$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac74ba7c-767f-388f-ae41-f3e0132486df.roa File: ac74ba7c-767f-388f-ae41-f3e0132486df.roa (raw, json) Hash identifier: hiXZ4pn0jYr7ipv8P8kJfK4IV0o0c9+Tzlylq6y+I0o= Subject key identifier: 17:97:14:BB:02:7F:8D:52:61:1B:C1:C7:0D:D4:C6:53:54:62:A4:46 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C05D8F22D3F1761FA3700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac74ba7c-767f-388f-ae41-f3e0132486df.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:05:d8:f2:2d:3f:17:61:fa:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=1a4814dd-6611-4ca2-a696-0d35382bda2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:79:5e:eb:b4:28:f3:3a:ca:8e:77:38:0e:21: 57:df:ef:73:a5:01:bc:0d:58:26:fc:b1:46:81:bf: 4c:7e:38:ac:7c:8c:4c:4a:54:ea:02:f9:4f:1d:46: e0:86:08:01:3b:01:ac:2d:c1:17:c5:f0:0a:b1:05: b6:7b:bf:e0:8f:8a:22:47:58:da:9e:f4:89:f2:c2: 25:14:5c:f5:f2:58:bd:1d:1a:6e:b6:91:e5:da:26: 90:92:3d:4e:38:7c:c0:8b:7e:e9:15:cb:93:83:6d: ad:7f:86:d2:d0:08:f9:eb:3f:65:db:c9:b0:9d:22: 27:fd:ef:b6:56:d3:52:7c:5c:e8:0b:ec:d5:35:07: a6:30:30:7c:19:5a:27:5c:db:80:39:4d:6a:d0:d9: 6b:30:5b:14:6c:b5:1b:ba:ea:ac:c8:50:d5:bc:ee: 5c:f5:45:36:84:93:3b:c9:fe:d0:9a:c2:e2:bb:30: 74:3a:90:3b:3e:da:1f:3e:88:a2:da:9a:3d:7e:18: b8:48:89:4e:7a:5a:1b:d4:6e:28:76:75:44:2c:0e: 6b:4e:9d:c0:ad:25:c0:25:61:4c:5c:86:d3:33:93: 8e:4b:ce:9d:16:51:60:4d:be:1e:3d:5f:3e:05:78: 52:45:bb:20:50:8d:af:09:52:6f:7e:0e:f9:0e:ba: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:97:14:BB:02:7F:8D:52:61:1B:C1:C7:0D:D4:C6:53:54:62:A4:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ac74ba7c-767f-388f-ae41-f3e0132486df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:5d:f9:24:63:4a:14:10:bb:9f:48:51:e6:af:79:fb:61:d9: b9:19:8f:f3:11:49:c5:44:02:1d:48:d7:90:85:99:a8:eb:c4: 62:09:51:f9:15:ce:68:6d:76:c1:ce:37:e4:c5:8c:d1:f0:fc: 6a:bb:3e:2c:82:47:aa:92:fb:bc:4c:c7:c5:38:16:82:6a:38: b6:05:9e:81:3a:3a:85:25:83:68:2d:8e:58:9b:d4:cf:38:f4: 02:1a:81:75:0b:0c:97:ac:d8:5b:20:18:2e:a3:f7:81:80:b3: 2a:95:5f:f2:b1:2e:94:b3:6a:de:5d:e7:e6:cc:c9:90:04:9c: fd:4e:27:e1:b2:7a:9e:3b:ad:29:96:9e:99:14:40:d7:ff:92: f8:d4:67:24:83:c1:1b:8e:50:68:25:17:f6:f6:77:2c:7d:c3: 59:9a:eb:b2:14:c7:df:a9:3e:54:5d:91:bd:50:16:db:80:5f: ac:aa:ef:f1:da:fa:b2:94:13:41:81:7a:2b:e6:5f:1e:99:8e: e0:2c:1e:4f:4d:ef:5b:ae:2d:4f:6e:9f:9a:6f:bb:4e:ca:7e: b5:a5:9d:98:cc:f7:df:43:2f:67:66:97:9c:f1:78:95:45:f2: 5a:1c:99:3b:25:6d:e2:40:99:fe:9a:dc:37:a6:62:20:0c:c7: 97:c6:f8:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAXY8i0/F2H6NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MWE0ODE0ZGQtNjYxMS00Y2EyLWE2OTYtMGQzNTM4MmJkYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknle67Qo8zrKjnc4DiFX3+9zpQG8DVgm/LFG gb9MfjisfIxMSlTqAvlPHUbghggBOwGsLcEXxfAKsQW2e7/gj4oiR1janvSJ8sIl FFz18li9HRputpHl2iaQkj1OOHzAi37pFcuTg22tf4bS0Aj56z9l28mwnSIn/e+2 VtNSfFzoC+zVNQemMDB8GVonXNuAOU1q0NlrMFsUbLUbuuqsyFDVvO5c9UU2hJM7 yf7QmsLiuzB0OpA7PtofPoii2po9fhi4SIlOelob1G4odnVELA5rTp3ArSXAJWFM XIbTM5OOS86dFlFgTb4ePV8+BXhSRbsgUI2vCVJvfg75DrrTUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeXFLsCf41SYRvBxw3UxlNUYqRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWM3NGJhN2MtNzY3Zi0z ODhmLWFlNDEtZjNlMDEzMjQ4NmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1d+SRjShQQu59IUeavefth2bkZj/MRScVEAh1I15CFmajrxGIJUfkV zmhtdsHON+TFjNHw/Gq7PiyCR6qS+7xMx8U4FoJqOLYFnoE6OoUlg2gtjlib1M84 9AIagXULDJes2FsgGC6j94GAsyqVX/KxLpSzat5d5+bMyZAEnP1OJ+Gyep47rSmW npkUQNf/kvjUZySDwRuOUGglF/b2dyx9w1ma67IUx9+pPlRdkb1QFtuAX6yq7/Ha +rKUE0GBeivmXx6ZjuAsHk9N71uuLU9un5pvu07KfrWlnZjM999DL2dml5zxeJVF 8locmTslbeJAmf6a3DemYiAMx5fG+OY= -----END CERTIFICATE-----Generated at Sat Apr 5 06:42:50 2025 by rpki-client