$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa File: c3e3b8c0-be07-3843-b18d-6586f47d2704.roa (raw, json) Hash identifier: ruzx+mjZLZFsUFAD4JKheAYKJgbXp4/DU+3YNucuFP0= Subject key identifier: 40:59:14:4C:21:84:DF:6C:40:A8:77:E1:7C:89:3F:0F:A9:CF:03:4F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C0630BCC87CCA382CCD80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:06:30:bc:c8:7c:ca:38:2c:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=8ead9347-8870-4632-8e0e-9b3f010aeb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:cd:34:a8:83:15:9e:88:f7:dd:b8:e2:47: a7:1b:7c:14:5e:cf:68:97:a0:8b:2c:6e:5c:8d:2a: 63:5c:d0:d1:e4:69:88:f6:1a:e2:9e:ae:18:d0:55: ec:54:b6:a6:83:ba:94:f9:06:0f:6f:25:c1:59:30: b4:78:71:22:c3:a5:85:aa:5c:76:74:35:b5:48:90: a3:c3:76:f4:48:29:54:be:8d:d4:ce:62:9e:d3:46: 40:b3:22:b5:ae:62:37:40:3d:e5:10:6d:37:7a:3c: c2:09:90:d2:de:f6:64:72:40:be:07:3f:32:26:fb: b4:61:4d:b6:bb:0a:61:05:00:4b:00:93:54:b1:89: be:d5:a3:0d:2c:18:3d:ac:fa:f0:3a:46:e9:0a:19: 2f:c7:02:dd:2d:b6:6b:48:37:dc:28:51:c2:dc:7c: 1a:53:0c:ac:5f:e4:e0:2b:78:69:ce:64:e4:7a:79: ed:fa:dc:75:62:0b:a7:0c:f3:a4:00:ca:8e:a7:53: 92:1e:85:85:75:27:af:fa:f5:29:9e:4d:d1:67:fc: 49:0c:15:05:36:ee:74:77:b3:e4:93:d6:bc:33:77: a5:d4:1b:5f:ab:63:f4:a2:ab:b0:6e:dc:b0:b1:aa: 1c:7a:6c:e4:62:bf:04:f2:da:95:07:81:1c:57:61: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:59:14:4C:21:84:DF:6C:40:A8:77:E1:7C:89:3F:0F:A9:CF:03:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e3b8c0-be07-3843-b18d-6586f47d2704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3b:e0:9d:23:be:9c:79:95:0f:ff:67:3b:5d:1b:01:a1:5e: 39:a5:40:57:3e:61:f3:b5:58:41:da:1a:ba:a7:70:35:7e:1a: 24:89:e7:d1:e2:21:c2:d6:18:5f:55:0c:f5:05:02:6f:db:ac: 7d:b0:70:b0:b3:b7:9c:a7:58:db:59:d2:cb:ea:a2:94:32:d9: 4f:b6:04:3d:aa:80:8e:f4:66:94:42:ad:d7:80:10:d9:e7:10: 55:c3:4a:68:49:90:23:fc:e6:6b:8b:71:ec:41:eb:c0:83:17: 83:3a:7a:fc:95:b7:2a:9e:49:ce:8d:07:c8:30:ff:06:ba:96: 65:51:d7:ac:46:0b:d4:f6:33:8f:97:31:f5:ea:e8:ea:bc:c2: d9:16:67:fc:36:c1:e6:bb:1d:5a:d9:6c:02:56:90:84:14:46: fd:1a:45:81:35:c2:c3:40:36:5d:29:52:fd:43:4b:78:67:ea: 2e:25:6e:a6:b5:67:e7:3a:cd:59:b7:82:f6:fe:ba:8a:71:bc: 62:98:91:c7:9c:46:22:f1:56:52:cf:ef:64:e8:d8:36:02:1f: cb:c3:be:de:3f:ad:09:bc:64:34:59:66:27:92:d6:ef:d5:e2: 95:63:4c:b6:5c:45:29:17:75:6d:72:ab:ec:95:68:6c:e9:50: 02:4a:4b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAYwvMh8yjgszYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk OGVhZDkzNDctODg3MC00NjMyLThlMGUtOWIzZjAxMGFlYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aHNNKiDFZ6I99244kenG3wUXs9ol6CLLG5c jSpjXNDR5GmI9hrinq4Y0FXsVLamg7qU+QYPbyXBWTC0eHEiw6WFqlx2dDW1SJCj w3b0SClUvo3UzmKe00ZAsyK1rmI3QD3lEG03ejzCCZDS3vZkckC+Bz8yJvu0YU22 uwphBQBLAJNUsYm+1aMNLBg9rPrwOkbpChkvxwLdLbZrSDfcKFHC3HwaUwysX+Tg K3hpzmTkennt+tx1YgunDPOkAMqOp1OSHoWFdSev+vUpnk3RZ/xJDBUFNu50d7Pk k9a8M3el1Btfq2P0oquwbtywsaocemzkYr8E8tqVB4EcV2H0EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBZFEwhhN9sQKh34XyJPw+pzwNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNlM2I4YzAtYmUwNy0z ODQzLWIxOGQtNjU4NmY0N2QyNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE74J0jvpx5lQ//ZztdGwGhXjmlQFc+YfO1WEHaGrqncDV+GiSJ59Hi IcLWGF9VDPUFAm/brH2wcLCzt5ynWNtZ0svqopQy2U+2BD2qgI70ZpRCrdeAENnn EFXDSmhJkCP85muLcexB68CDF4M6evyVtyqeSc6NB8gw/wa6lmVR16xGC9T2M4+X MfXq6Oq8wtkWZ/w2wea7HVrZbAJWkIQURv0aRYE1wsNANl0pUv1DS3hn6i4lbqa1 Z+c6zVm3gvb+uopxvGKYkcecRiLxVlLP72To2DYCH8vDvt4/rQm8ZDRZZieS1u/V 4pVjTLZcRSkXdW1yq+yVaGzpUAJKS/M= -----END CERTIFICATE-----Generated at Sat Apr 5 06:39:58 2025 by rpki-client