$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/82161a01-70c3-31da-9b41-299da8532c41.roa File: 82161a01-70c3-31da-9b41-299da8532c41.roa (raw, json) Hash identifier: 1ONZ5cjefYDdkENAtVFiidwc4ycMwvKt1r3xNA4ctes= Subject key identifier: 94:71:D7:76:D5:65:2A:CA:00:B9:9D:BC:AC:56:0E:E3:DF:8A:97:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C08EF4BE11ED095F1E7E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/82161a01-70c3-31da-9b41-299da8532c41.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:08:ef:4b:e1:1e:d0:95:f1:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=e197785f-278e-40a3-9982-1f638740c587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:88:74:8a:d9:35:13:e4:cb:d6:e9:bc:ee: e0:f9:dd:c8:82:7c:e7:8c:80:71:3f:81:b1:41:a3: 69:92:ac:0d:83:f5:5e:32:6d:76:9c:82:98:22:a0: 84:1c:56:cd:c6:6c:54:67:bc:38:dd:0e:84:db:04: 72:db:f1:1a:ce:9d:bf:61:7c:0b:b5:e9:4b:af:a5: 86:7e:b7:fd:4f:a2:71:da:8d:d6:a8:fb:22:e3:01: 3d:34:17:40:af:aa:dc:f1:ee:64:62:64:ba:94:4b: 6e:c8:c9:cc:de:62:e7:3a:13:1f:4c:eb:53:7e:58: 31:76:7f:cd:32:70:2a:6c:11:39:f9:00:33:c7:e5: c9:35:bf:34:3a:6e:52:a7:85:cb:6f:41:0f:9c:db: 91:7f:bc:59:fc:46:08:57:39:1d:15:ab:43:6c:a5: 55:6f:bb:ed:b9:e3:2f:d2:be:cb:3b:f6:0a:fb:ab: 11:f3:cc:0b:6a:76:54:68:84:51:59:52:cf:f2:92: ed:83:2e:66:ab:ba:ae:ea:3c:ef:2a:c4:fb:82:b8: 52:ed:fd:e1:59:24:ae:e0:55:97:8b:cc:8d:db:18: b0:8c:8b:ce:52:25:4f:17:cb:31:07:32:86:51:9f: a7:c4:5e:25:82:2e:27:da:94:cf:05:06:6b:99:34: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:71:D7:76:D5:65:2A:CA:00:B9:9D:BC:AC:56:0E:E3:DF:8A:97:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/82161a01-70c3-31da-9b41-299da8532c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:21:56:15:2b:95:b9:9f:8b:c7:bd:e4:2c:e5:eb:17:39:51: 42:ea:78:c3:9d:c1:f4:09:a5:c0:04:7e:a1:ef:48:1e:e7:d3: b9:1b:d9:9f:85:ce:28:c2:92:db:dc:20:69:c0:6f:fd:85:44: c8:7a:9e:fc:a2:80:ee:c7:95:62:0b:83:54:34:ba:e1:78:54: 42:a6:e1:5d:54:15:66:32:0f:16:e9:b8:f7:68:5a:a4:61:f0: 14:e0:7f:17:61:fb:f3:3c:8a:66:4e:3a:0e:24:b9:61:f0:2a: 72:d6:49:de:a4:b7:08:7b:19:f3:31:45:48:df:ae:25:b1:2d: eb:c2:b7:22:77:94:61:d5:5e:3c:5f:8c:27:c2:f5:6d:e7:93: 26:cf:8a:2a:20:e2:ac:1a:6d:f3:27:05:9c:06:e1:0f:b0:db: b9:a6:b8:7a:b6:f6:51:21:b0:1c:54:ad:7a:cc:f9:f6:72:27: 5a:41:18:19:0f:02:85:97:ad:f5:f9:78:31:bb:72:2a:58:41: 60:74:44:eb:2d:10:22:06:b8:a1:e1:54:4f:1b:e3:22:c6:6d: dc:4b:82:94:51:16:e7:d1:e6:39:6a:ec:de:bb:50:fa:ee:6b: a8:6e:c5:c6:8b:50:6f:b3:c6:4e:c8:22:5b:48:e6:26:bc:7f: f4:84:2b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAjvS+Ee0JXx5+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZTE5Nzc4NWYtMjc4ZS00MGEzLTk5ODItMWY2Mzg3NDBjNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHCIdIrZNRPky9bpvO7g+d3IgnznjIBxP4Gx QaNpkqwNg/VeMm12nIKYIqCEHFbNxmxUZ7w43Q6E2wRy2/Eazp2/YXwLtelLr6WG frf9T6Jx2o3WqPsi4wE9NBdAr6rc8e5kYmS6lEtuyMnM3mLnOhMfTOtTflgxdn/N MnAqbBE5+QAzx+XJNb80Om5Sp4XLb0EPnNuRf7xZ/EYIVzkdFatDbKVVb7vtueMv 0r7LO/YK+6sR88wLanZUaIRRWVLP8pLtgy5mq7qu6jzvKsT7grhS7f3hWSSu4FWX i8yN2xiwjIvOUiVPF8sxBzKGUZ+nxF4lgi4n2pTPBQZrmTRWLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRx13bVZSrKALmdvKxWDuPfipcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODIxNjFhMDEtNzBjMy0z MWRhLTliNDEtMjk5ZGE4NTMyYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIhVhUrlbmfi8e95Czl6xc5UULqeMOdwfQJpcAEfqHvSB7n07kb2Z+F zijCktvcIGnAb/2FRMh6nvyigO7HlWILg1Q0uuF4VEKm4V1UFWYyDxbpuPdoWqRh 8BTgfxdh+/M8imZOOg4kuWHwKnLWSd6ktwh7GfMxRUjfriWxLevCtyJ3lGHVXjxf jCfC9W3nkybPiiog4qwabfMnBZwG4Q+w27mmuHq29lEhsBxUrXrM+fZyJ1pBGBkP AoWXrfX5eDG7cipYQWB0ROstECIGuKHhVE8b4yLGbdxLgpRRFufR5jlq7N67UPru a6huxcaLUG+zxk7IIltI5ia8f/SEK8U= -----END CERTIFICATE-----Generated at Sat Apr 5 10:15:36 2025 by rpki-client