$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff484e6-47d1-36d0-9d78-7443e5a11d8e.roa File: 9ff484e6-47d1-36d0-9d78-7443e5a11d8e.roa (raw, json) Hash identifier: YHEr1HeKjLwp068+j8+M8Ec26E/rzcM3tWcukXMHdPM= Subject key identifier: C3:CA:E7:C6:0E:55:74:64:45:8A:AD:22:4E:D6:12:35:1D:94:4E:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BF8BEE14303929A01EFC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff484e6-47d1-36d0-9d78-7443e5a11d8e.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f8:be:e1:43:03:92:9a:01:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=4e68eeb1-5cc9-49b2-aa56-afc2ebba0a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2a:d8:c7:97:1a:1a:7c:f7:b0:72:54:b8:5b: a5:3b:40:94:03:31:20:14:42:05:ba:d8:67:78:82: 3d:8b:03:03:6d:63:ba:bf:e4:21:48:e9:cd:a9:b7: c0:fa:2e:ee:c7:68:09:db:36:7f:33:20:c1:0e:98: 08:2a:54:15:2a:f4:3c:1a:ef:c0:66:de:9b:07:40: a6:62:0a:e7:24:94:8f:0f:d4:8a:fe:00:31:a4:fe: 7d:24:f2:9c:48:34:dd:23:4c:06:39:9d:39:46:c5: 75:fe:62:aa:4b:d2:10:fc:49:11:9a:0f:b9:a7:45: cc:64:94:db:37:88:76:82:ed:db:8d:c9:7d:c3:1a: 7f:f7:f8:f6:af:0c:ab:e3:de:ee:0e:7a:f3:60:14: 77:27:80:93:66:c6:e2:05:4a:86:d1:ab:7e:a9:49: c1:17:d7:f0:ac:f6:2a:87:01:7e:36:e9:10:87:38: b5:84:e6:c6:48:da:14:86:b5:e1:17:66:ae:ba:10: 3d:40:6d:c4:d8:19:9a:31:58:4b:e3:7f:20:bf:86: 53:f2:31:6c:39:d0:2f:d3:1c:4f:42:d4:e5:14:51: c6:4c:af:32:a4:8a:77:de:13:e6:a0:2a:35:44:6c: 8a:c9:e7:de:b3:b0:3c:0a:d6:28:3a:c8:0b:a3:68: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CA:E7:C6:0E:55:74:64:45:8A:AD:22:4E:D6:12:35:1D:94:4E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff484e6-47d1-36d0-9d78-7443e5a11d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:23:7c:90:39:05:3d:03:f9:39:21:36:29:90:63:f1:cc:31: 6a:9a:4e:70:5f:fd:74:ce:84:ff:1a:d6:eb:bb:98:bc:e0:33: 1a:02:ab:12:fc:60:1b:ae:4b:be:47:07:99:47:ab:8c:61:17: 75:19:60:f9:84:a3:da:58:fd:e4:0a:27:c5:d3:e8:06:a5:f8: 82:fb:1b:8b:eb:78:f4:70:f7:14:f2:33:d5:e0:2c:21:d4:31: 81:c8:6c:41:bf:b8:ce:b7:ea:03:89:46:eb:c0:f3:65:8b:29: dc:52:90:e9:5c:36:3a:9d:7b:4e:67:6c:21:be:03:57:d1:da: ba:2a:2c:f8:48:b0:69:8e:c0:15:43:33:d8:d2:06:ee:15:12: 71:b7:05:d0:2d:78:8b:cb:f8:df:25:99:33:53:08:24:4f:a2: dd:70:f2:3c:61:ae:b2:8e:84:62:cd:7f:76:98:09:06:c3:4c: 0f:65:df:44:ef:4b:17:ab:90:8d:af:40:6d:ca:de:81:5b:03: 6e:c1:de:f9:3c:93:c1:1f:03:1f:4b:01:94:d3:6f:9a:6d:6d: 4b:c7:7e:26:d7:11:61:eb:8c:78:52:eb:46:9e:f0:64:fb:e4: 83:a4:b4:7b:43:9c:ae:0d:eb:75:2b:d1:27:fd:e9:fe:fc:96: 10:75:3a:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/i+4UMDkpoB78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NGU2OGVlYjEtNWNjOS00OWIyLWFhNTYtYWZjMmViYmEwYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSrYx5caGnz3sHJUuFulO0CUAzEgFEIFuthn eII9iwMDbWO6v+QhSOnNqbfA+i7ux2gJ2zZ/MyDBDpgIKlQVKvQ8Gu/AZt6bB0Cm YgrnJJSPD9SK/gAxpP59JPKcSDTdI0wGOZ05RsV1/mKqS9IQ/EkRmg+5p0XMZJTb N4h2gu3bjcl9wxp/9/j2rwyr497uDnrzYBR3J4CTZsbiBUqG0at+qUnBF9fwrPYq hwF+NukQhzi1hObGSNoUhrXhF2auuhA9QG3E2BmaMVhL438gv4ZT8jFsOdAv0xxP QtTlFFHGTK8ypIp33hPmoCo1RGyKyefes7A8CtYoOsgLo2i0BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPK58YOVXRkRYqtIk7WEjUdlE7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWZmNDg0ZTYtNDdkMS0z NmQwLTlkNzgtNzQ0M2U1YTExZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEjfJA5BT0D+TkhNimQY/HMMWqaTnBf/XTOhP8a1uu7mLzgMxoCqxL8 YBuuS75HB5lHq4xhF3UZYPmEo9pY/eQKJ8XT6Aal+IL7G4vrePRw9xTyM9XgLCHU MYHIbEG/uM636gOJRuvA82WLKdxSkOlcNjqde05nbCG+A1fR2roqLPhIsGmOwBVD M9jSBu4VEnG3BdAteIvL+N8lmTNTCCRPot1w8jxhrrKOhGLNf3aYCQbDTA9l30Tv SxerkI2vQG3K3oFbA27B3vk8k8EfAx9LAZTTb5ptbUvHfibXEWHrjHhS60ae8GT7 5IOktHtDnK4N63Ur0Sf96f78lhB1OsQ= -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:35 2025 by rpki-client