$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/939403aa-40ef-31de-8a1b-dffc0c092dbe.roa File: 939403aa-40ef-31de-8a1b-dffc0c092dbe.roa (raw, json) Hash identifier: i11YNv9n7gYZ9HQlFF8A8nyE6wB57jbRUzxyskxF8jo= Subject key identifier: 55:2C:95:A0:5C:2D:EE:3C:D9:05:1B:50:09:D1:89:45:5D:3D:2E:C3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E16BEB7CDD92DCF07F2AC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/939403aa-40ef-31de-8a1b-dffc0c092dbe.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.70.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:6b:eb:7c:dd:92:dc:f0:7f:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=ea9611e2-4dab-481c-993a-f613cb39bc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1a:a8:b8:c5:e8:c5:f1:a6:42:5a:7c:bd:df: 30:6e:40:f1:5d:11:c2:a0:c0:cd:a7:f0:52:16:b0: 15:ad:20:73:c8:81:53:17:80:78:db:58:a3:a3:5c: 0a:ff:27:ed:09:43:6d:5a:7a:6e:61:eb:f0:b5:6b: c0:24:f2:67:d1:5a:fa:f1:92:f9:77:e7:cc:8e:8a: 58:e5:fd:d8:d0:39:cd:1e:5e:13:8b:49:00:70:a2: 82:1a:f0:33:f4:6e:7c:54:4f:3e:52:88:d9:9a:a5: 4c:7b:24:48:43:5d:61:8a:d4:43:8c:05:bb:35:5a: 45:8a:7f:6e:cb:b6:da:bb:07:c2:e3:8c:03:20:2a: 11:78:18:18:be:ff:13:c4:e6:25:6c:40:15:a5:12: 88:51:de:d0:cb:32:d4:ef:3a:33:d2:29:fd:f8:c5: 4d:c9:04:3a:28:9b:ad:e6:28:d9:59:eb:c7:44:c2: e8:dd:98:d0:67:4e:ce:a5:3d:c7:9f:3b:8c:d6:0d: ad:2d:fe:1c:88:46:2a:1c:1e:2d:14:1d:2a:ff:32: 14:8e:01:71:0f:83:e7:29:2b:3c:53:2b:58:9f:e4: 65:cf:ef:5f:c1:c0:e5:6e:fd:44:b8:92:60:83:88: 3c:f3:cc:1b:d2:02:5e:f9:68:49:8a:3f:2d:12:e0: 2a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2C:95:A0:5C:2D:EE:3C:D9:05:1B:50:09:D1:89:45:5D:3D:2E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/939403aa-40ef-31de-8a1b-dffc0c092dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:a8:3d:dc:c2:ea:97:ae:0a:1a:d3:91:5f:2a:7e:64:75:bb: 89:7a:aa:d3:9f:f5:4b:f5:4f:d8:c1:c6:7b:5b:91:0e:00:b6: 6e:9f:78:ae:41:63:3c:51:0c:96:1c:09:92:fc:69:e9:0d:e6: 8a:ef:55:22:ec:72:7c:18:dc:94:53:5b:ac:d4:73:1a:3c:e3: 55:45:3b:e2:31:db:1f:a8:6d:e5:db:af:6e:48:d7:c2:a5:d2: 0e:21:78:bc:3b:88:75:c4:6f:91:ef:93:96:d1:8b:1d:00:9f: 98:35:10:bd:75:f8:0a:be:24:6f:d3:a1:a4:73:fc:cb:26:d2: 36:4c:9d:22:8f:82:08:da:df:6b:b9:f5:97:cd:40:13:27:64: f1:1e:d0:97:6e:a2:2d:12:a4:d1:a4:e3:51:83:21:fc:1c:fb: fb:48:81:96:ca:47:11:b5:f3:f4:75:e1:55:7b:d6:67:ae:73: 85:c2:d9:3a:e1:8c:fb:97:39:fe:f0:61:74:76:a6:c5:55:98: 7f:88:97:bc:2c:3f:5a:9a:b5:10:19:44:20:d7:22:f5:2c:85: 9b:c2:21:27:5d:45:15:7e:5a:ce:e8:39:a2:7d:8a:d3:b5:c4: 6e:c3:fc:96:ba:c8:02:98:37:78:34:72:98:da:56:b5:73:0a: 32:8e:c2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4WvrfN2S3PB/KsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZWE5NjExZTItNGRhYi00ODFjLTk5M2EtZjYxM2NiMzliYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRqouMXoxfGmQlp8vd8wbkDxXRHCoMDNp/BS FrAVrSBzyIFTF4B421ijo1wK/yftCUNtWnpuYevwtWvAJPJn0Vr68ZL5d+fMjopY 5f3Y0DnNHl4Ti0kAcKKCGvAz9G58VE8+UojZmqVMeyRIQ11hitRDjAW7NVpFin9u y7bauwfC44wDICoReBgYvv8TxOYlbEAVpRKIUd7QyzLU7zoz0in9+MVNyQQ6KJut 5ijZWevHRMLo3ZjQZ07OpT3HnzuM1g2tLf4ciEYqHB4tFB0q/zIUjgFxD4PnKSs8 UytYn+Rlz+9fwcDlbv1EuJJgg4g888wb0gJe+WhJij8tEuAqMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUslaBcLe482QUbUAnRiUVdPS7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTM5NDAzYWEtNDBlZi0z MWRlLThhMWItZGZmYzBjMDkyZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2oPdzC6peuChrTkV8qfmR1u4l6qtOf9Uv1T9jBxntbkQ4Atm6feK5B YzxRDJYcCZL8aekN5orvVSLscnwY3JRTW6zUcxo841VFO+Ix2x+obeXbr25I18Kl 0g4heLw7iHXEb5Hvk5bRix0An5g1EL11+Aq+JG/ToaRz/Msm0jZMnSKPggja32u5 9ZfNQBMnZPEe0Jduoi0SpNGk41GDIfwc+/tIgZbKRxG18/R14VV71meuc4XC2Trh jPuXOf7wYXR2psVVmH+Il7wsP1qatRAZRCDXIvUshZvCISddRRV+Ws7oOaJ9itO1 xG7D/Ja6yAKYN3g0cpjaVrVzCjKOwi4= -----END CERTIFICATE-----Generated at Sat Apr 5 05:02:48 2025 by rpki-client