$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3a7d12c-9866-37bb-9e05-5f79097187db.roa File: a3a7d12c-9866-37bb-9e05-5f79097187db.roa (raw, json) Hash identifier: u80/CjNQJatOyLVdeERY1h22uITBRfQvCwGvgdbLomc= Subject key identifier: 9E:23:04:46:10:BB:2A:C1:5B:94:09:11:BC:0E:ED:B8:2C:42:4A:F2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BFE099A935551B9238380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3a7d12c-9866-37bb-9e05-5f79097187db.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.69.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:fe:09:9a:93:55:51:b9:23:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=130f6559-9d2c-47d9-9e3f-1c6e36bb3f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c0:d7:9c:67:45:e6:c3:1c:ac:df:ec:c6:9d: 4c:74:f6:41:65:7d:7e:39:21:4f:8a:c7:e9:e4:f8: 56:25:1a:9e:d9:4f:13:e6:3b:0d:b7:66:54:85:80: 48:3d:0a:27:f2:31:30:5e:f5:b7:d6:09:b6:78:26: fb:f1:de:13:95:52:ec:58:0f:c3:b0:e7:82:46:30: bc:9a:f7:1a:58:ad:b2:70:89:e6:5b:3f:71:9f:0e: 2a:85:b1:1b:fc:dd:16:3c:61:39:66:cd:e0:8c:f7: 33:b2:69:6c:2d:77:11:29:fc:03:f2:92:c9:ce:ad: ee:4b:2f:78:86:ec:db:9d:71:5b:fd:1c:59:d8:8d: 4b:e4:79:11:a7:dc:27:2e:d5:91:67:ab:d4:fe:dc: 36:9e:aa:98:f2:5a:44:87:3c:b8:c6:c6:7f:75:46: 1b:70:63:ea:34:0f:cd:98:15:c3:fa:03:63:aa:60: 28:4f:fb:2b:2b:c4:d2:e1:4f:72:b3:51:1b:c4:71: 30:f4:09:22:43:d7:56:f1:40:6f:ab:5c:ce:a2:2d: 80:4f:f5:cd:2b:ea:61:68:32:e3:be:e9:92:a1:06: 98:15:f3:9a:d7:6c:d8:c4:3e:70:e7:20:42:89:bc: ad:f3:c0:67:2a:f7:be:99:e6:31:54:33:90:6d:64: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:04:46:10:BB:2A:C1:5B:94:09:11:BC:0E:ED:B8:2C:42:4A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a3a7d12c-9866-37bb-9e05-5f79097187db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:8a:e1:6f:09:c0:6a:af:62:2b:2b:4d:5f:f3:73:53:32:68: b9:26:d7:54:8e:60:03:7b:b6:db:e4:f8:d6:51:dc:46:8a:02: da:78:e7:1d:8e:fa:2c:bf:0f:e5:04:3e:e2:d0:e7:2f:b4:38: e4:b8:93:11:c6:55:c6:dd:05:9b:f7:f7:c5:d0:3d:59:7c:af: f3:61:71:86:19:b4:0c:5d:30:12:d0:cb:c7:3a:cc:60:22:cb: d4:63:bf:a4:a2:16:c1:89:ce:09:e5:c6:3f:7b:3b:df:14:ef: 19:69:3a:56:10:47:8b:74:23:1c:a8:5f:53:d0:55:19:4c:dd: 22:cd:44:16:2a:d8:7c:29:25:af:06:84:39:8b:6b:b3:36:6f: 47:a0:fb:97:f5:f9:e6:e3:1d:20:45:00:20:2a:ca:e4:a6:da: e3:8f:18:d3:a9:0f:bb:09:a4:3a:f0:a5:9c:67:64:20:49:22: a7:5c:e0:cb:c1:71:58:64:bd:e0:2f:eb:0f:a1:cc:81:84:d6: 01:77:66:60:76:7b:d6:f2:76:8e:0b:2d:cf:de:59:68:5f:cd: 9f:8a:61:2d:fa:e4:33:b6:67:16:67:c6:91:49:81:e4:16:23: 32:f3:93:c6:58:ae:22:14:ce:5f:02:23:11:41:4f:6b:8f:57: 78:2c:51:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/4JmpNVUbkjg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk MTMwZjY1NTktOWQyYy00N2Q5LTllM2YtMWM2ZTM2YmIzZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8DXnGdF5sMcrN/sxp1MdPZBZX1+OSFPisfp 5PhWJRqe2U8T5jsNt2ZUhYBIPQon8jEwXvW31gm2eCb78d4TlVLsWA/DsOeCRjC8 mvcaWK2ycInmWz9xnw4qhbEb/N0WPGE5Zs3gjPczsmlsLXcRKfwD8pLJzq3uSy94 huzbnXFb/RxZ2I1L5HkRp9wnLtWRZ6vU/tw2nqqY8lpEhzy4xsZ/dUYbcGPqNA/N mBXD+gNjqmAoT/srK8TS4U9ys1EbxHEw9AkiQ9dW8UBvq1zOoi2AT/XNK+phaDLj vumSoQaYFfOa12zYxD5w5yBCibyt88BnKve+meYxVDOQbWQcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4jBEYQuyrBW5QJEbwO7bgsQkryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTNhN2QxMmMtOTg2Ni0z N2JiLTllMDUtNWY3OTA5NzE4N2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISK4W8JwGqvYisrTV/zc1MyaLkm11SOYAN7ttvk+NZR3EaKAtp45x2O +iy/D+UEPuLQ5y+0OOS4kxHGVcbdBZv398XQPVl8r/NhcYYZtAxdMBLQy8c6zGAi y9Rjv6SiFsGJzgnlxj97O98U7xlpOlYQR4t0IxyoX1PQVRlM3SLNRBYq2HwpJa8G hDmLa7M2b0eg+5f1+ebjHSBFACAqyuSm2uOPGNOpD7sJpDrwpZxnZCBJIqdc4MvB cVhkveAv6w+hzIGE1gF3ZmB2e9bydo4LLc/eWWhfzZ+KYS365DO2ZxZnxpFJgeQW IzLzk8ZYriIUzl8CIxFBT2uPV3gsUco= -----END CERTIFICATE-----Generated at Sat Apr 5 08:02:03 2025 by rpki-client