$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99470aec-ba7b-3da7-ad4e-7156435fc215.roa File: 99470aec-ba7b-3da7-ad4e-7156435fc215.roa (raw, json) Hash identifier: XvWHaZU5sXG1u0+OusW9Cox09eJfbJjyYnmvMTzC7R0= Subject key identifier: 5E:D9:28:7A:6B:53:60:DC:3E:E4:A0:E3:91:A7:72:80:0F:67:F3:38 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C04DB3D158260DCA3DC80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99470aec-ba7b-3da7-ad4e-7156435fc215.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:04:db:3d:15:82:60:dc:a3:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=b4f973e8-edf6-4d84-8e16-5321566a2f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bf:ac:9f:9c:ea:22:30:26:a9:2d:dc:e2:db: ec:ec:db:cf:a5:ce:fd:08:ce:6a:a0:2c:71:90:48: ad:cf:31:36:0b:53:4a:5e:8a:84:57:51:7c:93:83: bd:3f:2c:8a:65:0b:0c:67:2a:a8:00:4d:19:0d:d4: d6:85:4b:e2:10:be:1b:1b:99:ca:59:04:e2:ca:2b: 36:c6:f0:d3:f4:a8:a6:fc:e3:61:87:d7:a2:b2:93: fa:cd:42:3d:f5:9c:d2:1f:87:81:62:f1:11:96:01: a6:02:68:af:99:ff:18:74:aa:27:8c:51:f4:e0:36: 8d:d3:2d:6a:54:b7:e8:a0:95:54:33:d1:64:da:2f: 45:ca:4d:e3:2f:1e:ab:7d:d4:f1:eb:4f:ef:d3:ea: 6c:22:d2:23:ae:4f:86:a7:a8:e4:0a:bc:45:51:d6: 67:8d:d9:c1:df:58:9b:49:d6:6f:07:4f:79:fc:c7: 42:06:20:bf:de:1d:bc:7b:26:91:e0:03:5d:c2:6e: c5:95:78:9c:84:e7:9e:a4:80:d8:65:1b:0d:a7:63: e6:fa:fb:6b:a4:e4:96:23:57:31:10:f5:de:2b:c1: d8:5b:e1:90:6b:23:43:c1:b4:a7:e2:71:8e:53:9e: 11:04:80:33:63:0a:79:62:ca:48:cb:eb:66:4e:8c: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D9:28:7A:6B:53:60:DC:3E:E4:A0:E3:91:A7:72:80:0F:67:F3:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/99470aec-ba7b-3da7-ad4e-7156435fc215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:10:ea:71:59:be:ad:2c:8e:e6:5e:34:7b:3f:cf:b0:1e:35: 51:4f:99:fa:eb:8f:cf:11:37:91:2e:92:58:62:ce:f8:e8:31: 3c:fe:12:4e:53:6f:94:08:6a:0d:b7:a0:1a:2d:85:f9:fa:22: 70:31:0c:20:6c:9e:fd:d9:0c:22:fe:36:05:4a:38:50:cc:61: 50:c5:09:65:09:b6:31:a6:8b:54:5e:63:25:2c:5d:97:1a:49: 8e:07:ac:30:ab:c1:9f:d6:79:23:65:10:8b:37:e4:9e:16:05: da:b2:28:6f:c9:ff:f9:12:f7:5d:cb:97:8f:72:62:94:bc:c0: 06:17:0c:ca:3a:46:f5:1b:96:a9:da:94:c3:72:c9:cf:8e:4a: d6:c2:28:42:05:c8:c7:d2:72:41:10:1b:ee:7d:7f:9b:24:0b: 30:f3:32:34:a9:3e:e0:fb:d7:4a:54:92:bc:60:61:f4:50:b7: cf:8b:84:b8:06:1e:f9:34:e6:65:fc:95:8e:8d:d3:b8:8c:c2: 04:a6:76:87:6c:b9:56:62:97:67:23:b2:68:a9:64:5b:8d:07: ce:d6:08:a6:41:54:da:d0:99:93:8c:94:d1:7a:8f:d6:5a:d8: c1:e2:b6:50:47:1e:2d:bf:fb:45:eb:10:5a:81:c8:df:11:2d: 7d:c6:2b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTATbPRWCYNyj3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YjRmOTczZTgtZWRmNi00ZDg0LThlMTYtNTMyMTU2NmEyZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17+sn5zqIjAmqS3c4tvs7NvPpc79CM5qoCxx kEitzzE2C1NKXoqEV1F8k4O9PyyKZQsMZyqoAE0ZDdTWhUviEL4bG5nKWQTiyis2 xvDT9Kim/ONhh9eispP6zUI99ZzSH4eBYvERlgGmAmivmf8YdKonjFH04DaN0y1q VLfooJVUM9Fk2i9Fyk3jLx6rfdTx60/v0+psItIjrk+Gp6jkCrxFUdZnjdnB31ib SdZvB095/MdCBiC/3h28eyaR4ANdwm7FlXichOeepIDYZRsNp2Pm+vtrpOSWI1cx EPXeK8HYW+GQayNDwbSn4nGOU54RBIAzYwp5YspIy+tmToy9ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7ZKHprU2DcPuSg45GncoAPZ/M4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTk0NzBhZWMtYmE3Yi0z ZGE3LWFkNGUtNzE1NjQzNWZjMjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4Q6nFZvq0sjuZeNHs/z7AeNVFPmfrrj88RN5EuklhizvjoMTz+Ek5T b5QIag23oBothfn6InAxDCBsnv3ZDCL+NgVKOFDMYVDFCWUJtjGmi1ReYyUsXZca SY4HrDCrwZ/WeSNlEIs35J4WBdqyKG/J//kS913Ll49yYpS8wAYXDMo6RvUblqna lMNyyc+OStbCKEIFyMfSckEQG+59f5skCzDzMjSpPuD710pUkrxgYfRQt8+LhLgG Hvk05mX8lY6N07iMwgSmdodsuVZil2cjsmipZFuNB87WCKZBVNrQmZOMlNF6j9Za 2MHitlBHHi2/+0XrEFqByN8RLX3GK5c= -----END CERTIFICATE-----Generated at Sat Apr 5 10:27:53 2025 by rpki-client