$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b29569c3-4a61-3727-95c7-4d8bbaf1be6c.roa File: b29569c3-4a61-3727-95c7-4d8bbaf1be6c.roa (raw, json) Hash identifier: GBTN3bvv774R4eDm055tAYCq81YKS+XVrEKKQ/c+T0c= Subject key identifier: DC:4F:82:B3:C1:2D:15:CD:76:95:CB:78:69:0C:0B:50:0C:FD:6C:DD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BFA979AC4240691F13B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b29569c3-4a61-3727-95c7-4d8bbaf1be6c.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.64.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:fa:97:9a:c4:24:06:91:f1:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=af9f262f-c8ea-46ff-b49f-19a16c11d773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:9a:6b:b0:cf:fc:82:33:7a:d8:98:9d:93: 1b:a1:fc:84:32:95:fd:aa:ce:81:a9:a0:71:9b:9c: 8b:eb:08:1c:c9:ba:1e:ac:fa:9b:78:11:38:1d:53: e0:48:d4:5f:6e:5b:43:33:09:df:cd:d9:91:17:8c: 99:42:f3:8f:bd:8b:ff:fe:66:2b:f5:75:d7:62:fc: a8:0a:64:e9:41:87:fe:c8:16:c4:89:4b:1b:ca:d5: 01:e1:b6:6d:9a:8d:ac:ab:73:e0:0c:1a:25:c3:30: 9c:6f:6c:a7:10:01:ca:0b:29:57:5c:ab:3e:4d:7f: ef:c0:a4:d7:f0:ae:fc:77:88:4f:4f:78:e4:cd:8c: 3a:90:af:b1:c2:33:7e:e9:b3:3c:c9:ce:3b:c8:1e: 2d:bf:e2:31:49:1b:fc:ba:56:3b:42:99:01:34:fc: 66:53:6d:e0:ef:da:cb:33:3d:84:90:44:0f:8b:68: a0:ab:c3:35:48:a6:9d:56:3c:e9:be:9f:bb:cf:80: 4b:5b:2a:de:c5:44:f1:27:c5:48:a1:20:76:62:c7: 72:84:3e:97:45:2b:8e:ad:ad:62:a0:b4:50:fc:10: 7d:5f:d5:2d:0f:65:7f:dd:cb:20:96:a4:85:79:f0: 4d:65:7d:37:15:c5:d4:df:e2:94:95:c9:ee:0a:05: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:82:B3:C1:2D:15:CD:76:95:CB:78:69:0C:0B:50:0C:FD:6C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b29569c3-4a61-3727-95c7-4d8bbaf1be6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:64:06:6f:0c:51:d8:f7:0b:22:fc:26:73:fa:d3:21:5b:36: 73:ea:dc:4b:bc:e1:7a:4c:76:c7:c1:97:d7:c3:45:d6:6e:79: ca:20:c9:9d:c3:0d:33:39:e0:80:33:78:ff:bb:9e:b5:ea:44: 59:6f:77:9e:8d:ab:04:75:2e:90:fa:4e:d1:94:20:f7:3c:21: 9f:55:ec:fa:e4:da:e6:1e:37:80:1b:4c:38:83:3e:34:37:95: 88:9d:dd:3a:86:82:a1:9e:a8:53:d2:0f:4b:c9:04:b0:ad:c6: 86:72:30:45:fd:a9:9a:de:e2:d2:34:30:fc:de:26:22:40:75: 2a:22:6c:e9:c1:97:37:18:fb:18:c6:9b:61:71:d9:f6:1c:95: 60:f0:dd:2d:c0:77:c4:3c:5a:64:be:ac:a3:3a:a8:a7:e6:d9: 67:1d:d3:1c:f4:cd:cb:57:80:03:fa:01:91:48:36:64:d6:ab: d5:02:2d:84:0d:1b:c8:c5:ab:ef:a4:d7:cb:ff:e3:fc:fa:84: cd:33:bd:20:ad:59:cd:dc:57:d4:1d:47:ae:82:91:2c:70:63: 4b:bc:42:18:04:5e:e6:61:f3:2b:07:6e:5b:7a:49:19:56:77: b4:da:8e:12:f8:e7:dd:b5:85:ae:5d:ae:6f:d7:13:78:a1:fc: ab:80:75:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/qXmsQkBpHxO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk YWY5ZjI2MmYtYzhlYS00NmZmLWI0OWYtMTlhMTZjMTFkNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra+aa7DP/IIzetiYnZMbofyEMpX9qs6BqaBx m5yL6wgcyboerPqbeBE4HVPgSNRfbltDMwnfzdmRF4yZQvOPvYv//mYr9XXXYvyo CmTpQYf+yBbEiUsbytUB4bZtmo2sq3PgDBolwzCcb2ynEAHKCylXXKs+TX/vwKTX 8K78d4hPT3jkzYw6kK+xwjN+6bM8yc47yB4tv+IxSRv8ulY7QpkBNPxmU23g79rL Mz2EkEQPi2igq8M1SKadVjzpvp+7z4BLWyrexUTxJ8VIoSB2YsdyhD6XRSuOra1i oLRQ/BB9X9UtD2V/3csglqSFefBNZX03FcXU3+KUlcnuCgVN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxPgrPBLRXNdpXLeGkMC1AM/WzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjI5NTY5YzMtNGE2MS0z NzI3LTk1YzctNGQ4YmJhZjFiZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClkBm8MUdj3CyL8JnP60yFbNnPq3Eu84XpMdsfBl9fDRdZuecogyZ3D DTM54IAzeP+7nrXqRFlvd56NqwR1LpD6TtGUIPc8IZ9V7Prk2uYeN4AbTDiDPjQ3 lYid3TqGgqGeqFPSD0vJBLCtxoZyMEX9qZre4tI0MPzeJiJAdSoibOnBlzcY+xjG m2Fx2fYclWDw3S3Ad8Q8WmS+rKM6qKfm2Wcd0xz0zctXgAP6AZFINmTWq9UCLYQN G8jFq++k18v/4/z6hM0zvSCtWc3cV9QdR66CkSxwY0u8QhgEXuZh8ysHblt6SRlW d7TajhL45921ha5drm/XE3ih/KuAdek= -----END CERTIFICATE-----Generated at Sat Apr 5 07:41:34 2025 by rpki-client