$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c166eda4-c16d-36dd-a409-e770bbd739ed.roa File: c166eda4-c16d-36dd-a409-e770bbd739ed.roa (raw, json) Hash identifier: gow2t0TmjuizUcEf4pi6GMZaantIdA+UYI8otO5JBPE= Subject key identifier: 21:68:1D:72:32:6A:5A:29:D8:B6:B9:08:D1:7A:7D:B4:53:11:92:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C035C1BF23A7A2124F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c166eda4-c16d-36dd-a409-e770bbd739ed.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 172.64.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c0:35:c1:bf:23:a7:a2:12:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=709a626d-84bb-4776-b017-daf0221f7981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b4:22:c7:40:ca:93:0f:61:9d:6e:a1:8d:82: fd:7a:20:ed:15:f5:e2:61:c0:e0:74:e5:a8:f0:86: 4f:97:d9:ef:58:ec:f1:5f:dd:c5:85:6b:6c:56:54: 62:18:1f:dd:85:ab:ed:c9:9a:39:48:40:d7:34:a9: b5:e6:31:e4:7b:a1:73:ca:0e:68:67:9d:c9:22:bb: 03:d7:e8:d7:d0:f2:43:60:50:7b:ed:f9:6d:b3:d8: 75:a4:bd:c1:f7:19:7c:03:f8:4a:8c:ca:04:29:33: ee:b6:37:d2:f0:1d:5a:7e:2c:22:be:b7:0d:ef:99: eb:29:f2:a6:d1:4e:45:f5:bb:6e:be:59:c6:c1:8b: 07:c2:f2:96:11:b4:a0:49:43:4c:28:07:fc:6b:e6: ff:46:21:76:99:b2:b0:32:1f:93:da:b2:60:71:27: e4:dd:3a:fe:f8:7a:a0:52:a5:37:e6:d3:e3:7e:84: fa:1c:4a:4b:80:1c:61:45:ad:52:cf:1a:9f:33:ad: fc:e6:f9:69:0a:e0:43:c3:e5:ec:dd:53:b9:76:c8: d5:ec:b4:96:be:0f:0f:0a:cb:dd:64:93:d8:0d:f8: 90:ab:fe:3c:d5:7b:81:c7:ca:81:f6:03:8c:f2:67: 8a:a8:9a:57:c3:37:2d:30:30:71:ae:b8:28:a2:37: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:68:1D:72:32:6A:5A:29:D8:B6:B9:08:D1:7A:7D:B4:53:11:92:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c166eda4-c16d-36dd-a409-e770bbd739ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ad:df:93:c8:82:86:25:c4:92:be:3b:ef:52:1b:10:06:3d: 3d:13:57:19:59:a5:a1:00:80:34:f3:8e:21:a8:ea:82:1c:8b: cd:a1:92:36:01:40:93:7c:c3:8b:5c:3e:b7:76:3b:95:3f:20: 88:da:76:fb:00:dc:e6:be:ba:7c:52:8a:20:50:6d:1f:a2:dd: d1:a8:26:3c:f5:9b:d3:76:b1:49:b8:66:79:b9:8d:f1:6a:8b: f4:63:8b:84:22:58:4f:5f:dc:0e:ea:07:67:6b:7d:3b:55:0a: 6d:1a:4c:8f:10:4a:52:1b:f3:9b:1e:6b:c7:40:3b:b8:89:e5: c5:ee:4d:92:d2:b7:fc:63:08:71:5d:3b:80:c5:c4:c3:be:7c: 9a:1e:80:b8:08:5e:a9:85:ff:0e:61:80:67:5b:eb:91:80:89: 3e:79:20:b0:9f:23:cd:8d:55:2d:49:5b:95:05:b1:92:e6:a3: 82:0b:e2:22:99:09:01:9c:13:6f:fd:63:46:8e:77:ab:44:22: ce:75:0e:b3:ae:f7:51:40:0c:93:35:8a:91:b8:56:16:06:e3: 16:3a:cd:63:e2:9f:d2:cf:2f:00:db:0a:77:a0:34:83:06:6e: a9:1f:66:3f:3e:95:42:cd:f4:44:f9:09:14:6a:7a:18:31:6b: 85:ed:3f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsA1wb8jp6IST4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NzA5YTYyNmQtODRiYi00Nzc2LWIwMTctZGFmMDIyMWY3OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrQix0DKkw9hnW6hjYL9eiDtFfXiYcDgdOWo 8IZPl9nvWOzxX93FhWtsVlRiGB/dhavtyZo5SEDXNKm15jHke6Fzyg5oZ53JIrsD 1+jX0PJDYFB77flts9h1pL3B9xl8A/hKjMoEKTPutjfS8B1afiwivrcN75nrKfKm 0U5F9btuvlnGwYsHwvKWEbSgSUNMKAf8a+b/RiF2mbKwMh+T2rJgcSfk3Tr++Hqg UqU35tPjfoT6HEpLgBxhRa1SzxqfM6385vlpCuBDw+Xs3VO5dsjV7LSWvg8PCsvd ZJPYDfiQq/481XuBx8qB9gOM8meKqJpXwzctMDBxrrgoojfEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFoHXIyalop2La5CNF6fbRTEZIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzE2NmVkYTQtYzE2ZC0z NmRkLWE0MDktZTc3MGJiZDczOWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCt35PIgoYlxJK+O+9SGxAGPT0TVxlZpaEAgDTzjiGo6oIci82hkjYB QJN8w4tcPrd2O5U/IIjadvsA3Oa+unxSiiBQbR+i3dGoJjz1m9N2sUm4Znm5jfFq i/Rji4QiWE9f3A7qB2drfTtVCm0aTI8QSlIb85sea8dAO7iJ5cXuTZLSt/xjCHFd O4DFxMO+fJoegLgIXqmF/w5hgGdb65GAiT55ILCfI82NVS1JW5UFsZLmo4IL4iKZ CQGcE2/9Y0aOd6tEIs51DrOu91FADJM1ipG4VhYG4xY6zWPin9LPLwDbCnegNIMG bqkfZj8+lULN9ET5CRRqehgxa4XtP3U= -----END CERTIFICATE-----Generated at Wed Apr 9 12:53:42 2025 by rpki-client