$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98d199fe-39bb-3156-a8eb-333b0319a433.roa File: 98d199fe-39bb-3156-a8eb-333b0319a433.roa (raw, json) Hash identifier: cFHGTqBXhOGCXRDnv81jV2/zBYqEQ94jgd1kRqL3zrs= Subject key identifier: 03:63:A3:D7:0A:F4:F2:4E:05:47:8C:17:0E:F6:5F:94:68:8C:1D:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B58642967EAA81346A404A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98d199fe-39bb-3156-a8eb-333b0319a433.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:58:64:29:67:ea:a8:13:46:a4:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=34280728-0cd4-4326-802b-48f65f37c4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:0c:2b:5f:14:2e:f2:4d:21:c2:e7:c8:aa: 71:fa:bb:16:64:f8:37:2b:bc:a7:d5:85:d6:00:96: 2f:1f:6b:15:ec:9a:4b:c6:e8:fc:08:d7:73:ba:41: 86:13:b2:34:3d:88:95:a1:9b:dc:da:b1:75:f1:2d: 9c:af:d0:ea:22:a9:66:f8:5b:bd:61:d8:bd:92:9a: 96:a8:c9:9d:a1:f8:49:bf:cf:3d:96:7b:6e:54:3a: 4b:a0:aa:71:05:b7:d2:59:b8:0f:e8:4b:dd:67:d5: a5:0f:5f:17:55:fc:d8:4d:87:61:66:35:f6:66:c9: 99:37:e3:01:ba:fd:e1:05:f5:73:56:b2:ab:72:20: 24:f0:fe:d3:c7:86:14:e8:c9:db:cb:8f:8c:ef:02: 70:73:a8:a6:0f:0a:0a:cc:68:76:fb:65:0c:e0:ff: 33:09:8e:fd:4e:64:de:65:ed:53:a9:72:d9:c9:89: af:7b:9a:09:10:7b:67:a6:4e:1f:31:80:82:99:42: d5:bd:91:b2:53:07:e2:46:57:1b:2b:ac:68:c4:6c: 0b:b4:0d:ca:a1:2c:88:20:b5:60:7a:75:ef:73:54: 15:4e:57:52:ff:68:df:8a:6a:74:46:23:9a:98:2a: 7b:73:3c:76:b4:f3:9d:74:7a:24:db:d9:4b:ee:19: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:A3:D7:0A:F4:F2:4E:05:47:8C:17:0E:F6:5F:94:68:8C:1D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/98d199fe-39bb-3156-a8eb-333b0319a433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:1d:fc:aa:56:75:49:83:99:e4:45:b8:22:0a:1c:12:53:50: 6f:02:48:92:c6:8e:d1:6b:ec:b8:0e:ce:88:1a:bd:b8:58:36: b1:5e:e7:82:67:f9:9f:89:b1:6b:da:79:51:1a:08:3a:43:a2: 72:c8:5a:6d:5b:eb:8b:d6:b2:60:3d:78:33:da:3e:f8:d3:e2: 40:95:e1:86:f7:dc:bc:5b:ac:0f:d7:9f:f1:ff:23:57:b8:8d: 1d:f1:90:b9:14:2c:30:08:cb:27:fb:0b:6f:1f:b2:30:50:9b: a4:37:5c:08:57:2d:4e:39:3e:28:b0:2b:b2:35:a5:85:45:9e: 2f:e1:94:df:a3:5a:46:e2:95:48:30:50:e0:8c:8d:c7:87:9c: d4:e9:80:56:03:be:e2:98:50:00:e2:46:9a:a3:b1:71:a6:40: 04:ca:b1:1a:6f:ee:4f:17:fc:57:42:13:b9:52:d6:88:c2:68: ff:d9:22:fc:64:30:58:ee:7e:4b:4e:72:a0:32:49:76:d4:fa: 5e:95:1b:6a:5f:2e:09:be:ae:2a:50:2c:5a:c4:74:88:8e:5e: 4e:42:14:79:99:f6:b5:a6:16:30:09:4d:4b:b9:3a:83:d6:fa: 45:79:6e:8f:7c:74:d9:01:cd:1e:3e:df:9b:89:b6:fa:30:de: f7:4c:b6:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7WGQpZ+qoE0akBKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk MzQyODA3MjgtMGNkNC00MzI2LTgwMmItNDhmNjVmMzdjNGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy4MK18ULvJNIcLnyKpx+rsWZPg3K7yn1YXW AJYvH2sV7JpLxuj8CNdzukGGE7I0PYiVoZvc2rF18S2cr9DqIqlm+Fu9Ydi9kpqW qMmdofhJv889lntuVDpLoKpxBbfSWbgP6EvdZ9WlD18XVfzYTYdhZjX2ZsmZN+MB uv3hBfVzVrKrciAk8P7Tx4YU6Mnby4+M7wJwc6imDwoKzGh2+2UM4P8zCY79TmTe Ze1TqXLZyYmve5oJEHtnpk4fMYCCmULVvZGyUwfiRlcbK6xoxGwLtA3KoSyIILVg enXvc1QVTldS/2jfimp0RiOamCp7czx2tPOddHok29lL7hkx9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANjo9cK9PJOBUeMFw72X5RojB3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOThkMTk5ZmUtMzliYi0z MTU2LWE4ZWItMzMzYjAzMTlhNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcd/KpWdUmDmeRFuCIKHBJTUG8CSJLGjtFr7LgOzogavbhYNrFe54Jn +Z+JsWvaeVEaCDpDonLIWm1b64vWsmA9eDPaPvjT4kCV4Yb33LxbrA/Xn/H/I1e4 jR3xkLkULDAIyyf7C28fsjBQm6Q3XAhXLU45PiiwK7I1pYVFni/hlN+jWkbilUgw UOCMjceHnNTpgFYDvuKYUADiRpqjsXGmQATKsRpv7k8X/FdCE7lS1ojCaP/ZIvxk MFjufktOcqAySXbU+l6VG2pfLgm+ripQLFrEdIiOXk5CFHmZ9rWmFjAJTUu5OoPW +kV5bo98dNkBzR4+35uJtvow3vdMtqg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:55 2025 by rpki-client