$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa File: a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa (raw, json) Hash identifier: 8mfyLADpEJAml0ppx7Guk/K1DlXKREYRMPtonHW3w2I= Subject key identifier: F9:A8:19:89:E7:F4:3E:90:84:D2:F5:0F:C9:5E:F3:3B:B2:C8:D3:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E16639CD25362F65CDFD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.70.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:66:39:cd:25:36:2f:65:cd:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=5dcb46de-2d7b-4013-87ea-0af531bac1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:82:b3:0b:98:32:1b:30:f2:8d:81:4a:bb: fa:00:51:df:07:c9:7e:50:70:87:70:72:59:84:c9: f9:1e:e9:08:12:57:b1:10:6e:28:45:32:ee:26:27: 8f:99:73:9e:f4:1b:92:96:a4:d6:25:3f:70:75:12: 78:7f:e7:3e:b3:79:d5:91:a3:4e:0f:e2:17:62:47: 13:05:93:db:3b:54:4e:a0:2e:29:9d:13:8c:fc:f6: 7a:f3:75:34:e5:d9:36:98:f5:a3:6e:f7:cc:7d:26: ce:92:e2:77:46:0f:6f:20:42:ff:fe:5c:29:a3:a1: fe:75:0b:9e:2b:57:41:0b:f4:ac:4b:89:88:6e:83: 45:11:f0:61:7b:c1:c0:51:0a:70:f9:c1:e8:cf:e8: d1:b7:b1:cf:3e:fe:b9:46:47:66:5e:8f:af:bf:30: df:b8:e5:7d:bc:e6:13:57:24:f1:53:f0:f6:68:b1: c9:b1:d6:9f:2e:b3:74:e7:8b:37:bf:3e:18:6c:25: 4c:ad:c7:ef:ea:af:63:8b:d5:97:d1:f7:a6:8b:fc: ed:c6:3e:d1:13:36:18:69:ef:60:fb:dc:68:ee:83: 29:a0:b7:5b:14:6e:9d:ca:8b:af:f5:42:aa:9f:be: 80:f6:da:d1:a3:4f:68:fd:7a:13:33:31:c8:8c:29: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A8:19:89:E7:F4:3E:90:84:D2:F5:0F:C9:5E:F3:3B:B2:C8:D3:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3962f60-5015-3f06-a3c3-d6969f9a1afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:73:ad:9a:43:c6:30:cb:7f:d7:22:d3:80:b2:f9:e2:76:28: 3c:c2:a5:2f:84:5a:ac:a4:66:2b:0a:7e:4d:0b:8f:dd:a5:f9: f9:4d:27:c3:65:41:89:ae:c6:4d:9a:cf:48:27:2c:f7:e3:87: b6:62:2f:75:96:3c:7f:96:64:06:6e:ea:be:34:5a:24:6e:4d: 94:ff:3a:69:c2:a3:c8:ca:2c:f2:41:54:6e:93:22:e2:db:9b: 31:77:65:6b:a1:06:2f:d6:77:cc:f1:67:b7:13:02:2a:22:df: a3:d3:e7:6c:7a:e6:72:c9:e2:54:4d:7a:05:db:f4:e2:c3:b5: ae:57:5f:7e:25:65:ca:28:40:bc:6e:ee:f7:46:5b:a7:0a:45: 84:57:fb:0d:cd:a7:28:10:d1:3d:5e:e2:e9:2c:81:06:62:95: 1d:df:f8:16:11:c7:e8:a9:67:5b:fc:6d:1c:82:41:f1:5c:bb: ab:78:18:cc:cc:a0:9b:3a:0f:59:56:9f:31:1f:80:45:48:ef: 89:88:43:6e:8a:42:26:f9:0f:e4:3c:e6:b1:00:38:31:b8:4a: ba:18:e0:4a:e7:eb:5c:42:54:45:af:c2:8c:96:b8:9e:01:b1: e9:6c:40:62:fd:e1:5c:53:d4:ac:3b:a0:55:26:a5:01:0f:4d: 46:70:ff:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4WY5zSU2L2XN/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NWRjYjQ2ZGUtMmQ3Yi00MDEzLTg3ZWEtMGFmNTMxYmFjMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFeCswuYMhsw8o2BSrv6AFHfB8l+UHCHcHJZ hMn5HukIElexEG4oRTLuJiePmXOe9BuSlqTWJT9wdRJ4f+c+s3nVkaNOD+IXYkcT BZPbO1ROoC4pnROM/PZ683U05dk2mPWjbvfMfSbOkuJ3Rg9vIEL//lwpo6H+dQue K1dBC/SsS4mIboNFEfBhe8HAUQpw+cHoz+jRt7HPPv65RkdmXo+vvzDfuOV9vOYT VyTxU/D2aLHJsdafLrN054s3vz4YbCVMrcfv6q9ji9WX0femi/ztxj7REzYYae9g +9xo7oMpoLdbFG6dyouv9UKqn76A9trRo09o/XoTMzHIjClHIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmoGYnn9D6QhNL1D8le8zuyyNPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTM5NjJmNjAtNTAxNS0z ZjA2LWEzYzMtZDY5NjlmOWExYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNzrZpDxjDLf9ci04Cy+eJ2KDzCpS+EWqykZisKfk0Lj92l+flNJ8Nl QYmuxk2az0gnLPfjh7ZiL3WWPH+WZAZu6r40WiRuTZT/OmnCo8jKLPJBVG6TIuLb mzF3ZWuhBi/Wd8zxZ7cTAioi36PT52x65nLJ4lRNegXb9OLDta5XX34lZcooQLxu 7vdGW6cKRYRX+w3NpygQ0T1e4uksgQZilR3f+BYRx+ipZ1v8bRyCQfFcu6t4GMzM oJs6D1lWnzEfgEVI74mIQ26KQib5D+Q85rEAODG4SroY4Ern61xCVEWvwoyWuJ4B selsQGL94VxT1Kw7oFUmpQEPTUZw/4I= -----END CERTIFICATE-----Generated at Sat Apr 5 08:45:00 2025 by rpki-client