$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa File: a88128f7-729a-3527-a66e-0f8deb6e69f8.roa (raw, json) Hash identifier: h6iSXqNlWpzJwiauSRBg21ee8AKT4MaRdejDEK8R53k= Subject key identifier: 18:63:71:0C:26:15:34:4F:54:C1:01:09:21:BC:82:9C:C4:F8:03:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E16CAB60494CC2BCCB40C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.70.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:6c:ab:60:49:4c:c2:bc:cb:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=5d6cab2d-acf3-4f46-a8d5-daeb1691aba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:11:67:d8:0f:76:d5:0f:8d:e3:45:d0:bd: 16:d1:f0:40:b1:3e:b6:b9:06:45:3e:b8:6b:76:c5: 0e:ab:50:66:a0:fd:52:ec:94:b5:5c:8b:c2:05:59: d1:11:56:2a:f3:60:f1:89:0b:d5:a4:2d:32:18:fa: 78:c8:37:cb:e6:c6:93:7b:26:7f:c0:84:d4:b6:67: b6:0b:68:51:f0:44:4c:c9:84:c7:ec:32:50:48:a8: 98:01:d1:8b:9c:c9:59:57:5c:6e:18:df:83:fa:03: bf:fa:b6:b2:bf:70:56:f1:5d:42:18:e5:60:49:97: 4f:82:e2:8e:71:10:0d:98:21:7e:ea:fd:18:b1:90: 38:b3:f2:1f:af:26:79:af:37:1c:45:25:31:b4:6a: e1:bd:75:83:f1:e9:fe:90:07:d9:43:0e:2c:b0:c9: 18:b2:76:be:bd:ef:76:0d:86:64:33:40:db:a9:25: 6b:13:ea:e9:82:87:ad:0c:f5:a2:ea:e3:ae:5f:40: 17:31:51:77:b4:ec:73:26:e1:2a:5f:01:a5:a6:23: bc:1e:4a:4f:12:87:87:7c:2b:04:e0:b5:5b:f3:1b: 8a:1b:9d:f8:d6:36:c3:4f:42:06:2e:6d:f7:94:bd: 79:b2:c3:1c:13:46:a8:55:8c:38:0a:05:c7:6c:86: 59:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:63:71:0C:26:15:34:4F:54:C1:01:09:21:BC:82:9C:C4:F8:03:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:dc:db:11:8d:3d:3c:16:0b:68:96:47:c7:bb:1c:1c:db:5f: 1e:66:68:66:fd:f0:50:63:e4:2e:16:db:15:99:b6:93:82:54: 84:3c:1a:db:63:ea:b8:b2:ea:a5:eb:74:9e:5e:2f:01:07:10: ad:6b:e3:38:47:da:3d:50:2f:36:9d:a2:b8:7b:a3:a6:a0:a5: 39:4b:54:e0:71:c2:61:82:55:b5:d7:44:37:06:d9:f4:00:10: 56:ba:e5:b4:c6:a0:d5:52:65:4c:e9:01:03:fa:a8:7f:03:b9: e1:54:61:09:36:22:11:94:fb:5f:c0:60:f6:3b:10:71:92:92: 5c:30:8d:71:05:26:ce:a9:de:4f:ba:18:32:18:2e:93:46:ae: 3d:9d:de:c3:ef:46:7d:8b:ec:8c:3d:cb:ba:f6:e6:25:26:db: 49:0a:11:db:d2:88:5e:e5:bc:21:a6:4a:08:69:23:a8:90:5e: f9:0c:d3:5f:b7:95:1c:67:a8:42:06:9e:a0:16:67:ce:88:56: 20:a6:ee:f8:da:c8:92:81:fe:43:55:6b:dd:9f:74:27:d8:28: 39:41:ae:f5:bb:0a:89:6b:cd:24:10:02:27:a4:6a:d6:24:e9: 63:e8:c0:bc:18:e0:a4:e3:6f:56:4b:06:65:81:87:09:82:17: a3:99:cf:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4WyrYElMwrzLQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NWQ2Y2FiMmQtYWNmMy00ZjQ2LWE4ZDUtZGFlYjE2OTFhYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5MRZ9gPdtUPjeNF0L0W0fBAsT62uQZFPrhr dsUOq1BmoP1S7JS1XIvCBVnREVYq82DxiQvVpC0yGPp4yDfL5saTeyZ/wITUtme2 C2hR8ERMyYTH7DJQSKiYAdGLnMlZV1xuGN+D+gO/+rayv3BW8V1CGOVgSZdPguKO cRANmCF+6v0YsZA4s/IfryZ5rzccRSUxtGrhvXWD8en+kAfZQw4ssMkYsna+ve92 DYZkM0DbqSVrE+rpgoetDPWi6uOuX0AXMVF3tOxzJuEqXwGlpiO8HkpPEoeHfCsE 4LVb8xuKG5341jbDT0IGLm33lL15ssMcE0aoVYw4CgXHbIZZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhjcQwmFTRPVMEBCSG8gpzE+ANJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg4MTI4ZjctNzI5YS0z NTI3LWE2NmUtMGY4ZGViNmU2OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzc2xGNPTwWC2iWR8e7HBzbXx5maGb98FBj5C4W2xWZtpOCVIQ8Gttj 6riy6qXrdJ5eLwEHEK1r4zhH2j1QLzadorh7o6agpTlLVOBxwmGCVbXXRDcG2fQA EFa65bTGoNVSZUzpAQP6qH8DueFUYQk2IhGU+1/AYPY7EHGSklwwjXEFJs6p3k+6 GDIYLpNGrj2d3sPvRn2L7Iw9y7r25iUm20kKEdvSiF7lvCGmSghpI6iQXvkM01+3 lRxnqEIGnqAWZ86IViCm7vjayJKB/kNVa92fdCfYKDlBrvW7ColrzSQQAiekatYk 6WPowLwY4KTjb1ZLBmWBhwmCF6OZz8I= -----END CERTIFICATE-----Generated at Sat Apr 5 04:41:03 2025 by rpki-client