$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b66d146-4874-3d10-ad3b-ba8000e1fc38.roa File: 9b66d146-4874-3d10-ad3b-ba8000e1fc38.roa (raw, json) Hash identifier: q+ni6BUEcsTZn6eNbQQZMusN3FndU9bqARW8QJM42Jc= Subject key identifier: 32:1B:D9:3E:34:9B:EC:FE:14:86:8B:AC:1A:CB:80:6F:63:52:86:2F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818BAF5FF6AC8D59626C9C Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b66d146-4874-3d10-ad3b-ba8000e1fc38.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.64.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8b:af:5f:f6:ac:8d:59:62:6c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=77f8cfba-eda0-4de3-95cd-22711d0ecaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:c8:d5:25:4d:6a:69:bc:ae:80:19:6c:6a: 75:31:0a:64:fa:fa:5a:16:24:7f:08:4b:e7:39:8f: 70:85:e4:1b:0e:60:a2:8a:78:d0:8f:bf:5a:bf:d3: a6:61:fe:98:26:6f:df:27:70:f1:cd:b1:24:98:11: 03:91:5e:ab:34:8f:40:2c:52:c5:95:ef:c5:eb:ae: c2:e1:d6:62:38:97:f0:9c:3d:19:3f:c7:17:f1:92: bd:af:6d:85:06:90:2d:7f:2d:3f:94:ca:e1:4a:25: db:14:56:ea:c4:f1:93:68:17:3f:2c:ec:d1:0d:21: 1a:f6:85:dd:5b:c6:4a:20:3e:09:dc:c8:2c:e1:ad: f7:0e:bb:29:bf:45:e9:0e:15:0b:a5:23:41:f7:25: db:a9:5b:4c:5a:65:7e:81:b2:ee:54:ac:e7:49:86: ce:8e:80:21:b0:8d:c6:0b:5c:0b:87:03:02:73:91: f2:8c:ae:42:bc:27:58:09:f8:05:87:ac:29:da:06: 70:48:6c:f3:dd:47:07:8b:c0:f7:d5:92:30:b4:7a: 9e:cb:83:96:1a:88:25:04:b6:7b:f3:20:13:1b:b7: c3:1a:51:c6:21:81:9d:fb:50:db:2f:3f:ee:f2:28: b4:f5:7d:69:85:45:e8:bc:ed:97:2b:f0:2a:1c:91: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1B:D9:3E:34:9B:EC:FE:14:86:8B:AC:1A:CB:80:6F:63:52:86:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b66d146-4874-3d10-ad3b-ba8000e1fc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1d:bd:9c:4b:88:23:27:74:3d:ac:fd:07:4a:b2:da:27:31: 8c:b7:e2:6b:9e:b9:8c:52:f9:f5:51:75:3e:62:e5:3a:ac:5d: 6a:84:04:da:cb:ad:41:b4:c9:aa:ee:96:9d:b5:4a:b8:59:35: f2:ee:a7:5e:e7:23:3d:00:18:8d:4e:5d:cb:4b:23:58:b5:40: ca:1b:2b:3d:9a:7b:2a:8b:41:e1:bb:53:44:c1:70:92:1a:1f: 30:c6:83:e3:be:43:88:ef:e5:51:9f:1a:43:ac:1b:51:fc:6e: 3d:0e:ce:6a:20:05:ce:bf:e2:10:05:08:9b:50:04:25:fe:78: 89:f8:39:fb:a7:9d:c7:92:ab:2f:5d:01:e8:d1:04:02:3d:79: d7:14:cc:e8:7d:fb:f5:f3:3c:54:85:7a:5e:b4:c3:17:0a:f7: 0b:60:2a:b2:3f:e8:27:0b:c5:54:a1:31:1e:e0:11:b0:16:2b: 65:4b:a0:98:21:db:26:b7:71:30:77:ca:2c:db:cc:b7:11:91: 7d:bd:34:79:43:c8:0b:1f:af:4a:50:6d:b7:10:b7:64:99:77: 93:3c:27:3d:75:67:f6:25:1e:de:8a:eb:18:13:b5:30:72:31: 41:7f:3f:88:86:a8:cb:4e:d1:9f:99:80:3c:08:23:9f:e1:17: 7f:ef:5d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYuvX/asjVlibJwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NzdmOGNmYmEtZWRhMC00ZGUzLTk1Y2QtMjI3MTFkMGVjYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1bI1SVNamm8roAZbGp1MQpk+vpaFiR/CEvn OY9wheQbDmCiinjQj79av9OmYf6YJm/fJ3DxzbEkmBEDkV6rNI9ALFLFle/F667C 4dZiOJfwnD0ZP8cX8ZK9r22FBpAtfy0/lMrhSiXbFFbqxPGTaBc/LOzRDSEa9oXd W8ZKID4J3Mgs4a33Drspv0XpDhULpSNB9yXbqVtMWmV+gbLuVKznSYbOjoAhsI3G C1wLhwMCc5HyjK5CvCdYCfgFh6wp2gZwSGzz3UcHi8D31ZIwtHqey4OWGoglBLZ7 8yATG7fDGlHGIYGd+1DbLz/u8ii09X1phUXovO2XK/AqHJHYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIb2T40m+z+FIaLrBrLgG9jUoYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI2NmQxNDYtNDg3NC0z ZDEwLWFkM2ItYmE4MDAwZTFmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsdvZxLiCMndD2s/QdKstonMYy34mueuYxS+fVRdT5i5TqsXWqEBNrL rUG0yarulp21SrhZNfLup17nIz0AGI1OXctLI1i1QMobKz2aeyqLQeG7U0TBcJIa HzDGg+O+Q4jv5VGfGkOsG1H8bj0OzmogBc6/4hAFCJtQBCX+eIn4OfunnceSqy9d AejRBAI9edcUzOh9+/XzPFSFel60wxcK9wtgKrI/6CcLxVShMR7gEbAWK2VLoJgh 2ya3cTB3yizbzLcRkX29NHlDyAsfr0pQbbcQt2SZd5M8Jz11Z/YlHt6K6xgTtTBy MUF/P4iGqMtO0Z+ZgDwII5/hF3/vXcM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:15:28 2025 by rpki-client