$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a695dcaa-680f-3f1b-9f72-4df973a0a391.roa File: a695dcaa-680f-3f1b-9f72-4df973a0a391.roa (raw, json) Hash identifier: nPirXBC59Ejy4Jpc1mP/rdHBBn+7M3Q3t0iwm+diU7A= Subject key identifier: 16:4F:3F:79:8E:B1:E1:18:B6:79:12:AB:9C:41:9B:4A:E6:6D:4B:F3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BEA22EFA09078178F5F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a695dcaa-680f-3f1b-9f72-4df973a0a391.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:ea:22:ef:a0:90:78:17:8f:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=feb35d01-639b-4937-86c7-860ad48fcc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:4e:ca:66:ab:da:4b:e7:25:41:12:b7:20: 96:77:6b:11:ba:b3:d5:a2:fd:38:5d:91:8f:fb:3c: 41:70:91:73:6e:0c:83:ef:61:03:cc:29:d8:2b:85: 24:e3:7a:6d:8f:c9:d9:b1:d6:a1:45:09:be:cf:9f: 55:cd:6a:c8:c1:33:fe:57:c6:f4:e4:be:7a:91:06: ab:bf:c7:63:33:6e:d8:f4:ce:fb:a0:ef:82:14:db: c0:33:a8:1b:a2:61:9b:3d:a0:4e:20:c0:9c:0f:f4: 02:6b:1a:5e:be:f2:c7:ba:5c:88:a9:97:7b:87:5e: ad:ef:72:f3:e9:1d:38:a3:4e:10:64:19:7d:d6:29: 2c:ce:bc:3a:e2:79:90:e6:9b:3e:07:5d:6f:bb:41: 65:51:8e:48:3f:15:12:22:94:dd:a6:80:57:9b:c3: c6:b1:e8:07:01:30:f2:aa:e2:a1:cf:c0:d8:7c:aa: 55:c7:59:cb:39:48:03:8c:8c:f4:b5:db:9f:35:53: 02:3a:16:39:58:ff:09:11:fc:c8:8a:73:bb:09:bc: 96:67:c0:23:f7:3b:2e:ff:50:32:28:d8:d7:0d:0c: bb:af:27:ee:c2:1f:42:16:33:7b:49:69:17:2e:fe: 64:b5:a8:86:f3:fc:9c:10:6b:a9:d3:f0:bb:1f:3f: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4F:3F:79:8E:B1:E1:18:B6:79:12:AB:9C:41:9B:4A:E6:6D:4B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a695dcaa-680f-3f1b-9f72-4df973a0a391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:df:41:f3:d2:6b:e5:7c:a1:23:7a:ec:94:52:61:37:ae:ea: 87:a9:3c:8d:84:71:14:8f:34:ce:3c:de:e8:4d:07:bc:fb:d1: 52:d6:a6:a8:99:56:a8:e4:b8:d9:61:c2:47:dc:6a:f5:d9:9a: c8:80:4d:2f:0d:ac:b0:51:76:53:d4:40:6d:4b:2c:1b:13:b2: e0:d7:9a:9e:ae:36:05:5e:24:18:bf:46:04:1f:d1:25:cc:3f: 8e:54:6f:20:33:01:b3:41:42:05:11:d3:45:d6:eb:97:f7:9b: 1e:d1:eb:48:ca:78:6b:28:ed:a0:63:14:d7:e6:34:e4:da:51: 17:29:12:dc:4e:12:10:41:e6:e6:66:54:77:5b:19:fe:d0:49: 76:09:90:02:6c:35:17:ea:8e:ac:c5:59:e1:47:25:63:a3:ce: 53:0a:0c:07:54:92:ba:66:45:99:7a:97:45:9f:fc:91:c4:7c: 04:20:f5:e9:b5:b6:3f:04:e4:4d:bd:a5:3f:5f:f3:e8:c0:b5: 4e:c3:0e:d7:76:14:38:4d:7f:c5:84:3d:52:a9:1f:7f:c1:87: f1:9d:38:92:87:39:7e:f3:cc:f7:b0:8d:22:64:b3:2a:30:8c: be:a3:29:27:3b:a4:98:8a:39:fc:43:ff:8b:c1:b2:f4:da:9d: 69:7a:6e:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+oi76CQeBePX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZmViMzVkMDEtNjM5Yi00OTM3LTg2YzctODYwYWQ0OGZjYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1dOymar2kvnJUEStyCWd2sRurPVov04XZGP +zxBcJFzbgyD72EDzCnYK4Uk43ptj8nZsdahRQm+z59VzWrIwTP+V8b05L56kQar v8djM27Y9M77oO+CFNvAM6gbomGbPaBOIMCcD/QCaxpevvLHulyIqZd7h16t73Lz 6R04o04QZBl91ikszrw64nmQ5ps+B11vu0FlUY5IPxUSIpTdpoBXm8PGsegHATDy quKhz8DYfKpVx1nLOUgDjIz0tdufNVMCOhY5WP8JEfzIinO7CbyWZ8Aj9zsu/1Ay KNjXDQy7ryfuwh9CFjN7SWkXLv5ktaiG8/ycEGup0/C7Hz9DqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZPP3mOseEYtnkSq5xBm0rmbUvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTY5NWRjYWEtNjgwZi0z ZjFiLTlmNzItNGRmOTczYTBhMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDfQfPSa+V8oSN67JRSYTeu6oepPI2EcRSPNM483uhNB7z70VLWpqiZ VqjkuNlhwkfcavXZmsiATS8NrLBRdlPUQG1LLBsTsuDXmp6uNgVeJBi/RgQf0SXM P45UbyAzAbNBQgUR00XW65f3mx7R60jKeGso7aBjFNfmNOTaURcpEtxOEhBB5uZm VHdbGf7QSXYJkAJsNRfqjqzFWeFHJWOjzlMKDAdUkrpmRZl6l0Wf/JHEfAQg9em1 tj8E5E29pT9f8+jAtU7DDtd2FDhNf8WEPVKpH3/Bh/GdOJKHOX7zzPewjSJksyow jL6jKSc7pJiKOfxD/4vBsvTanWl6bik= -----END CERTIFICATE-----Generated at Sat Apr 5 06:51:24 2025 by rpki-client