$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa File: 9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa (raw, json) Hash identifier: OAeL7XO7FOmGmqObYjGgB7U+DWSRfSFoUIRvQuuby0s= Subject key identifier: 5F:54:47:9E:F9:2C:E1:84:A1:24:2D:28:B2:5B:82:7E:A5:0E:95:73 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490881910D1A12C4C952516380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:91:0d:1a:12:c4:c9:52:51:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=99d7cd2c-ec10-40fb-90c1-8b1024ac1685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f8:e3:90:e9:c3:c0:97:87:9a:43:b8:a0:54: 3e:86:7d:b2:57:c9:a8:77:79:1c:5e:13:82:e6:03: df:be:99:61:e4:ea:e6:43:42:37:f3:f9:99:0f:52: e3:fa:f7:1f:98:d7:c9:3a:16:2b:ef:3a:8b:be:d8: 52:ff:95:15:8a:20:3b:c6:09:73:d5:99:d0:0e:6d: cf:82:17:0e:de:ef:7d:dd:0a:6e:8a:77:a3:cd:68: 2b:60:d1:e9:92:82:cd:be:23:5d:01:79:64:50:3d: 42:ef:15:26:2d:22:06:22:61:cb:8d:00:8b:10:59: 06:a7:83:b2:39:fa:7c:f3:3a:aa:73:f2:2d:6e:61: 47:85:4a:94:b9:c9:44:e9:d9:d3:bb:a2:f0:7a:5e: 54:34:59:e4:66:32:c2:af:a4:cc:a5:5e:21:38:80: 5d:05:8a:a3:07:2f:17:6b:79:c2:1b:62:2a:54:8a: 62:f7:71:8e:84:36:d2:b6:6a:79:cb:bc:31:aa:02: 3a:c4:1e:2b:c8:6c:c7:72:7c:96:54:2f:97:a9:4a: 56:ed:9c:a9:2c:e5:ee:2f:e4:21:f1:09:6b:84:e7: 7b:1c:71:0a:3d:21:89:5d:ca:06:3f:0c:ee:91:f9: 6d:c7:d7:e6:c2:d1:f5:38:21:8b:e9:35:1a:84:3a: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:54:47:9E:F9:2C:E1:84:A1:24:2D:28:B2:5B:82:7E:A5:0E:95:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9284f204-6163-3e08-8fa0-c12bfc4bc4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:2b:cf:6a:59:b5:20:28:d4:f6:0b:97:59:ab:51:f5:03:98: 63:a7:bb:04:99:ba:fc:eb:81:d3:55:0a:5e:56:66:f8:97:c1: 48:c2:35:05:d6:db:99:88:c0:be:90:0f:92:13:2e:cc:f4:41: 70:61:1f:5f:8f:d4:d4:ca:8e:3b:f6:04:5c:91:46:46:59:89: 2d:21:2a:e3:43:f1:8b:0d:77:5b:f0:47:49:4a:d7:f7:41:4e: df:27:14:87:dd:42:c5:e6:70:56:3b:ee:61:8a:6d:89:a0:de: b7:60:7c:ac:29:da:d5:62:47:96:5d:a1:78:46:9d:bb:7e:a8: 64:d0:74:e7:6f:d4:b4:08:5d:59:29:c8:89:de:46:46:f5:77: 5d:a2:ac:9f:bd:42:d7:d9:31:bd:0e:3c:3a:73:d8:26:cb:4b: 92:2c:1b:93:7e:00:0e:e4:dc:27:3a:0d:6a:ca:81:84:eb:7a: e5:d4:81:5c:4f:8b:a5:e9:b4:5f:3e:33:6a:67:af:96:60:a4: b3:96:19:17:bc:f4:8a:df:a8:4b:96:2b:31:86:d0:ae:15:9b: 72:53:19:15:77:43:86:78:c0:c3:c7:2d:66:f0:62:07:61:74: 81:aa:b5:48:ea:38:68:81:d5:22:ae:92:a5:37:01:bd:ac:fa: f9:59:46:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZENGhLEyVJRY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OTlkN2NkMmMtZWMxMC00MGZiLTkwYzEtOGIxMDI0YWMxNjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvjjkOnDwJeHmkO4oFQ+hn2yV8mod3kcXhOC 5gPfvplh5OrmQ0I38/mZD1Lj+vcfmNfJOhYr7zqLvthS/5UViiA7xglz1ZnQDm3P ghcO3u993QpuinejzWgrYNHpkoLNviNdAXlkUD1C7xUmLSIGImHLjQCLEFkGp4Oy Ofp88zqqc/ItbmFHhUqUuclE6dnTu6Lwel5UNFnkZjLCr6TMpV4hOIBdBYqjBy8X a3nCG2IqVIpi93GOhDbStmp5y7wxqgI6xB4ryGzHcnyWVC+XqUpW7ZypLOXuL+Qh 8QlrhOd7HHEKPSGJXcoGPwzukfltx9fmwtH1OCGL6TUahDpTiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9UR575LOGEoSQtKLJbgn6lDpVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTI4NGYyMDQtNjE2My0z ZTA4LThmYTAtYzEyYmZjNGJjNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwrz2pZtSAo1PYLl1mrUfUDmGOnuwSZuvzrgdNVCl5WZviXwUjCNQXW 25mIwL6QD5ITLsz0QXBhH1+P1NTKjjv2BFyRRkZZiS0hKuND8YsNd1vwR0lK1/dB Tt8nFIfdQsXmcFY77mGKbYmg3rdgfKwp2tViR5ZdoXhGnbt+qGTQdOdv1LQIXVkp yIneRkb1d12irJ+9QtfZMb0OPDpz2CbLS5IsG5N+AA7k3Cc6DWrKgYTreuXUgVxP i6XptF8+M2pnr5ZgpLOWGRe89IrfqEuWKzGG0K4Vm3JTGRV3Q4Z4wMPHLWbwYgdh dIGqtUjqOGiB1SKukqU3Ab2s+vlZRsA= -----END CERTIFICATE-----Generated at Sat Apr 5 07:46:27 2025 by rpki-client