$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ae98a3d-af6f-3e91-936f-1a5943ba9ca5.roa File: 8ae98a3d-af6f-3e91-936f-1a5943ba9ca5.roa (raw, json) Hash identifier: Cz0qsnY0OSO+KBAyjtaPv1pTY3OBakUcPgICSlP1+6E= Subject key identifier: F8:82:71:9D:85:AC:72:20:69:BF:E5:9F:D4:BD:FC:45:A7:1C:00:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BF5C4B0F8224DD35B8B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ae98a3d-af6f-3e91-936f-1a5943ba9ca5.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f5:c4:b0:f8:22:4d:d3:5b:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=aa5c700e-7eaa-42c3-9bfd-fa4f600e1331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:85:ca:37:69:11:1a:cd:c6:c6:99:ca:7f: 5a:bf:8d:18:2d:74:52:a4:00:a2:12:51:c2:77:cf: e9:f4:9d:77:28:f8:f0:61:ad:00:b5:ab:67:b4:1b: 9c:06:1b:42:ef:ae:a6:75:73:97:96:1d:08:1b:14: 26:9d:1d:ec:d5:16:29:c8:29:a2:f8:8b:ed:4d:2b: a6:6a:56:71:95:c7:1b:6a:16:77:76:55:ce:2c:54: f4:f3:12:ee:a2:24:7a:4c:8a:a8:bc:02:80:d3:97: 69:fb:a1:14:5d:b6:53:e2:92:fd:46:f4:ef:bd:b3: ae:e7:08:fc:cd:25:0b:fd:3e:ae:69:1b:57:ee:b8: d6:ac:3e:40:6c:ec:a2:0e:a3:21:af:14:76:71:c4: 9f:fd:d5:3e:34:71:78:a4:47:d6:4f:c3:53:8e:76: 77:46:b7:33:ec:ac:66:b7:d5:d6:9d:7c:ec:7b:d1: 42:44:8c:1c:aa:77:ca:3b:b3:d3:71:1a:21:f1:b6: 66:13:9e:9d:d6:a2:21:7a:e7:20:1c:28:f8:c1:66: 20:52:05:32:78:05:f1:24:17:e1:ef:f2:41:c9:41: 51:5b:8e:4e:53:66:87:af:4a:59:ab:eb:75:45:46: 8d:22:3d:02:2f:59:0e:32:04:3d:22:32:94:85:fd: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:82:71:9D:85:AC:72:20:69:BF:E5:9F:D4:BD:FC:45:A7:1C:00:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ae98a3d-af6f-3e91-936f-1a5943ba9ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:3d:b7:08:60:2c:58:b0:d0:25:da:51:03:60:7f:28:9b:2f: 45:fb:56:f2:eb:3e:f5:37:1d:80:ec:16:79:74:68:76:88:bb: 43:2d:58:ad:df:dc:0f:14:6e:de:bb:6f:39:b1:69:2c:0d:51: d4:cc:14:3f:18:3e:14:d9:53:9a:13:2a:50:05:64:6e:43:02: 75:fa:57:35:d8:21:ab:ac:76:f5:d3:05:bc:91:84:9f:6c:37: 6e:79:3d:08:fa:b6:a2:e9:39:44:65:4f:18:74:e9:45:2f:85: 52:0c:76:a7:bb:40:cd:76:08:e1:8b:bd:32:cf:b8:52:66:fc: ae:e2:cf:57:d2:1a:70:6c:dd:9a:af:a5:f8:12:60:d3:7d:9c: aa:c6:fe:3c:bd:67:b4:22:58:72:e9:87:59:cc:ac:e6:9d:63: c6:3a:fe:1b:09:e3:fe:ae:1a:c2:9b:25:84:ee:81:44:a9:32: 68:29:b9:f2:6c:1f:88:eb:c3:70:d5:7a:67:f2:c7:57:c8:01: 7e:0e:4b:35:80:7b:b5:6f:b4:92:83:b5:42:af:e2:4d:54:5f: 63:59:90:62:8e:30:7e:40:14:2e:19:cc:b0:c4:96:35:6e:31: a5:a2:3e:c5:98:e8:db:71:0f:af:37:46:b1:81:bc:6b:54:29: 87:5a:41:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/XEsPgiTdNbi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk YWE1YzcwMGUtN2VhYS00MmMzLTliZmQtZmE0ZjYwMGUxMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTaFyjdpERrNxsaZyn9av40YLXRSpACiElHC d8/p9J13KPjwYa0AtatntBucBhtC766mdXOXlh0IGxQmnR3s1RYpyCmi+IvtTSum alZxlccbahZ3dlXOLFT08xLuoiR6TIqovAKA05dp+6EUXbZT4pL9RvTvvbOu5wj8 zSUL/T6uaRtX7rjWrD5AbOyiDqMhrxR2ccSf/dU+NHF4pEfWT8NTjnZ3Rrcz7Kxm t9XWnXzse9FCRIwcqnfKO7PTcRoh8bZmE56d1qIheucgHCj4wWYgUgUyeAXxJBfh 7/JByUFRW45OU2aHr0pZq+t1RUaNIj0CL1kOMgQ9IjKUhf03EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiCcZ2FrHIgab/ln9S9/EWnHAD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGFlOThhM2QtYWY2Zi0z ZTkxLTkzNmYtMWE1OTQzYmE5Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw9twhgLFiw0CXaUQNgfyibL0X7VvLrPvU3HYDsFnl0aHaIu0MtWK3f 3A8Ubt67bzmxaSwNUdTMFD8YPhTZU5oTKlAFZG5DAnX6VzXYIausdvXTBbyRhJ9s N255PQj6tqLpOURlTxh06UUvhVIMdqe7QM12COGLvTLPuFJm/K7iz1fSGnBs3Zqv pfgSYNN9nKrG/jy9Z7QiWHLph1nMrOadY8Y6/hsJ4/6uGsKbJYTugUSpMmgpufJs H4jrw3DVemfyx1fIAX4OSzWAe7VvtJKDtUKv4k1UX2NZkGKOMH5AFC4ZzLDEljVu MaWiPsWY6NtxD683RrGBvGtUKYdaQTk= -----END CERTIFICATE-----Generated at Sat Apr 5 04:33:56 2025 by rpki-client