$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa File: 8e39d174-0132-38c7-8666-3ddfd10c3f12.roa (raw, json) Hash identifier: 67nVzBWq3IaQ2VsFFYtBQCPGWRwpMKLfR91gBW99Xa4= Subject key identifier: 05:2E:58:57:BF:A4:D1:17:31:E2:15:41:F9:0A:57:92:88:13:80:C5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69CA4277848A22C336D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9c:a4:27:78:48:a2:2c:33:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=571e6fa8-01b9-4169-a653-73e2bc5faa1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:31:e1:9a:4f:53:05:49:b3:01:9a:7b:a7:08: 53:f9:b5:ed:40:2a:ac:ae:4a:52:fc:14:0c:45:8f: 19:9c:0f:1f:4f:2b:90:69:62:08:e8:8c:38:0f:69: 40:44:77:d5:75:c4:28:c5:27:5b:b6:b2:df:54:e5: ab:4f:1c:aa:6e:8f:0e:0a:1d:ec:04:29:85:e4:d3: 4b:fa:03:f1:4f:7f:07:3a:0d:a7:f5:f0:de:f8:1d: 0c:25:70:6e:41:86:dc:83:59:36:7c:aa:99:14:ee: 70:8d:f8:0a:e6:37:43:89:4e:35:fe:11:00:e9:1f: 9c:09:92:80:32:65:ef:58:90:bb:14:2d:dc:45:93: 84:62:60:f6:d3:18:4b:39:ab:e6:96:77:f5:1c:ae: 77:ae:c7:ff:b1:ef:03:27:a4:79:b2:6b:a2:8d:c0: d1:43:7c:64:35:0d:b0:57:fa:c4:74:f5:31:b9:0b: 47:f2:32:0e:5f:75:d3:35:9a:87:f7:10:0f:b7:93: 00:ca:f7:77:f7:f7:e4:7d:f7:31:40:bb:6a:6f:93: fd:74:c3:08:51:23:8b:3c:ee:50:e7:34:29:7d:92: 04:64:62:6b:5a:77:93:0e:98:ba:f5:b0:bc:6f:5e: c7:32:4b:f9:b7:1f:3f:ad:c5:80:51:2b:e0:51:06: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2E:58:57:BF:A4:D1:17:31:E2:15:41:F9:0A:57:92:88:13:80:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8e39d174-0132-38c7-8666-3ddfd10c3f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:40:3a:0e:96:da:65:3d:d7:95:81:fb:34:0e:51:87:14:7e: 8d:ed:c3:0a:db:61:75:7d:a2:76:7a:f7:09:fb:b1:10:d3:1b: 6f:68:5b:64:b6:04:ac:66:65:82:b9:40:f2:3b:98:bb:be:86: f2:80:ab:e0:ef:18:11:57:7a:97:2f:70:a8:6c:86:b8:b9:cb: a2:03:5e:59:82:02:9d:e9:a8:cf:c3:f4:5a:ef:f0:5e:43:e7: cf:a8:86:ee:8d:42:a8:2e:85:2a:62:e8:a3:97:29:8f:c8:4e: 4e:e9:50:78:c6:4e:70:d4:44:f5:29:b1:a9:18:bb:4d:81:ff: 3a:0a:af:75:56:ba:8a:25:2d:e7:f2:ee:25:0d:02:3d:97:10: 57:22:c0:f8:33:d4:97:90:32:3b:9a:90:81:c6:f8:a1:c3:dc: 3f:cf:40:81:77:af:f0:ba:9f:6c:59:cd:83:1d:50:2a:53:f9: cc:95:93:c0:1a:5c:09:6c:dc:71:69:ec:68:82:65:ad:00:c4: 46:41:ce:f8:0f:79:3c:be:92:7d:74:d4:a7:aa:6b:40:ad:d7: 42:ae:72:18:ed:75:ed:76:70:56:7d:c3:a9:6d:6b:5e:15:ed: 68:92:79:e0:c9:50:7a:df:a9:c1:35:fe:13:7e:4c:e6:1c:4d: f9:03:d4:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pykJ3hIoiwzbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk NTcxZTZmYTgtMDFiOS00MTY5LWE2NTMtNzNlMmJjNWZhYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DHhmk9TBUmzAZp7pwhT+bXtQCqsrkpS/BQM RY8ZnA8fTyuQaWII6Iw4D2lARHfVdcQoxSdbtrLfVOWrTxyqbo8OCh3sBCmF5NNL +gPxT38HOg2n9fDe+B0MJXBuQYbcg1k2fKqZFO5wjfgK5jdDiU41/hEA6R+cCZKA MmXvWJC7FC3cRZOEYmD20xhLOavmlnf1HK53rsf/se8DJ6R5smuijcDRQ3xkNQ2w V/rEdPUxuQtH8jIOX3XTNZqH9xAPt5MAyvd39/fkffcxQLtqb5P9dMMIUSOLPO5Q 5zQpfZIEZGJrWneTDpi69bC8b17HMkv5tx8/rcWAUSvgUQabkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUuWFe/pNEXMeIVQfkKV5KIE4DFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGUzOWQxNzQtMDEzMi0z OGM3LTg2NjYtM2RkZmQxMGMzZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1AOg6W2mU915WB+zQOUYcUfo3twwrbYXV9onZ69wn7sRDTG29oW2S2 BKxmZYK5QPI7mLu+hvKAq+DvGBFXepcvcKhshri5y6IDXlmCAp3pqM/D9Frv8F5D 58+ohu6NQqguhSpi6KOXKY/ITk7pUHjGTnDURPUpsakYu02B/zoKr3VWuoolLefy 7iUNAj2XEFciwPgz1JeQMjuakIHG+KHD3D/PQIF3r/C6n2xZzYMdUCpT+cyVk8Aa XAls3HFp7GiCZa0AxEZBzvgPeTy+kn101Keqa0Ct10Kuchjtde12cFZ9w6lta14V 7WiSeeDJUHrfqcE1/hN+TOYcTfkD1Ho= -----END CERTIFICATE-----Generated at Sun Apr 6 11:59:42 2025 by rpki-client