$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9853000f-d426-3c79-899d-48096c97a485.roa File: 9853000f-d426-3c79-899d-48096c97a485.roa (raw, json) Hash identifier: VWgm+U0oM/l/ABL8EnC0kzRpjlpr8FEeIlPjlNrGLv4= Subject key identifier: 88:6E:D1:4E:92:DB:A2:6A:CF:97:CA:1C:A6:DF:8B:71:1C:9C:08:DB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285848B1807E7E26AC01AAD5E42480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9853000f-d426-3c79-899d-48096c97a485.roa Signing time: Tue 28 Jan 2025 10:03:52 +0000 ROA not before: Tue 28 Jan 2025 10:03:52 +0000 ROA not after: Mon 28 Apr 2025 09:03:52 +0000 asID: 13335 IP address blocks: 172.68.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:80:7e:7e:26:ac:01:aa:d5:e4:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 28 10:03:52 2025 GMT Not After : Apr 28 09:03:52 2025 GMT Subject: CN=d4bf8aec-1b5d-4a3e-8a3a-b31a3c136b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d0:9a:28:bf:ae:81:4b:ce:12:0f:88:6e:9f: 8a:e6:9d:50:12:34:fb:33:7e:92:e2:8b:47:1f:64: 79:ce:19:30:41:82:09:f5:30:15:fe:b0:47:a6:df: 04:62:08:84:0f:d2:e9:dc:39:a7:3d:5a:5d:1e:f1: b8:5f:be:0b:29:d7:48:26:35:ae:cb:50:e7:30:57: 95:f3:fc:f3:46:7f:35:89:7e:00:5e:2a:6c:2d:3d: 06:eb:ee:4e:f0:90:81:ad:25:a5:82:23:c4:15:f6: 0a:5d:0d:2d:52:9d:12:2d:8c:4c:d9:00:cc:80:f5: d0:2e:b4:e7:b6:12:e6:32:62:f3:61:f2:c6:56:4c: 67:9e:2c:15:a0:98:2b:64:5f:33:b9:f3:d0:b9:4f: c5:02:fb:80:71:35:f5:27:08:17:55:f9:80:ba:e8: a9:34:41:f1:80:0c:82:88:4b:d8:2b:fb:48:36:f1: 65:2f:b3:8a:d9:55:30:76:c8:a5:2d:3d:95:15:d2: e7:5b:c6:e7:8a:fc:f6:79:93:b4:ca:d8:35:2e:9a: 7a:f8:c8:39:47:5e:19:d3:a1:f2:30:e3:0c:f4:4a: b3:1d:0b:1b:1b:92:a1:95:0a:9b:20:84:e1:c7:73: 32:c0:6e:3c:7f:f6:17:a1:00:ac:9c:eb:2f:80:49: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6E:D1:4E:92:DB:A2:6A:CF:97:CA:1C:A6:DF:8B:71:1C:9C:08:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9853000f-d426-3c79-899d-48096c97a485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c8:57:0e:b4:e0:d7:16:2b:e7:db:19:67:d7:c9:2b:c7:30: 02:e0:a8:46:8b:ab:26:6e:1f:7e:99:e3:0c:16:10:fc:27:62: 80:80:30:9e:92:dc:96:f5:d2:ab:b9:1d:19:43:7d:98:f7:94: 99:7e:82:c6:05:57:04:65:08:fc:4c:ab:d9:6f:5a:1f:1b:b0: de:eb:1d:b1:13:33:79:47:00:6c:a9:9f:33:f3:c4:00:6f:b3: d8:a5:90:31:bc:3a:82:75:ed:e1:c4:b4:76:33:f4:2a:e4:a5: 65:a2:1d:50:7f:5d:38:9c:39:95:6a:8a:f6:99:24:d8:b8:26: ae:c1:10:3b:d5:71:36:ab:8a:28:80:49:8b:95:d1:c3:e7:37: ba:7c:ca:34:14:6b:e6:3b:5f:a1:5d:60:b0:86:76:0c:9f:2b: 49:c9:f5:61:ad:45:48:e1:14:68:30:a2:5a:0f:67:b5:71:fb: 90:ff:6f:d7:b0:73:bf:c4:f3:a8:51:7e:68:67:4e:fd:0c:b0: ed:c9:51:73:d7:be:1b:78:23:c7:31:0e:c9:c9:6b:c1:e3:2f: 4e:23:8b:a3:e3:1a:92:00:dc:b4:12:a5:4f:43:4e:69:bd:03: 5a:02:ed:cc:d3:fc:a5:75:d5:84:73:66:68:80:96:9f:c9:6d: 65:ed:6c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEixgH5+JqwBqtXkJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDEyODEwMDM1MloXDTI1MDQyODA5MDM1MlowLzEtMCsGA1UEAxMk ZDRiZjhhZWMtMWI1ZC00YTNlLThhM2EtYjMxYTNjMTM2YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptCaKL+ugUvOEg+Ibp+K5p1QEjT7M36S4otH H2R5zhkwQYIJ9TAV/rBHpt8EYgiED9Lp3DmnPVpdHvG4X74LKddIJjWuy1DnMFeV 8/zzRn81iX4AXipsLT0G6+5O8JCBrSWlgiPEFfYKXQ0tUp0SLYxM2QDMgPXQLrTn thLmMmLzYfLGVkxnniwVoJgrZF8zufPQuU/FAvuAcTX1JwgXVfmAuuipNEHxgAyC iEvYK/tINvFlL7OK2VUwdsilLT2VFdLnW8bnivz2eZO0ytg1Lpp6+Mg5R14Z06Hy MOMM9EqzHQsbG5KhlQqbIIThx3MywG48f/YXoQCsnOsvgEkBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhu0U6S26Jqz5fKHKbfi3EcnAjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg1MzAwMGYtZDQyNi0z Yzc5LTg5OWQtNDgwOTZjOTdhNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfIVw604NcWK+fbGWfXySvHMALgqEaLqyZuH36Z4wwWEPwnYoCAMJ6S 3Jb10qu5HRlDfZj3lJl+gsYFVwRlCPxMq9lvWh8bsN7rHbETM3lHAGypnzPzxABv s9ilkDG8OoJ17eHEtHYz9CrkpWWiHVB/XTicOZVqivaZJNi4Jq7BEDvVcTariiiA SYuV0cPnN7p8yjQUa+Y7X6FdYLCGdgyfK0nJ9WGtRUjhFGgwoloPZ7Vx+5D/b9ew c7/E86hRfmhnTv0MsO3JUXPXvht4I8cxDsnJa8HjL04ji6PjGpIA3LQSpU9DTmm9 A1oC7czT/KV11YRzZmiAlp/JbWXtbBY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:18:00 2025 by rpki-client