$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b4939d8-63ad-3f98-ab2a-b3800b5713e6.roa File: 9b4939d8-63ad-3f98-ab2a-b3800b5713e6.roa (raw, json) Hash identifier: Incp4K0MEhs9Yut7U5ys20R7zwH4Z0ecaSfgXtt0+MY= Subject key identifier: 81:D7:48:75:AA:1F:E6:28:3C:5F:5D:D8:C0:44:E2:D6:38:26:45:B5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473AECC91215CE060BD07F0140 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b4939d8-63ad-3f98-ab2a-b3800b5713e6.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:ec:c9:12:15:ce:06:0b:d0:7f:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=ef0854a8-7321-4604-ac87-8d5582afb380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3d:64:88:3d:f1:6c:58:de:1f:0d:84:a0:93: a6:90:93:fb:99:f6:1a:c8:c3:50:dc:1c:30:5a:81: 14:24:c8:41:10:3d:7e:38:3e:ad:b3:89:82:cb:b4: 96:d1:9b:d1:b4:08:b7:57:85:bc:02:d1:68:50:64: 70:fe:88:05:37:36:60:f3:75:44:5e:22:44:18:dc: d7:4c:aa:bf:9d:72:11:f8:8f:72:d7:9a:ab:1e:5b: 89:2a:6e:5b:5d:f7:85:db:ba:3d:c7:4d:6e:ff:3c: 16:56:97:2e:72:96:9f:4d:89:70:18:2b:5f:5e:82: c1:04:a0:a7:0e:0c:9b:32:fa:c8:51:5f:8d:86:93: 7c:e5:7c:78:89:3e:ff:05:ec:16:aa:1d:03:d8:2c: 1f:3d:63:3a:cc:69:3f:9f:69:7e:c0:17:de:bf:dd: b3:49:eb:cf:ad:8b:3f:4a:1a:14:92:2d:37:a6:0e: 05:8e:06:15:c4:77:70:71:a9:08:30:8d:04:9a:e9: 5f:49:89:51:98:7d:c9:0b:b3:fc:2c:4a:b5:08:b2: 67:1b:6c:28:e2:9f:76:69:8d:51:2a:d9:e7:08:35: 72:75:65:9d:02:c6:4c:76:8c:8e:e7:5d:f3:20:36: 5d:a3:72:f1:f7:21:27:3c:d2:dd:fb:56:4a:55:5b: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D7:48:75:AA:1F:E6:28:3C:5F:5D:D8:C0:44:E2:D6:38:26:45:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b4939d8-63ad-3f98-ab2a-b3800b5713e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:22:f1:90:06:a8:4b:ea:f4:d0:ef:ba:98:f0:fc:72:73:1d: d0:e2:92:82:ed:46:35:87:ac:5b:68:3f:b5:43:64:57:9a:4d: b6:70:b1:18:b2:77:fb:7d:c1:93:2c:0f:94:87:e8:18:f5:93: 2b:5a:38:8b:f1:ab:cf:10:49:0d:0a:8a:31:0f:45:1b:a6:3f: c0:52:07:ff:86:0f:44:77:14:f4:2f:d8:34:74:f9:b0:38:84: 30:e7:54:f3:ce:8f:2a:4e:52:f8:25:94:76:44:96:f5:38:63: 7d:fc:07:6b:61:29:19:51:bb:94:3e:ec:b3:cb:47:ec:6b:27: 93:28:11:e0:ed:6b:a8:27:1f:76:45:e5:c6:66:b7:e4:0f:01: 0b:e1:0f:a7:9e:a8:e4:d3:cc:24:06:85:34:2b:37:ef:08:3c: c4:13:7f:6f:3e:bc:84:0b:7f:a4:86:16:ac:e0:d0:e4:6c:19: f2:10:55:27:4c:f7:e0:70:70:34:4e:6b:3f:e2:61:de:aa:7e: f7:8d:31:b9:72:eb:03:c4:b8:7a:ab:1e:26:fe:87:75:d6:40: 57:bc:a5:e6:c7:ca:b0:16:03:b9:b9:7f:8e:53:4c:61:0c:6d: 3c:08:b9:3d:d6:f8:dc:12:f8:9e:2e:2f:fa:77:e2:27:6e:ec: a0:68:e2:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc67MkSFc4GC9B/AUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk ZWYwODU0YTgtNzMyMS00NjA0LWFjODctOGQ1NTgyYWZiMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz1kiD3xbFjeHw2EoJOmkJP7mfYayMNQ3Bww WoEUJMhBED1+OD6ts4mCy7SW0ZvRtAi3V4W8AtFoUGRw/ogFNzZg83VEXiJEGNzX TKq/nXIR+I9y15qrHluJKm5bXfeF27o9x01u/zwWVpcucpafTYlwGCtfXoLBBKCn DgybMvrIUV+NhpN85Xx4iT7/BewWqh0D2CwfPWM6zGk/n2l+wBfev92zSevPrYs/ ShoUki03pg4FjgYVxHdwcakIMI0EmulfSYlRmH3JC7P8LEq1CLJnG2wo4p92aY1R KtnnCDVydWWdAsZMdoyO513zIDZdo3Lx9yEnPNLd+1ZKVVtoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHXSHWqH+YoPF9d2MBE4tY4JkW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI0OTM5ZDgtNjNhZC0z Zjk4LWFiMmEtYjM4MDBiNTcxM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwi8ZAGqEvq9NDvupjw/HJzHdDikoLtRjWHrFtoP7VDZFeaTbZwsRiy d/t9wZMsD5SH6Bj1kytaOIvxq88QSQ0KijEPRRumP8BSB/+GD0R3FPQv2DR0+bA4 hDDnVPPOjypOUvgllHZElvU4Y338B2thKRlRu5Q+7LPLR+xrJ5MoEeDta6gnH3ZF 5cZmt+QPAQvhD6eeqOTTzCQGhTQrN+8IPMQTf28+vIQLf6SGFqzg0ORsGfIQVSdM 9+BwcDROaz/iYd6qfveNMbly6wPEuHqrHib+h3XWQFe8pebHyrAWA7m5f45TTGEM bTwIuT3W+NwS+J4uL/p34idu7KBo4kg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:44 2025 by rpki-client