$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96439d07-45de-336b-8873-ece1733c63b6.roa File: 96439d07-45de-336b-8873-ece1733c63b6.roa (raw, json) Hash identifier: pBEGp8LaaLQJ7NykumfDm+LlCqCD/wQNhYPy0MsVoo0= Subject key identifier: 0A:DD:C0:C7:23:EC:3F:FC:07:08:6C:02:AD:0D:04:92:CE:F9:73:67 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088192CDEB58626A38C51F50 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96439d07-45de-336b-8873-ece1733c63b6.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:92:cd:eb:58:62:6a:38:c5:1f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=2f18db51-a595-47aa-95d7-5aa3167f430f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:a5:25:3a:a3:d5:40:50:21:9a:34:b6:4b: 42:94:78:a8:ba:b0:16:27:f3:8d:b8:d7:17:ad:c8: d3:24:b3:59:ff:fb:11:cb:6b:e9:93:0f:a2:b1:c0: c2:b4:db:34:49:bc:ce:59:b8:7d:0e:9d:54:8d:fc: f1:e0:86:d6:d5:4a:16:c0:fe:02:6e:26:39:a4:0b: 69:de:3b:a2:7b:dc:8c:d6:37:08:05:04:04:82:2f: b3:87:84:12:85:7b:fd:23:be:2f:56:a5:97:89:1d: ed:d2:df:86:29:0e:c9:d9:17:97:14:c0:c8:33:e7: 18:02:d5:50:51:90:7d:1c:88:2c:2a:27:3a:95:fb: ff:12:dd:d5:0f:45:39:f2:ad:97:fb:a6:df:06:f7: 99:a3:3b:47:ec:4d:6f:4c:35:7f:38:33:80:b7:af: 00:99:e5:e0:2e:29:d0:0a:30:0e:1b:8a:f8:8f:18: 12:cb:50:08:cf:54:c8:8f:64:1b:e0:80:91:58:08: 76:fb:92:e4:aa:f6:da:87:f1:ea:ba:5c:aa:20:ba: 5d:2b:5a:40:f5:40:66:5c:a2:9b:b3:ff:75:3c:ba: 52:6d:55:7a:2d:e1:96:3c:fb:72:22:9c:75:28:dc: 6d:55:a7:b2:0e:29:cf:15:78:f9:7c:62:c8:a9:03: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DD:C0:C7:23:EC:3F:FC:07:08:6C:02:AD:0D:04:92:CE:F9:73:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96439d07-45de-336b-8873-ece1733c63b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:af:b2:35:35:c7:7e:3c:fa:3f:ff:d5:ba:0d:0f:50:6e:30: 5c:a5:d3:8c:b1:74:5c:b5:d2:91:d8:66:c4:52:1a:4e:52:96: 68:65:0f:93:3e:d5:91:57:16:30:33:8b:9a:53:67:12:e6:b6: e8:3f:6f:7f:b9:fe:6b:2e:41:8c:f0:78:18:93:bb:92:bc:7a: 72:fc:a5:d1:e2:72:cd:d7:10:25:de:05:ee:d7:16:5a:45:06: e4:85:64:52:f4:4a:8b:2b:0a:16:c3:e6:35:9a:0b:e2:6d:d7: a3:47:b0:87:9d:29:bd:52:30:2c:a1:c2:67:4a:68:9e:6d:9e: 9a:9d:70:62:da:5a:98:9d:b5:b4:85:4c:ef:7c:c1:e1:b0:5b: 63:25:f1:43:5c:2c:bd:af:41:2c:34:33:c4:06:a8:ff:c9:0b: f7:89:3b:bd:12:6a:6c:b1:fa:bf:04:7b:64:95:b0:83:db:e3: 08:0d:f7:48:86:b7:83:d2:5f:82:d1:ae:96:cd:0f:39:88:c6: 26:f0:fd:ad:4b:b8:9d:32:44:72:57:10:27:ce:8c:47:b2:5f: d0:a5:dd:88:7f:74:48:92:21:82:22:73:5e:92:e6:44:2d:06: d5:39:cf:f3:3c:0f:ba:da:f6:44:02:14:50:00:32:ed:ee:16: 16:dd:57:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZLN61hiajjFH1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MmYxOGRiNTEtYTU5NS00N2FhLTk1ZDctNWFhMzE2N2Y0MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoImlJTqj1UBQIZo0tktClHiourAWJ/ONuNcX rcjTJLNZ//sRy2vpkw+iscDCtNs0SbzOWbh9Dp1Ujfzx4IbW1UoWwP4CbiY5pAtp 3juie9yM1jcIBQQEgi+zh4QShXv9I74vVqWXiR3t0t+GKQ7J2ReXFMDIM+cYAtVQ UZB9HIgsKic6lfv/Et3VD0U58q2X+6bfBveZoztH7E1vTDV/ODOAt68AmeXgLinQ CjAOG4r4jxgSy1AIz1TIj2Qb4ICRWAh2+5Lkqvbah/HqulyqILpdK1pA9UBmXKKb s/91PLpSbVV6LeGWPPtyIpx1KNxtVaeyDinPFXj5fGLIqQPmWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArdwMcj7D/8BwhsAq0NBJLO+XNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTY0MzlkMDctNDVkZS0z MzZiLTg4NzMtZWNlMTczM2M2M2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMevsjU1x348+j//1boND1BuMFyl04yxdFy10pHYZsRSGk5SlmhlD5M+ 1ZFXFjAzi5pTZxLmtug/b3+5/msuQYzweBiTu5K8enL8pdHics3XECXeBe7XFlpF BuSFZFL0SosrChbD5jWaC+Jt16NHsIedKb1SMCyhwmdKaJ5tnpqdcGLaWpidtbSF TO98weGwW2Ml8UNcLL2vQSw0M8QGqP/JC/eJO70Samyx+r8Ee2SVsIPb4wgN90iG t4PSX4LRrpbNDzmIxibw/a1LuJ0yRHJXECfOjEeyX9Cl3Yh/dEiSIYIic16S5kQt BtU5z/M8D7ra9kQCFFAAMu3uFhbdVyc= -----END CERTIFICATE-----Generated at Sat Apr 5 09:59:51 2025 by rpki-client