$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa8a40d3-b055-3c82-8dd2-3307e97ec2a6.roa File: aa8a40d3-b055-3c82-8dd2-3307e97ec2a6.roa (raw, json) Hash identifier: MLfNP+JVpWb2v2GwEi51PYMadnfG5HAZ9/V0rrZ2RCU= Subject key identifier: 9A:31:9D:2A:B4:96:84:D8:4C:96:91:CD:CA:AB:32:D4:38:B7:DA:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C0477F94BA5BC6C3FEB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa8a40d3-b055-3c82-8dd2-3307e97ec2a6.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.69.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:04:77:f9:4b:a5:bc:6c:3f:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=4d7e9ac7-849e-42e0-bef8-b57dc334b27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:bb:c5:07:47:2b:7f:bc:b1:a0:0d:92:d5: fe:9b:88:f0:0d:06:f9:0c:38:d0:50:80:7d:61:66: d0:78:90:af:02:f4:9e:9d:6e:41:7d:91:60:ba:14: 26:57:e4:60:31:35:dd:19:3f:17:70:a0:27:7c:dc: 49:df:7e:be:3f:24:84:de:89:ae:c3:91:57:b6:55: e8:60:51:56:db:13:44:d3:31:6e:87:2d:98:4b:2b: 5a:9d:dc:a5:dc:a3:ca:68:06:01:3e:cd:a9:73:8f: b4:13:fe:64:9e:58:e9:a2:05:0c:43:f5:77:6d:9b: fa:f1:15:36:45:55:b6:b5:3e:6d:0a:8b:f2:3c:0a: 83:9d:c2:85:43:90:e5:2e:3e:a5:8c:19:01:cd:db: 23:ae:e5:67:ea:5c:86:8d:f7:48:8d:b4:a7:6e:d1: ad:6d:0c:45:e1:79:0f:75:e7:96:df:5c:ba:7f:54: f1:74:20:70:74:cc:ca:93:16:19:30:ab:9b:db:a8: d6:c3:33:ea:41:55:7f:05:e2:2d:c4:86:5d:65:08: 6d:29:ef:0d:e9:d4:80:54:ed:bc:e2:2d:2c:b6:3a: ec:2c:5b:91:e2:ee:ba:94:25:00:62:a6:b9:d6:ca: 64:a4:23:78:b7:72:e6:51:60:77:86:e1:4c:b0:9a: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:31:9D:2A:B4:96:84:D8:4C:96:91:CD:CA:AB:32:D4:38:B7:DA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aa8a40d3-b055-3c82-8dd2-3307e97ec2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:c5:b0:00:c5:b4:bb:e9:8a:fb:a5:8f:35:f8:62:36:80:a3: 4c:5a:51:63:3c:2c:b3:fd:5f:16:87:7a:60:75:ce:7c:18:1a: 6a:b9:bf:d0:b6:eb:98:50:32:38:62:53:08:be:7d:10:39:de: e7:45:30:f6:1f:91:7e:ba:9e:94:17:b1:41:8b:1f:3c:d5:f4: 06:d8:9b:12:30:eb:24:3f:af:70:43:f6:59:d1:16:0e:51:04: 53:ad:e8:30:19:16:22:0b:d0:71:4b:b5:7f:7e:fe:1d:81:95: 35:5e:d9:5d:67:a7:ce:41:5d:50:ff:8c:f8:b6:47:8d:fd:c2: d0:c8:97:c9:88:86:3d:49:0d:38:65:48:d6:4a:09:92:e8:6d: 04:07:df:45:af:d5:5a:46:db:ba:c9:ce:3b:15:22:3d:aa:77: 7a:a9:d4:05:85:77:01:56:7b:93:07:a5:b1:b6:8a:06:97:9f: a0:4d:bb:cc:50:94:26:e7:69:c9:48:6e:6d:82:fe:30:83:3a: 67:96:59:d2:b1:da:4c:4d:49:57:f2:2a:d7:18:ee:47:e3:70: c5:6c:c9:cc:0d:a4:a6:ce:42:45:a5:dc:a8:42:50:72:32:e8: ad:6b:27:6a:3c:8f:c1:3f:72:50:93:09:f4:66:b4:88:4c:e7: 32:67:eb:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAR3+UulvGw/6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NGQ3ZTlhYzctODQ5ZS00MmUwLWJlZjgtYjU3ZGMzMzRiMjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicy7xQdHK3+8saANktX+m4jwDQb5DDjQUIB9 YWbQeJCvAvSenW5BfZFguhQmV+RgMTXdGT8XcKAnfNxJ336+PySE3omuw5FXtlXo YFFW2xNE0zFuhy2YSytandyl3KPKaAYBPs2pc4+0E/5knljpogUMQ/V3bZv68RU2 RVW2tT5tCovyPAqDncKFQ5DlLj6ljBkBzdsjruVn6lyGjfdIjbSnbtGtbQxF4XkP deeW31y6f1TxdCBwdMzKkxYZMKub26jWwzPqQVV/BeItxIZdZQhtKe8N6dSAVO28 4i0stjrsLFuR4u66lCUAYqa51spkpCN4t3LmUWB3huFMsJqU5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoxnSq0loTYTJaRzcqrMtQ4t9pJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWE4YTQwZDMtYjA1NS0z YzgyLThkZDItMzMwN2U5N2VjMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTFsADFtLvpivuljzX4YjaAo0xaUWM8LLP9XxaHemB1znwYGmq5v9C2 65hQMjhiUwi+fRA53udFMPYfkX66npQXsUGLHzzV9AbYmxIw6yQ/r3BD9lnRFg5R BFOt6DAZFiIL0HFLtX9+/h2BlTVe2V1np85BXVD/jPi2R439wtDIl8mIhj1JDThl SNZKCZLobQQH30Wv1VpG27rJzjsVIj2qd3qp1AWFdwFWe5MHpbG2igaXn6BNu8xQ lCbnaclIbm2C/jCDOmeWWdKx2kxNSVfyKtcY7kfjcMVsycwNpKbOQkWl3KhCUHIy 6K1rJ2o8j8E/clCTCfRmtIhM5zJn6wQ= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:15 2025 by rpki-client