$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ada6014-5ab4-3ce0-8223-c99ad73ec695.roa File: 9ada6014-5ab4-3ce0-8223-c99ad73ec695.roa (raw, json) Hash identifier: zYEmCFk+iaGVIfY3JlHzE8rCrJzgpig8vSRi65MpbbM= Subject key identifier: 1E:8C:AE:0A:E7:D9:B0:03:1A:06:73:70:D1:38:44:72:D5:C6:06:CC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B5852FB5BCD31353FC74640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ada6014-5ab4-3ce0-8223-c99ad73ec695.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:58:52:fb:5b:cd:31:35:3f:c7:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=5ac747a2-042f-49af-90b4-c54d1cfcc8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:e1:8a:79:fa:29:5d:7b:cc:40:c7:cd:27: 13:2d:8a:70:ba:06:f5:e5:0a:d2:ae:84:dc:20:3a: 36:04:b4:32:56:9f:64:09:8f:94:ab:78:e6:7b:96: 61:47:3a:9c:f8:79:26:d6:4d:1d:5f:6a:fb:f0:9c: 4d:ad:b1:3a:d7:d2:1c:c6:58:10:e7:4c:19:50:e3: a3:dc:3d:a8:02:d7:f8:70:45:4c:dd:de:ca:89:f4: 95:13:f9:d7:9a:0a:09:d0:a5:50:9e:50:79:ef:19: d5:f2:d9:5d:61:13:69:7c:ce:e1:5b:5b:1d:be:2a: 6c:a9:fa:29:d1:a7:c1:72:5d:70:ff:42:6e:b8:48: 2c:ae:25:1d:77:d3:39:d9:c9:32:a7:09:09:75:45: d8:d9:b6:8f:42:f2:f6:7a:ef:18:72:d1:8d:6d:d2: c8:b9:ae:4f:9c:36:65:ef:6f:8a:fe:d9:e6:0a:2f: 71:68:d9:26:e1:77:79:02:50:fd:92:96:52:5d:04: 2b:20:6a:33:b2:8f:d1:53:56:57:0e:26:82:b3:4a: c5:52:8f:09:b9:95:fe:cf:52:a6:bd:31:d1:33:68: 0d:f4:65:7e:5f:12:51:06:ed:7e:ca:22:a1:7e:68: c3:87:22:b5:80:85:8d:ec:a6:7d:d6:0b:c3:8a:78: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8C:AE:0A:E7:D9:B0:03:1A:06:73:70:D1:38:44:72:D5:C6:06:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ada6014-5ab4-3ce0-8223-c99ad73ec695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8e:b0:0b:5f:a8:b4:61:c4:c4:97:1a:5b:90:74:1b:cf:1d: 4f:93:2f:b3:3b:eb:5b:66:3a:8f:22:e3:fb:97:ae:55:6d:ab: 76:b4:24:3a:81:5c:22:46:19:28:83:61:15:76:35:f5:e1:d9: 15:20:fd:9c:4d:be:c5:18:6f:01:62:9a:f9:5a:6f:5a:85:89: b3:d6:52:63:fa:ca:d8:44:6e:9b:3f:ef:77:53:02:94:1c:a4: bf:f4:53:eb:be:f3:98:33:0a:e6:57:58:8a:37:02:91:4a:ac: 1e:7b:57:f5:78:13:0d:a5:b9:24:df:41:0d:41:6f:d1:29:88: a5:0f:b7:53:ad:fe:92:b1:c7:32:31:be:b1:e9:de:74:e1:21: 30:0e:df:b6:71:45:cf:57:dd:6a:2d:d5:fa:10:f8:50:9d:80: 9a:f2:04:c8:fd:31:23:0d:02:d1:eb:bb:82:9e:cb:53:c7:b2: e4:22:ed:7e:b1:07:55:c0:3d:5a:96:36:9f:1d:17:53:1f:1e: 26:96:ff:ac:9f:52:ca:7a:7b:c7:72:c3:84:e0:af:60:86:e6: cb:b5:da:20:51:d3:a4:58:85:67:65:fc:e1:a9:71:c7:c1:48: 72:10:17:98:0f:5c:87:3d:ac:3f:f1:0b:3b:96:f3:bd:4a:65: a4:23:23:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7WFL7W80xNT/HRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk NWFjNzQ3YTItMDQyZi00OWFmLTkwYjQtYzU0ZDFjZmNjOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrzhinn6KV17zEDHzScTLYpwugb15QrSroTc IDo2BLQyVp9kCY+Uq3jme5ZhRzqc+Hkm1k0dX2r78JxNrbE619IcxlgQ50wZUOOj 3D2oAtf4cEVM3d7KifSVE/nXmgoJ0KVQnlB57xnV8tldYRNpfM7hW1sdvipsqfop 0afBcl1w/0JuuEgsriUdd9M52ckypwkJdUXY2baPQvL2eu8YctGNbdLIua5PnDZl 72+K/tnmCi9xaNkm4Xd5AlD9kpZSXQQrIGozso/RU1ZXDiaCs0rFUo8JuZX+z1Km vTHRM2gN9GV+XxJRBu1+yiKhfmjDhyK1gIWN7KZ91gvDini9fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6Mrgrn2bADGgZzcNE4RHLVxgbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWFkYTYwMTQtNWFiNC0z Y2UwLTgyMjMtYzk5YWQ3M2VjNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSOsAtfqLRhxMSXGluQdBvPHU+TL7M761tmOo8i4/uXrlVtq3a0JDqB XCJGGSiDYRV2NfXh2RUg/ZxNvsUYbwFimvlab1qFibPWUmP6ythEbps/73dTApQc pL/0U+u+85gzCuZXWIo3ApFKrB57V/V4Ew2luSTfQQ1Bb9EpiKUPt1Ot/pKxxzIx vrHp3nThITAO37ZxRc9X3Wot1foQ+FCdgJryBMj9MSMNAtHru4Key1PHsuQi7X6x B1XAPVqWNp8dF1MfHiaW/6yfUsp6e8dyw4Tgr2CG5su12iBR06RYhWdl/OGpccfB SHIQF5gPXIc9rD/xCzuW871KZaQjI+g= -----END CERTIFICATE-----Generated at Fri Mar 14 11:10:55 2025 by rpki-client