$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c92bb610-ad00-3fe7-a886-3bdc5129605d.roa File: c92bb610-ad00-3fe7-a886-3bdc5129605d.roa (raw, json) Hash identifier: mCTrTYC72GHB0HY61NUMorXVW/QTz9hCmEC+tt76ctw= Subject key identifier: BE:A7:B9:72:0A:10:24:E2:53:CD:62:57:40:95:80:3E:D2:66:5F:DF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818DBDCD58AABB60F33600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c92bb610-ad00-3fe7-a886-3bdc5129605d.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.66.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8d:bd:cd:58:aa:bb:60:f3:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=c3192cf5-0e14-420e-8281-7aa05bfb0d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:4b:7e:ca:ae:75:95:52:34:38:29:db:ad: ac:2a:14:70:19:b1:1b:d3:3e:cb:2a:f6:97:32:e8: f4:be:60:64:46:e7:c7:25:31:a9:84:e3:11:ce:3f: fe:c8:95:7c:80:2d:90:81:22:d1:7e:c5:30:70:d8: 74:5e:68:25:c5:c4:da:8d:04:26:23:9e:21:bd:16: 04:4b:a8:79:0a:87:2b:a2:f8:42:64:8b:f3:6f:26: df:64:cd:f7:4a:dd:91:0e:86:f2:73:7d:24:58:16: 54:e6:90:e6:95:dc:61:42:bb:19:d4:c1:95:5b:18: 56:98:f0:7f:70:e0:75:77:6f:58:82:93:0a:ce:b2: 5f:7b:a5:2d:48:c6:eb:22:6a:55:55:29:3d:a1:31: 7d:43:f9:fe:ff:5c:00:44:07:22:1d:7a:53:ed:af: 17:6e:75:78:8c:41:16:b2:92:58:9c:db:83:fc:49: 87:a3:eb:9f:85:fc:f7:97:75:e2:8f:62:6c:70:83: 91:13:5d:8f:1c:94:e1:b5:b5:03:97:ad:c7:3e:fb: 50:86:fd:d9:27:a1:8d:16:10:7a:00:1d:5e:a5:cc: 15:c4:c2:f5:7e:26:43:41:85:7c:59:3a:73:11:c8: 81:ca:57:e8:5a:fc:18:04:96:2d:10:a5:02:bc:c7: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A7:B9:72:0A:10:24:E2:53:CD:62:57:40:95:80:3E:D2:66:5F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c92bb610-ad00-3fe7-a886-3bdc5129605d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.66.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:00:76:bb:92:8a:3d:8b:81:27:a7:4e:d7:99:14:42:5b:89: aa:1e:37:b0:48:b8:ab:f6:b6:ce:ca:b9:28:ec:e5:9d:27:09: 01:a2:31:a0:a6:03:0a:b4:bb:92:69:18:b9:8f:0f:5f:b1:28: 53:e5:30:30:40:b7:8c:eb:55:4a:68:a1:a7:9f:f5:1d:92:5a: c9:6d:f7:7f:55:f2:8e:aa:a3:19:ea:e2:8c:e9:4e:00:a8:a4: 67:f8:b3:33:ef:9b:c3:42:b5:d6:7b:71:9f:08:ce:21:fa:f1: 62:66:f3:2c:be:97:2f:af:86:d6:c7:90:be:79:fc:fa:5c:a4: a6:b8:c8:bc:7e:7d:f7:97:ce:a0:20:79:6e:12:70:43:ad:91: f3:ce:1b:b1:16:e4:fa:0d:d8:27:d8:51:43:8f:7b:1a:64:c1: 49:a0:8b:d3:41:20:ff:d9:61:a5:34:a4:86:cd:22:42:ff:1c: 71:04:87:49:97:0d:2a:84:25:da:d2:56:00:22:3f:a7:a2:f8: 26:34:1e:db:ae:e8:78:73:42:4a:26:8b:4c:55:34:d5:bd:44: 40:11:4f:24:8b:5c:8b:62:47:90:c8:ec:94:8e:f7:62:1c:a1: 71:c9:d6:65:13:ae:07:8e:85:0e:73:a2:72:dc:38:18:cb:9c: 50:c8:76:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgY29zViqu2DzNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YzMxOTJjZjUtMGUxNC00MjBlLTgyODEtN2FhMDViZmIwZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLRLfsqudZVSNDgp262sKhRwGbEb0z7LKvaX Muj0vmBkRufHJTGphOMRzj/+yJV8gC2QgSLRfsUwcNh0XmglxcTajQQmI54hvRYE S6h5CocrovhCZIvzbybfZM33St2RDobyc30kWBZU5pDmldxhQrsZ1MGVWxhWmPB/ cOB1d29YgpMKzrJfe6UtSMbrImpVVSk9oTF9Q/n+/1wARAciHXpT7a8XbnV4jEEW spJYnNuD/EmHo+ufhfz3l3Xij2JscIORE12PHJThtbUDl63HPvtQhv3ZJ6GNFhB6 AB1epcwVxML1fiZDQYV8WTpzEciBylfoWvwYBJYtEKUCvMcBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6nuXIKECTiU81iV0CVgD7SZl/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzkyYmI2MTAtYWQwMC0z ZmU3LWE4ODYtM2JkYzUxMjk2MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrELQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQAdruSij2LgSenTteZFEJbiaoeN7BIuKv2ts7KuSjs5Z0nCQGiMaCm Awq0u5JpGLmPD1+xKFPlMDBAt4zrVUpooaef9R2SWslt939V8o6qoxnq4ozpTgCo pGf4szPvm8NCtdZ7cZ8IziH68WJm8yy+ly+vhtbHkL55/PpcpKa4yLx+ffeXzqAg eW4ScEOtkfPOG7EW5PoN2CfYUUOPexpkwUmgi9NBIP/ZYaU0pIbNIkL/HHEEh0mX DSqEJdrSVgAiP6ei+CY0Htuu6HhzQkomi0xVNNW9REARTySLXItiR5DI7JSO92Ic oXHJ1mUTrgeOhQ5zonLcOBjLnFDIdjw= -----END CERTIFICATE-----Generated at Sat Apr 5 09:59:36 2025 by rpki-client