$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b29bd744-b6d4-3da3-94a5-41125ab214ef.roa File: b29bd744-b6d4-3da3-94a5-41125ab214ef.roa (raw, json) Hash identifier: +nyRBb6x6PMSdQ9BGDXvT7tPye91TrGTxYrbQU8G67E= Subject key identifier: 98:F6:46:A5:10:10:C2:6B:0E:BD:BB:D6:61:03:5F:7D:51:A6:78:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69C3957AE71119F4AD300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b29bd744-b6d4-3da3-94a5-41125ab214ef.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9c:39:57:ae:71:11:9f:4a:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=5efa133e-15b4-4c98-b5d0-386b4976cd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:92:21:ed:8d:c8:67:8e:14:16:c2:d2:b3:ec: 51:49:fc:29:8f:4b:bf:8d:6f:1a:f7:46:de:26:78: 38:b8:02:c3:6f:da:2d:80:0c:a9:45:33:a0:9a:0e: d9:16:00:95:45:73:56:7f:c7:ba:e5:b5:01:ef:e7: eb:a6:f8:21:d2:bd:5d:b7:4e:18:b3:03:a0:d2:4f: e5:f7:a9:e2:ce:1f:e5:59:c6:ca:f9:17:f6:4b:65: 65:b1:58:91:6d:9f:1e:41:58:0c:c6:9c:bc:37:89: 08:4e:87:27:fc:11:ff:5c:3f:a6:5a:1d:59:40:a5: f4:b0:d8:8e:2b:3a:24:e5:52:c8:be:be:e4:5e:d0: ac:7c:56:92:77:db:b9:25:9c:fd:93:cf:67:6a:c2: 41:26:89:3a:40:39:3d:a9:b3:e1:b8:27:9d:d7:20: 0d:c5:cd:e4:51:61:ac:02:0d:73:52:b7:b6:0b:2f: 2a:a6:7b:60:fd:41:ad:6c:6b:9c:7c:74:4d:1f:33: 4a:85:15:b2:e1:09:94:bd:43:cf:da:6e:53:77:95: d8:f8:64:24:0c:21:27:e2:51:9a:8b:ad:b9:ac:2e: 5d:6c:3c:d2:71:c6:d1:25:2e:fe:42:25:59:35:06: ae:e8:39:d9:1f:e6:b7:91:d4:8d:a0:08:35:31:fa: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F6:46:A5:10:10:C2:6B:0E:BD:BB:D6:61:03:5F:7D:51:A6:78:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b29bd744-b6d4-3da3-94a5-41125ab214ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:89:68:a1:12:3d:70:b1:dc:25:d7:ee:3b:c8:13:7c:39:dd: a2:0d:72:77:95:10:f1:6d:0d:b5:77:02:92:25:90:ad:b2:f9: 73:25:62:d9:dd:24:17:d0:88:bb:e6:78:c7:11:ae:44:37:b8: 55:01:81:07:35:64:71:ab:53:74:82:6b:4d:3d:e6:7e:81:cb: 61:91:3e:e8:54:11:88:07:08:50:93:9b:fa:f5:62:5a:1f:d5: 1c:12:de:07:05:70:d7:2c:c8:a5:c2:97:29:67:04:b2:cc:eb: 4c:14:20:d6:2c:9d:b9:19:d9:40:21:25:e8:c1:30:89:f4:62: fe:7d:b5:ca:bf:7c:ff:4f:2a:d2:09:19:92:08:d3:22:6a:bc: 96:15:d5:8c:fc:d5:44:53:dc:01:cd:d0:69:0d:b9:94:a4:9a: 28:8c:9e:32:ca:be:92:75:b8:5d:52:62:3c:63:f2:69:18:ee: 11:2d:7e:b2:02:16:05:06:6a:dc:23:44:59:de:f0:0e:d6:1b: c2:f1:20:e4:21:6b:a9:b7:18:4e:d0:a6:e6:cb:14:43:75:03: da:d8:6d:86:e2:bd:84:f5:f4:b1:73:4e:1e:77:c2:c1:c2:95: a2:7a:72:2d:86:e8:75:6d:f5:d0:b3:5e:1b:31:51:9f:0c:46: d4:e8:5e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pw5V65xEZ9K0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk NWVmYTEzM2UtMTViNC00Yzk4LWI1ZDAtMzg2YjQ5NzZjZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJIh7Y3IZ44UFsLSs+xRSfwpj0u/jW8a90be Jng4uALDb9otgAypRTOgmg7ZFgCVRXNWf8e65bUB7+frpvgh0r1dt04YswOg0k/l 96nizh/lWcbK+Rf2S2VlsViRbZ8eQVgMxpy8N4kITocn/BH/XD+mWh1ZQKX0sNiO Kzok5VLIvr7kXtCsfFaSd9u5JZz9k89nasJBJok6QDk9qbPhuCed1yANxc3kUWGs Ag1zUre2Cy8qpntg/UGtbGucfHRNHzNKhRWy4QmUvUPP2m5Td5XY+GQkDCEn4lGa i625rC5dbDzSccbRJS7+QiVZNQau6DnZH+a3kdSNoAg1MfpmpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJj2RqUQEMJrDr271mEDX31RpnigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjI5YmQ3NDQtYjZkNC0z ZGEzLTk0YTUtNDExMjVhYjIxNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiJaKESPXCx3CXX7jvIE3w53aINcneVEPFtDbV3ApIlkK2y+XMlYtnd JBfQiLvmeMcRrkQ3uFUBgQc1ZHGrU3SCa0095n6By2GRPuhUEYgHCFCTm/r1Ylof 1RwS3gcFcNcsyKXClylnBLLM60wUINYsnbkZ2UAhJejBMIn0Yv59tcq/fP9PKtIJ GZII0yJqvJYV1Yz81URT3AHN0GkNuZSkmiiMnjLKvpJ1uF1SYjxj8mkY7hEtfrIC FgUGatwjRFne8A7WG8LxIOQha6m3GE7QpubLFEN1A9rYbYbivYT19LFzTh53wsHC laJ6ci2G6HVt9dCzXhsxUZ8MRtToXsA= -----END CERTIFICATE-----Generated at Sat Apr 5 07:54:30 2025 by rpki-client