$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af974104-0749-3058-ae47-a86d0ca75968.roa File: af974104-0749-3058-ae47-a86d0ca75968.roa (raw, json) Hash identifier: h80THzulw8EnNhceY85Afp35g+pySuKA0u3NXjQrSwM= Subject key identifier: 47:16:F5:13:23:99:99:A0:AD:C4:15:0F:77:BD:FD:E6:B7:E7:F2:F0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088190FE6DB7C3BC2173E480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af974104-0749-3058-ae47-a86d0ca75968.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:90:fe:6d:b7:c3:bc:21:73:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=991aad85-06e9-4295-9cb2-6ca3bd4a4060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:15:22:44:6b:b3:5c:49:c3:e4:4c:54:27: db:a7:40:3d:ca:7e:3e:d2:d5:4e:10:dc:ad:5a:e9: 25:76:4a:b3:65:d3:ca:ef:76:61:46:b8:c2:18:5d: 17:3c:d8:98:d3:ca:25:70:2b:a9:d0:d6:8f:ac:f4: 49:0b:68:e2:8d:ec:62:4d:b8:eb:0e:a4:dc:04:fe: cc:83:19:88:8c:d7:f5:ea:49:ed:3d:3f:f5:63:a4: 08:75:27:7e:1c:ff:1e:b0:3c:32:d6:84:ad:0e:15: 2c:ba:32:7f:6d:ee:65:59:2a:d0:dd:db:46:e8:a3: 59:63:e6:8c:8f:3e:32:c7:d3:9d:da:8e:17:cc:c2: 75:36:a9:7f:b1:a2:7c:9d:f4:96:bb:1e:2e:b7:94: 6a:d8:bd:db:69:60:04:41:7f:9d:2e:71:50:ce:6c: 2e:31:e0:89:3e:59:99:66:3b:0d:fc:02:68:77:83: d7:1d:24:0d:24:11:48:aa:b8:c1:27:e3:82:9d:50: b6:db:80:84:08:89:1a:75:31:66:65:0c:e2:a9:28: c4:b3:93:ea:82:19:ca:1c:e9:52:77:9a:a0:44:1e: ff:a8:6a:fd:84:94:86:6b:ee:5b:fa:6f:2a:82:7a: 14:7f:fb:b5:dd:42:fe:1a:32:20:2d:cf:a7:4e:51: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:16:F5:13:23:99:99:A0:AD:C4:15:0F:77:BD:FD:E6:B7:E7:F2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af974104-0749-3058-ae47-a86d0ca75968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:df:27:f7:59:31:62:ba:b3:90:21:6e:d8:39:f2:47:3e:6b: f8:cf:e6:51:f8:03:ae:08:21:6c:3d:42:ef:a4:72:4d:48:ef: db:ef:df:3f:da:d9:0b:fd:96:12:ab:bb:bb:74:df:3a:9e:96: ed:0d:c9:11:e9:da:38:34:71:99:79:6b:3e:7c:30:fe:76:90: 5a:45:d5:f3:91:de:f0:db:05:c0:eb:c1:ee:0a:49:60:dc:f6: 5d:33:16:f6:fb:c5:ec:ff:6d:fd:90:0b:d9:1d:77:7c:03:70: 53:09:d1:86:72:20:55:56:78:2f:dc:3f:9b:e2:aa:85:29:95: 0b:db:cc:d0:8d:f7:0c:16:99:c3:fd:89:7a:2c:eb:7a:09:b8: 69:03:ae:66:a3:d2:09:df:8b:88:ad:9a:05:e7:a6:9d:5c:21: 6b:ab:23:98:d6:ef:35:7d:a8:b5:eb:e9:64:8c:4f:55:74:e2: 00:17:92:8b:0e:f4:bc:7e:6b:05:a3:22:e9:48:e0:52:51:55: bc:43:5e:03:f8:d0:b8:f4:5f:ea:21:40:2a:0b:88:f3:7f:f4: 3d:46:11:8c:11:7a:c7:00:bb:ed:cc:7c:0b:48:f4:0e:43:a3: 59:01:4a:72:94:e5:d8:dc:e1:10:83:07:bf:ec:83:3c:fe:b6: 20:17:52:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZD+bbfDvCFz5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OTkxYWFkODUtMDZlOS00Mjk1LTljYjItNmNhM2JkNGE0MDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lQVIkRrs1xJw+RMVCfbp0A9yn4+0tVOENyt WukldkqzZdPK73ZhRrjCGF0XPNiY08olcCup0NaPrPRJC2jijexiTbjrDqTcBP7M gxmIjNf16kntPT/1Y6QIdSd+HP8esDwy1oStDhUsujJ/be5lWSrQ3dtG6KNZY+aM jz4yx9Od2o4XzMJ1Nql/saJ8nfSWux4ut5Rq2L3baWAEQX+dLnFQzmwuMeCJPlmZ ZjsN/AJod4PXHSQNJBFIqrjBJ+OCnVC224CECIkadTFmZQziqSjEs5PqghnKHOlS d5qgRB7/qGr9hJSGa+5b+m8qgnoUf/u13UL+GjIgLc+nTlGWCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcW9RMjmZmgrcQVD3e9/ea35/LwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWY5NzQxMDQtMDc0OS0z MDU4LWFlNDctYTg2ZDBjYTc1OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHfJ/dZMWK6s5Ahbtg58kc+a/jP5lH4A64IIWw9Qu+kck1I79vv3z/a 2Qv9lhKru7t03zqelu0NyRHp2jg0cZl5az58MP52kFpF1fOR3vDbBcDrwe4KSWDc 9l0zFvb7xez/bf2QC9kdd3wDcFMJ0YZyIFVWeC/cP5viqoUplQvbzNCN9wwWmcP9 iXos63oJuGkDrmaj0gnfi4itmgXnpp1cIWurI5jW7zV9qLXr6WSMT1V04gAXkosO 9Lx+awWjIulI4FJRVbxDXgP40Lj0X+ohQCoLiPN/9D1GEYwRescAu+3MfAtI9A5D o1kBSnKU5djc4RCDB7/sgzz+tiAXUsk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:07:49 2025 by rpki-client