$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa File: 8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa (raw, json) Hash identifier: b1Q+6l178tMrO6oOsPTKCOc7PsLNSF0dM8tYqF0ZiO0= Subject key identifier: FD:CD:2D:77:12:60:AC:39:01:07:1D:34:EB:37:B4:59:15:4A:56:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818FE5137CD0DD64EFEAA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8f:e5:13:7c:d0:dd:64:ef:ea:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=fa1e3faf-ff34-41a9-99f5-bfe03e33485a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cf:1e:17:bc:82:86:8a:f7:04:90:a4:44:6a: b3:32:80:4f:28:13:10:8a:62:b1:dd:f5:c1:14:a8: f0:a3:c1:67:a7:05:c6:b3:b7:1b:fb:c1:10:46:9a: 6c:db:09:d4:6b:df:de:12:58:a4:6c:d7:01:cc:14: 65:53:87:8d:7b:b4:99:43:99:6b:0a:1e:0b:84:4c: d6:f6:cc:41:c9:9f:80:ea:6e:4c:eb:19:41:a2:b6: 87:98:01:99:d6:6c:b3:c1:98:ff:10:08:cd:27:c1: 19:46:f8:f0:b7:a0:a8:9b:af:c1:e4:44:77:f1:8c: 36:0b:8e:f4:8e:c9:14:2d:95:73:45:6f:67:0e:13: d9:0b:9f:6b:47:48:5b:f7:c8:9a:7b:3b:f5:73:8a: 96:8d:9c:ac:96:fa:fb:0f:26:84:52:3c:24:55:30: a2:ce:63:f3:79:a8:6b:ed:12:16:08:c5:e0:c3:15: be:2a:d5:6d:0b:b4:19:d4:89:e2:b8:4a:44:12:95: 82:6c:ef:af:e1:ac:78:49:43:a4:2c:ee:f4:67:26: ff:36:36:df:6b:cc:42:ec:11:a4:8e:ba:4d:08:7d: 3c:05:be:d2:47:d8:10:a9:24:02:b3:c7:d2:ca:01: 57:35:78:ab:d2:42:04:e2:27:04:b5:cb:98:bb:5f: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CD:2D:77:12:60:AC:39:01:07:1D:34:EB:37:B4:59:15:4A:56:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8951cdf5-ce90-391e-81ed-4ff99db0c9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bf:5d:e5:a1:07:99:b7:be:d9:73:c8:22:05:fd:5c:46:bf: be:75:ac:26:7a:3b:15:f1:85:e5:55:8f:4c:11:83:7a:c3:53: ea:5b:88:ed:25:09:b7:b1:88:ff:c1:0f:30:52:2f:6a:fe:ec: 19:50:d0:7e:a2:17:6a:e1:04:ad:03:29:c8:8f:ad:22:72:ff: db:f3:ed:55:2d:3e:3b:26:64:1d:71:1d:ff:1d:f8:70:2c:b5: ee:25:c9:ad:01:50:7d:1f:b3:93:f3:03:50:b1:b8:a1:ee:05: 80:aa:4f:bc:f2:e5:96:20:d9:37:ec:a2:ae:10:6d:fb:ca:78: 79:86:6f:92:63:44:f2:7d:0e:20:46:5b:ac:0f:b5:97:1e:9e: 44:3d:27:a1:03:8f:5d:66:03:09:ad:a3:06:8b:a6:b9:d9:c6: 3a:98:d6:1e:be:65:3d:3a:23:47:e9:9e:92:a8:bd:f2:cf:3d: 8d:8f:c8:1b:e5:9a:35:69:19:88:c7:15:85:ef:68:26:82:ca: 0d:f7:f9:ca:1f:7c:62:88:cc:2d:22:e4:0b:50:b2:c6:89:22: 30:a5:1c:c1:ef:a5:52:ef:92:33:a6:0e:2c:a2:e7:e2:7a:78: 0a:69:a4:97:a5:04:58:c3:72:03:2c:d4:2f:aa:03:cc:57:d4: 66:8c:53:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgY/lE3zQ3WTv6qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmExZTNmYWYtZmYzNC00MWE5LTk5ZjUtYmZlMDNlMzM0ODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc8eF7yChor3BJCkRGqzMoBPKBMQimKx3fXB FKjwo8FnpwXGs7cb+8EQRpps2wnUa9/eElikbNcBzBRlU4eNe7SZQ5lrCh4LhEzW 9sxByZ+A6m5M6xlBoraHmAGZ1myzwZj/EAjNJ8EZRvjwt6Com6/B5ER38Yw2C470 jskULZVzRW9nDhPZC59rR0hb98iaezv1c4qWjZyslvr7DyaEUjwkVTCizmPzeahr 7RIWCMXgwxW+KtVtC7QZ1IniuEpEEpWCbO+v4ax4SUOkLO70Zyb/Njbfa8xC7BGk jrpNCH08Bb7SR9gQqSQCs8fSygFXNXir0kIE4icEtcuYu18FPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3NLXcSYKw5AQcdNOs3tFkVSlbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODk1MWNkZjUtY2U5MC0z OTFlLTgxZWQtNGZmOTlkYjBjOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy/XeWhB5m3vtlzyCIF/VxGv751rCZ6OxXxheVVj0wRg3rDU+pbiO0l CbexiP/BDzBSL2r+7BlQ0H6iF2rhBK0DKciPrSJy/9vz7VUtPjsmZB1xHf8d+HAs te4lya0BUH0fs5PzA1CxuKHuBYCqT7zy5ZYg2Tfsoq4QbfvKeHmGb5JjRPJ9DiBG W6wPtZcenkQ9J6EDj11mAwmtowaLprnZxjqY1h6+ZT06I0fpnpKovfLPPY2PyBvl mjVpGYjHFYXvaCaCyg33+coffGKIzC0i5AtQssaJIjClHMHvpVLvkjOmDiyi5+J6 eApppJelBFjDcgMs1C+qA8xX1GaMU1I= -----END CERTIFICATE-----Generated at Sat Apr 5 07:59:31 2025 by rpki-client