$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa File: 979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa (raw, json) Hash identifier: B+LS0xYDweEdToZUd+Ul53moxsMGVlZv2XaQLh2lgDg= Subject key identifier: FE:26:D1:85:47:C4:A6:D5:31:87:8A:FD:B5:67:33:72:33:3D:DB:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908819204474010BC37296400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:92:04:47:40:10:bc:37:29:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=f94c74c1-ceef-4fc3-b8e7-85296184d614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d6:6d:13:a3:ca:7c:38:4b:a9:e3:ac:4e:2b: de:42:b6:72:7f:4f:c5:e5:26:8d:ea:0a:a3:c8:12: 05:c0:07:71:fd:e3:e0:32:94:e5:1d:0e:6b:87:64: 2c:31:af:92:d9:ef:f4:b5:56:8a:8a:c3:c6:30:e0: 11:fa:4e:f7:fe:83:6a:08:e2:ef:5c:f2:a9:32:e8: 66:42:19:d6:2f:03:0b:c9:b2:a3:e5:5b:28:6b:db: d3:32:c1:88:c0:06:1d:ba:c9:d5:5c:14:c0:c0:93: 76:49:de:d8:65:69:d5:a0:76:54:f7:fd:29:5f:3b: 83:f1:a5:20:42:eb:be:10:26:81:d1:df:8c:d8:c3: 3f:be:75:3e:38:7c:70:7c:9f:9c:28:88:a6:30:11: c2:b7:c5:75:19:73:7a:8e:65:28:94:64:85:39:5f: a7:67:29:9a:4d:3e:b0:39:9a:fe:80:96:5e:32:60: 2e:f8:2a:d3:6d:b3:42:00:3f:68:65:3b:a8:c2:09: 87:f0:61:8b:14:92:3d:93:68:5a:70:25:6d:47:85: 76:b0:fd:47:c4:ef:ea:60:1e:3f:ec:5e:49:47:0a: 15:81:40:88:e6:57:98:48:49:0f:00:1e:e8:d0:95: 3a:4a:84:ce:7e:4a:b9:d0:5a:4b:77:19:d6:e8:0b: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:26:D1:85:47:C4:A6:D5:31:87:8A:FD:B5:67:33:72:33:3D:DB:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/979e5f5c-f6fc-3849-affa-aa0b0a37d549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:73:7e:82:b8:14:ae:5d:22:39:76:9f:68:a9:61:c2:af:32: 3e:50:d1:29:bd:2b:6f:83:0f:29:61:01:50:61:d5:60:ef:4e: b8:00:19:50:cc:aa:6e:c1:1a:08:18:99:d9:de:9c:a3:e4:44: 6b:e6:c3:18:cf:b3:3d:b6:a9:69:d6:c5:d1:91:15:95:c6:a5: af:e8:52:9b:c3:40:0a:11:42:0f:70:cb:3f:78:dd:6d:9d:ae: d4:c9:37:6b:33:45:7f:ef:30:9f:43:5a:ec:75:e5:70:73:36: b3:ff:a5:57:48:26:4a:61:00:f8:8b:f4:ae:a5:52:7e:ce:de: d1:9f:bd:e8:97:6b:25:d0:5e:a7:f0:4c:a9:25:bc:5d:bf:a3: 2f:83:a1:e7:15:30:95:ab:bb:2b:a6:47:f2:b9:1e:5a:8a:e4: 2d:13:99:1f:84:05:46:88:b1:fe:c7:f5:5c:6e:08:9c:f8:47: 22:28:c9:56:ce:32:3c:e8:d1:5f:5d:46:bb:0f:4c:e2:69:cd: f5:26:ff:b7:bc:2b:06:95:c1:78:03:a9:27:22:47:f4:73:ba: 49:c1:46:33:3a:31:79:a1:76:a1:be:8e:d7:f6:7e:c6:6f:fc: da:9d:fd:d9:ef:5a:09:5b:b1:e7:04:40:90:68:11:b6:a1:37: 92:44:99:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZIER0AQvDcpZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk Zjk0Yzc0YzEtY2VlZi00ZmMzLWI4ZTctODUyOTYxODRkNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtZtE6PKfDhLqeOsTiveQrZyf0/F5SaN6gqj yBIFwAdx/ePgMpTlHQ5rh2QsMa+S2e/0tVaKisPGMOAR+k73/oNqCOLvXPKpMuhm QhnWLwMLybKj5Vsoa9vTMsGIwAYdusnVXBTAwJN2Sd7YZWnVoHZU9/0pXzuD8aUg Quu+ECaB0d+M2MM/vnU+OHxwfJ+cKIimMBHCt8V1GXN6jmUolGSFOV+nZymaTT6w OZr+gJZeMmAu+CrTbbNCAD9oZTuowgmH8GGLFJI9k2hacCVtR4V2sP1HxO/qYB4/ 7F5JRwoVgUCI5leYSEkPAB7o0JU6SoTOfkq50FpLdxnW6Au5HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4m0YVHxKbVMYeK/bVnM3IzPdvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTc5ZTVmNWMtZjZmYy0z ODQ5LWFmZmEtYWEwYjBhMzdkNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBzfoK4FK5dIjl2n2ipYcKvMj5Q0Sm9K2+DDylhAVBh1WDvTrgAGVDM qm7BGggYmdnenKPkRGvmwxjPsz22qWnWxdGRFZXGpa/oUpvDQAoRQg9wyz943W2d rtTJN2szRX/vMJ9DWux15XBzNrP/pVdIJkphAPiL9K6lUn7O3tGfveiXayXQXqfw TKklvF2/oy+DoecVMJWruyumR/K5HlqK5C0TmR+EBUaIsf7H9VxuCJz4RyIoyVbO Mjzo0V9dRrsPTOJpzfUm/7e8KwaVwXgDqSciR/RzuknBRjM6MXmhdqG+jtf2fsZv /Nqd/dnvWglbsecEQJBoEbahN5JEmZA= -----END CERTIFICATE-----Generated at Sat Apr 5 09:54:56 2025 by rpki-client