6:b3:4d:d0: e2:3b:cd:e6:75:71:d5:0a:b4:35:7a:f0:12:54:23: 32:58:29:be:09:ef:fe:3b:54:7c:f7:46:6a:61:73: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:73:61:EB:85:65:88:1F:0F:53:41:A3:8A:F3:1E:55:FC:10:DF:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7264d290-210a-35f7-aac9-fd712ec1dbc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:75:fa:8c:05:1c:a3:aa:23:6b:68:d8:b1:73:33:f4:83:95: c0:96:54:8d:96:b8:58:85:6a:0d:02:e1:69:a5:e7:1f:57:0c: 44:1b:e9:08:ff:17:47:0f:9d:16:99:8e:a7:2c:f0:3a:12:5b: 48:fa:90:e9:26:97:9c:7b:9e:08:bc:68:41:f9:f1:a6:24:00: 94:cb:40:10:66:6c:2a:d2:4c:91:da:4b:f5:6b:c8:a1:18:08: 3e:91:4c:52:25:0f:e6:b9:b7:8a:27:a7:80:65:94:33:0e:8a: 0f:a3:69:1d:2e:60:7b:e3:f4:13:9a:14:57:47:87:a9:b0:27: ec:ce:81:a0:69:5b:86:41:58:2a:f9:fd:69:41:f9:2d:66:ef: 02:c8:5f:e9:dd:e6:85:ec:b4:55:25:42:ce:db:a9:71:d3:4a: db:5f:2e:2d:0c:98:9b:2b:37:30:c8:a4:d5:6f:e0:ad:35:cc: 6b:4b:6d:a9:38:3b:f2:20:5c:20:27:b8:87:c7:fb:f4:f5:63: 7b:71:63:c5:c6:70:6a:29:ef:04:6f:09:fd:fb:77:4a:f9:cc: e5:91:11:61:7f:10:dd:a7:01:5b:74:0a:31:55:72:56:c8:2a: 7d:61:3d:9b:2e:3a:dc:4d:d8:49:41:c4:37:6f:d3:f4:cc:bf: 28:03:e6:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p2gwLf9eNQQ20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk NTBlZjc2NTMtMDE0OC00NmRlLTkzNGYtODI5Y2YyY2NlNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxQEIvXXmEcVLyohrr3igB7faXoGYL10gM/T 0Hyq4RgWzgKOfNcSiDFdthEeqxG3Ey5J79NSPeRBGcOzH2LTN71ArGHAXmupjlCt yV0KYo0g8lQxZXRPwTrkKWnYcSInPiyXRcv2UYAlKGrnsl6O21lTa0L62GX6cavh ichyJcNM/FY4HjlR6CFG0iVi0WfHrO1WHAYPhNGuO5TPBusg0gAaur6JEUaeM0hX RyHIdCNT3cbRGEXpgIhq/PJJ8smCwJna0wFASCaQuIf8BxBnvJT3dSTj+9lRVDHO acazTdDiO83mdXHVCrQ1evASVCMyWCm+Ce/+O1R890ZqYXPW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5zYeuFZYgfD1NBo4rzHlX8EN8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzI2NGQyOTAtMjEwYS0z NWY3LWFhYzktZmQ3MTJlYzFkYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl1+owFHKOqI2to2LFzM/SDlcCWVI2WuFiFag0C4Wml5x9XDEQb6Qj/ F0cPnRaZjqcs8DoSW0j6kOkml5x7ngi8aEH58aYkAJTLQBBmbCrSTJHaS/VryKEY CD6RTFIlD+a5t4onp4BllDMOig+jaR0uYHvj9BOaFFdHh6mwJ+zOgaBpW4ZBWCr5 /WlB+S1m7wLIX+nd5oXstFUlQs7bqXHTSttfLi0MmJsrNzDIpNVv4K01zGtLbak4 O/IgXCAnuIfH+/T1Y3txY8XGcGop7wRvCf37d0r5zOWREWF/EN2nAVt0CjFVclbI Kn1hPZsuOtxN2ElBxDdv0/TMvygD5p8= -----END CERTIFICATE-----Generated at Sat Apr 5 07:38:59 2025 by rpki-client