$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bde7a591-2ce6-3450-9a41-6d29d1aa744d.roa File: bde7a591-2ce6-3450-9a41-6d29d1aa744d.roa (raw, json) Hash identifier: wRKP87hwnx9ZM4riDBeBwOUbEQlH9z7yIin2HUqaYyg= Subject key identifier: 85:8E:79:2D:1A:56:93:98:7F:3C:72:C2:B2:2B:A8:F8:B9:8C:FC:60 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BFFBE8143857DA4BC0B20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bde7a591-2ce6-3450-9a41-6d29d1aa744d.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:ff:be:81:43:85:7d:a4:bc:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=5c3ba8aa-57ce-465d-9ff3-4eca761b5bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:ea:66:97:2b:39:db:ad:d9:3c:cc:0c:49: 3c:60:92:26:68:eb:5c:e7:cb:a7:62:aa:06:b8:38: 24:49:d8:cb:30:c1:16:b9:c6:34:11:44:18:53:6a: 08:d7:b5:6b:db:20:16:c0:97:7f:0b:80:60:c3:08: 50:a5:f4:99:ad:78:5c:4d:ee:32:0f:1a:d4:68:be: 89:b3:c3:74:c6:ce:14:d9:49:6b:96:bd:d8:1b:d3: 01:67:59:aa:df:8e:bf:15:df:e9:4f:8e:f0:5e:63: 66:be:63:22:20:c0:06:9b:46:10:71:5f:53:25:9e: 30:50:a8:b2:be:e2:4a:6f:ed:ef:7f:ee:bd:1e:47: 85:99:9c:22:dc:12:c8:71:20:fd:da:05:e0:b1:41: 74:a1:6a:07:41:0e:24:39:04:db:27:a4:8a:ed:0c: b4:ad:1e:82:9b:49:74:27:85:82:da:0c:ba:12:8b: d6:7a:02:fc:2d:78:d7:9c:d8:ab:64:b3:7a:fa:a8: 5c:73:26:92:bd:a2:d1:f9:6f:c0:eb:ce:f8:db:00: 5b:b8:58:12:48:aa:8e:6d:a2:0f:24:52:47:28:6a: 52:b4:9c:85:a9:5c:b1:95:91:1f:55:4e:e8:5f:d7: 7f:6f:76:14:73:18:af:f5:de:03:57:a1:5e:ed:a8: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8E:79:2D:1A:56:93:98:7F:3C:72:C2:B2:2B:A8:F8:B9:8C:FC:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bde7a591-2ce6-3450-9a41-6d29d1aa744d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fb:42:2e:2d:1b:95:27:90:1d:1c:12:3c:68:04:7d:8f:df: 03:89:85:fd:bb:fc:79:a0:71:ec:5b:9a:34:ba:88:67:62:fb: a8:61:d3:d4:c9:ce:fe:c4:03:7d:9d:13:53:08:98:a1:c2:a0: 84:25:e1:2a:d3:af:0e:ee:80:18:f0:99:25:3d:59:96:ea:3c: 0b:90:21:85:54:10:45:6a:f4:04:04:12:16:f0:ff:ae:eb:4e: 1e:a7:c2:85:35:d9:08:ee:30:b9:0a:c3:ae:32:63:ed:4a:fc: cf:4f:6f:83:6b:7a:55:fa:a2:4e:c8:80:f9:f1:74:e0:7f:f4: df:56:28:3b:91:58:77:09:af:da:83:fb:76:39:09:a6:e9:2d: 66:56:8e:93:41:66:f8:09:74:1e:0e:d3:dd:a5:28:b4:35:10: 79:50:4d:49:80:c2:25:73:fb:9d:0b:84:b8:c6:37:b8:71:d7: 59:71:09:5f:23:e8:6d:79:d1:db:1f:18:0e:cb:e6:fe:4a:fd: aa:91:50:2a:6f:ed:91:d3:3e:a4:f7:9c:42:fe:d7:ea:d8:43: 96:7b:2a:a0:e9:bc:f3:c1:60:85:a2:f2:f4:fb:a3:69:b7:f5: 8a:79:60:45:00:d7:d1:56:96:80:c5:86:90:3b:a8:71:96:40: 00:69:a3:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/++gUOFfaS8CyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NWMzYmE4YWEtNTdjZS00NjVkLTlmZjMtNGVjYTc2MWI1YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZfqZpcrOdut2TzMDEk8YJImaOtc58unYqoG uDgkSdjLMMEWucY0EUQYU2oI17Vr2yAWwJd/C4BgwwhQpfSZrXhcTe4yDxrUaL6J s8N0xs4U2Ulrlr3YG9MBZ1mq346/Fd/pT47wXmNmvmMiIMAGm0YQcV9TJZ4wUKiy vuJKb+3vf+69HkeFmZwi3BLIcSD92gXgsUF0oWoHQQ4kOQTbJ6SK7Qy0rR6Cm0l0 J4WC2gy6EovWegL8LXjXnNirZLN6+qhccyaSvaLR+W/A68742wBbuFgSSKqObaIP JFJHKGpStJyFqVyxlZEfVU7oX9d/b3YUcxiv9d4DV6Fe7aiyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWOeS0aVpOYfzxywrIrqPi5jPxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRlN2E1OTEtMmNlNi0z NDUwLTlhNDEtNmQyOWQxYWE3NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF77Qi4tG5UnkB0cEjxoBH2P3wOJhf27/HmgcexbmjS6iGdi+6hh09TJ zv7EA32dE1MImKHCoIQl4SrTrw7ugBjwmSU9WZbqPAuQIYVUEEVq9AQEEhbw/67r Th6nwoU12QjuMLkKw64yY+1K/M9Pb4NrelX6ok7IgPnxdOB/9N9WKDuRWHcJr9qD +3Y5CabpLWZWjpNBZvgJdB4O092lKLQ1EHlQTUmAwiVz+50LhLjGN7hx11lxCV8j 6G150dsfGA7L5v5K/aqRUCpv7ZHTPqT3nEL+1+rYQ5Z7KqDpvPPBYIWi8vT7o2m3 9Yp5YEUA19FWloDFhpA7qHGWQABpo4w= -----END CERTIFICATE-----Generated at Sat Apr 12 18:39:30 2025 by rpki-client