$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1dae51e-75d9-3bb5-8625-d5b6e3ec41e3.roa File: a1dae51e-75d9-3bb5-8625-d5b6e3ec41e3.roa (raw, json) Hash identifier: YmH3/lR6X7UW0cCrYF99ohNGvvrNORzU1E0jGpsaHV8= Subject key identifier: DE:83:07:7A:D0:01:B2:75:29:90:0E:61:0B:5D:74:17:F0:8B:B3:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088191AE0FD79BDEE975D676 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1dae51e-75d9-3bb5-8625-d5b6e3ec41e3.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:91:ae:0f:d7:9b:de:e9:75:d6:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=511cbe9c-dace-43b0-a53f-c7b8623771f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:46:11:d9:32:01:61:65:8a:b6:c0:d2:e6: 30:de:e8:78:9b:3f:e1:52:6f:45:1f:0f:1a:d2:61: ef:ec:d0:b1:4e:bc:d7:de:f5:fe:39:1e:1d:a1:d7: 60:00:19:34:28:e0:52:66:3f:5c:75:d8:70:be:85: a2:85:89:24:09:a2:d7:1b:6e:73:c8:9b:fa:3e:68: c8:55:50:84:f2:d9:07:54:2e:01:99:85:9a:7e:8f: a7:e5:77:cc:96:49:eb:66:02:5c:27:2f:14:7f:d6: 15:1b:ba:9c:bd:36:9f:ac:28:a3:d1:91:d4:a6:58: 39:7c:f1:c0:eb:eb:b2:a2:9e:82:18:ec:71:6c:cf: 10:0b:cd:36:1e:6d:5c:d4:53:67:ce:0f:b0:74:e3: 1b:d1:ef:b1:9f:16:cb:f3:22:7f:72:12:5d:ed:19: f0:cb:43:1c:44:07:62:26:36:8d:ac:ab:72:7a:09: 32:1f:e7:46:de:c1:e8:fa:5c:e1:9d:81:a9:4a:b5: 5d:c7:b1:dd:46:29:c2:2a:f4:e6:ab:21:95:10:7b: 40:6d:6b:c4:96:bb:5b:63:db:dc:8b:66:2d:c1:a9: 19:4c:cf:84:38:b1:a1:0a:41:a8:41:f2:c2:69:c6: 7b:40:61:be:bf:51:50:94:39:27:8d:47:77:f2:b9: 85:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:83:07:7A:D0:01:B2:75:29:90:0E:61:0B:5D:74:17:F0:8B:B3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a1dae51e-75d9-3bb5-8625-d5b6e3ec41e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:78:4f:ec:80:05:90:0c:8a:39:0b:7a:81:30:16:1d:a9:13: 46:b1:65:33:46:8e:b0:29:42:05:93:12:82:cf:3a:b5:5c:e7: f5:0b:9d:fe:8a:ba:7c:5a:3a:96:b6:18:aa:44:55:9f:88:2a: 49:be:23:d9:9d:a7:49:ea:34:a2:c8:ca:22:1d:4a:e0:68:90: 38:7c:d1:ab:de:fa:a2:e5:93:7a:1e:ee:ce:6a:43:d2:44:4f: a6:19:3e:9b:63:9a:0e:7f:5e:eb:06:bc:4f:0d:80:12:a5:e6: 15:81:b0:9a:ea:ab:6f:b8:f0:f2:e1:50:a8:4c:9d:b9:87:d6: 4d:6c:85:8e:89:a2:29:75:7a:aa:2f:7d:72:46:e5:a1:2d:9c: 18:d8:be:41:2e:28:f0:b4:81:f9:23:81:8d:69:8b:9f:c5:99: c7:f2:f2:c5:98:a5:cd:69:7f:e1:36:3c:c2:31:96:60:b1:67: 35:64:f6:4b:46:ec:70:96:14:8d:76:f8:ab:8c:b9:16:76:46: 0a:3c:fb:f9:d9:6f:75:8f:24:de:2a:3d:05:c1:cb:41:d5:58: 21:1d:ca:b7:8a:6c:5f:68:85:d1:a4:56:9c:4d:44:c5:db:d5: 78:44:e3:02:58:b8:fd:5a:36:3a:66:2a:ae:6c:26:b6:bb:20: 28:11:ee:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZGuD9eb3ul11nYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NTExY2JlOWMtZGFjZS00M2IwLWE1M2YtYzdiODYyMzc3MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xGEdkyAWFlirbA0uYw3uh4mz/hUm9FHw8a 0mHv7NCxTrzX3vX+OR4doddgABk0KOBSZj9cddhwvoWihYkkCaLXG25zyJv6PmjI VVCE8tkHVC4BmYWafo+n5XfMlknrZgJcJy8Uf9YVG7qcvTafrCij0ZHUplg5fPHA 6+uyop6CGOxxbM8QC802Hm1c1FNnzg+wdOMb0e+xnxbL8yJ/chJd7Rnwy0McRAdi JjaNrKtyegkyH+dG3sHo+lzhnYGpSrVdx7HdRinCKvTmqyGVEHtAbWvElrtbY9vc i2YtwakZTM+EOLGhCkGoQfLCacZ7QGG+v1FQlDknjUd38rmFlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6DB3rQAbJ1KZAOYQtddBfwi7OxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTFkYWU1MWUtNzVkOS0z YmI1LTg2MjUtZDViNmUzZWM0MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMF4T+yABZAMijkLeoEwFh2pE0axZTNGjrApQgWTEoLPOrVc5/ULnf6K unxaOpa2GKpEVZ+IKkm+I9mdp0nqNKLIyiIdSuBokDh80ave+qLlk3oe7s5qQ9JE T6YZPptjmg5/XusGvE8NgBKl5hWBsJrqq2+48PLhUKhMnbmH1k1shY6Joil1eqov fXJG5aEtnBjYvkEuKPC0gfkjgY1pi5/Fmcfy8sWYpc1pf+E2PMIxlmCxZzVk9ktG 7HCWFI12+KuMuRZ2Rgo8+/nZb3WPJN4qPQXBy0HVWCEdyreKbF9ohdGkVpxNRMXb 1XhE4wJYuP1aNjpmKq5sJra7ICgR7oE= -----END CERTIFICATE-----Generated at Sun Apr 6 11:46:46 2025 by rpki-client