$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a170d3d5-fe8d-3f6d-a3b3-13ca40fe9c3c.roa File: a170d3d5-fe8d-3f6d-a3b3-13ca40fe9c3c.roa (raw, json) Hash identifier: MtA6scERYeBf+62F5NhNk5WyoNywZHSWxSIYpz0OFQw= Subject key identifier: 4C:E4:9A:F5:CF:65:F5:6D:4E:13:1E:E5:84:85:8C:61:00:74:52:83 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C08A8D921D172BA08AF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a170d3d5-fe8d-3f6d-a3b3-13ca40fe9c3c.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:08:a8:d9:21:d1:72:ba:08:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=38e2d979-b459-4384-b394-2d6a1bd64796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:cf:de:69:17:f8:c3:1f:c6:ec:1d:2b:e8: 02:97:c9:ba:ca:db:37:90:83:d2:23:60:00:22:bd: a6:e6:87:87:93:b6:5b:b2:1a:0e:c1:c0:8f:07:49: 57:57:9b:f9:f4:a0:aa:4f:2c:40:c9:7a:5f:c1:43: cd:66:00:d7:e5:f7:f8:10:3b:6d:fa:b6:c6:aa:a3: fd:9a:7e:e7:51:b6:9c:b4:d1:4d:df:33:a8:75:2d: dc:d0:e2:84:98:fe:a7:99:0c:db:c2:9b:43:80:a4: 57:4c:25:4c:d3:85:d7:18:d7:38:b4:9d:b6:6d:a5: 89:b0:11:44:24:9d:6b:b2:7a:27:90:5b:f8:4f:0b: 30:a8:2e:7e:e1:bf:d6:76:d1:d9:3c:e8:a4:7f:7f: 8a:f5:a4:19:e0:19:47:a6:15:f9:e5:ee:76:84:0c: 9d:a5:0f:28:19:1c:92:e2:dd:27:2b:9b:68:83:b1: 3a:45:31:f5:5c:5c:a4:c1:19:ec:74:83:77:ac:44: 27:d5:67:db:2f:de:08:0c:fc:91:df:b5:94:b7:da: 7c:08:4a:84:87:07:f4:f8:95:cc:27:a0:5a:1f:45: c9:8c:f0:5b:f1:1c:c4:32:48:a7:8e:2c:26:75:f1: 14:9c:9d:7e:e1:b8:cd:cc:ed:0b:00:9c:02:02:a5: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E4:9A:F5:CF:65:F5:6D:4E:13:1E:E5:84:85:8C:61:00:74:52:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a170d3d5-fe8d-3f6d-a3b3-13ca40fe9c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1f:eb:5d:dc:f0:f6:2a:41:7e:65:1a:f8:9b:30:ec:99:ff: 6c:26:6d:db:b0:5b:83:48:70:ef:f5:4d:ea:29:07:0c:19:9a: 1a:8b:ea:50:d7:30:9c:9c:2f:e1:c1:f9:1c:d1:2d:ba:ee:6a: 58:1f:27:4d:48:e9:8a:d0:89:e2:71:21:23:95:a0:02:bc:32: 62:8b:00:b8:d3:64:00:92:67:89:99:d0:c9:dd:9f:0d:92:fa: 62:48:2a:42:16:ff:83:d1:e8:85:e4:a5:da:3d:76:c6:d2:81: 2c:7a:aa:32:f7:1b:a8:f4:61:ff:ac:18:c7:3f:c6:70:2f:15: 71:04:82:6f:d9:48:7f:17:3f:40:c7:9f:96:93:d5:84:7c:d4: 36:0a:54:8e:dd:18:ed:69:58:8e:1a:6a:4a:e2:60:ce:81:a2: 1e:31:66:c5:b8:40:3c:fe:7c:f2:31:9f:23:6e:8e:fd:99:91: 14:8a:01:00:a7:97:48:76:1c:9c:f6:20:05:f9:71:74:db:94: 4e:8c:97:59:62:f7:48:70:e2:59:f3:35:73:e5:9f:d9:46:8a: 3a:ca:b2:4c:3d:41:ed:0e:12:a3:57:c6:79:ac:c3:aa:a2:52: 7e:cf:46:05:e3:a8:39:4a:2d:ec:0f:af:d1:88:d1:bd:cc:d4: 03:9f:e6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAio2SHRcroIrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MzhlMmQ5NzktYjQ1OS00Mzg0LWIzOTQtMmQ2YTFiZDY0Nzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vXP3mkX+MMfxuwdK+gCl8m6yts3kIPSI2AA Ir2m5oeHk7ZbshoOwcCPB0lXV5v59KCqTyxAyXpfwUPNZgDX5ff4EDtt+rbGqqP9 mn7nUbactNFN3zOodS3c0OKEmP6nmQzbwptDgKRXTCVM04XXGNc4tJ22baWJsBFE JJ1rsnonkFv4TwswqC5+4b/WdtHZPOikf3+K9aQZ4BlHphX55e52hAydpQ8oGRyS 4t0nK5tog7E6RTH1XFykwRnsdIN3rEQn1WfbL94IDPyR37WUt9p8CEqEhwf0+JXM J6BaH0XJjPBb8RzEMkinjiwmdfEUnJ1+4bjNzO0LAJwCAqUBQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzkmvXPZfVtThMe5YSFjGEAdFKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE3MGQzZDUtZmU4ZC0z ZjZkLWEzYjMtMTNjYTQwZmU5YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4f613c8PYqQX5lGvibMOyZ/2wmbduwW4NIcO/1TeopBwwZmhqL6lDX MJycL+HB+RzRLbrualgfJ01I6YrQieJxISOVoAK8MmKLALjTZACSZ4mZ0Mndnw2S +mJIKkIW/4PR6IXkpdo9dsbSgSx6qjL3G6j0Yf+sGMc/xnAvFXEEgm/ZSH8XP0DH n5aT1YR81DYKVI7dGO1pWI4aakriYM6Boh4xZsW4QDz+fPIxnyNujv2ZkRSKAQCn l0h2HJz2IAX5cXTblE6Ml1li90hw4lnzNXPln9lGijrKskw9Qe0OEqNXxnmsw6qi Un7PRgXjqDlKLewPr9GI0b3M1AOf5ok= -----END CERTIFICATE-----Generated at Sat Apr 5 04:41:07 2025 by rpki-client