$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb40c034-6e82-324d-8e0c-c847fd26a20d.roa File: cb40c034-6e82-324d-8e0c-c847fd26a20d.roa (raw, json) Hash identifier: 7T/gTubLlydi1YX1TbV9Gy4flrzRZOlnI71FCHhLqAY= Subject key identifier: 25:09:B9:DA:6C:00:9E:F2:7D:D4:A9:61:FE:AF:D4:FD:1A:C1:B0:F7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328583BF569686CF188F6BB29FDE660 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb40c034-6e82-324d-8e0c-c847fd26a20d.roa Signing time: Wed 17 Nov 2021 05:00:00 +0000 ROA not before: Wed 17 Nov 2021 05:00:00 +0000 ROA not after: Sun 19 Dec 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.70.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3b:f5:69:68:6c:f1:88:f6:bb:29:fd:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 17 05:00:00 2021 GMT Not After : Dec 19 05:00:00 2027 GMT Subject: CN=91c10886-0707-4f92-8408-5fd07b6cff6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:49:cd:d5:bf:d4:7b:29:ff:96:39:0c:6d: 5c:54:1d:e8:77:b1:fe:c1:ed:c9:b6:a5:a0:ce:42: 1c:bf:ae:94:f1:a9:cc:50:ac:70:5d:bb:ac:b5:e9: 6a:51:df:58:44:39:d9:f3:3f:72:4c:c1:39:e5:4f: bc:2a:3b:5e:bf:8f:d8:2b:0d:eb:c4:dd:8b:67:36: e5:44:f2:dc:8e:88:ee:30:89:97:f9:10:5b:14:f5: 57:89:5f:91:19:af:ff:96:20:0e:86:d5:ba:0d:69: cd:b6:e4:6f:ce:1f:1b:3a:0f:83:1e:e4:04:ab:88: c7:a4:7b:95:ed:08:d5:cc:94:48:1e:90:5c:6e:d8: c3:cb:74:08:e7:4f:1f:18:2c:d3:c0:ff:59:b1:f2: 05:d9:b5:7c:7e:d6:ca:9d:a2:b2:57:64:d5:d7:6e: 9e:30:ad:b9:59:a4:5d:1e:c3:9f:28:4a:a4:1b:87: 99:f8:a5:58:48:92:ea:87:89:27:d1:e7:ef:3f:b9: c6:a8:46:8a:c9:6a:83:44:16:9a:10:5f:8b:b1:67: 4b:ad:77:c0:22:6e:1e:e3:87:96:c0:e9:5d:ec:03: a3:80:d3:43:90:e1:26:17:46:0a:1f:ad:6e:38:e6: a5:a9:71:3c:9b:20:90:50:e9:b1:a3:41:7e:9b:e0: 66:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:09:B9:DA:6C:00:9E:F2:7D:D4:A9:61:FE:AF:D4:FD:1A:C1:B0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb40c034-6e82-324d-8e0c-c847fd26a20d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f1:4d:18:9a:75:80:6c:22:9f:1e:cb:19:ed:48:a3:d8:0f: 39:b4:85:5d:28:b3:fa:21:bd:67:21:4e:d9:e6:a0:5b:be:77: 7a:f9:ed:0e:84:a9:d6:27:f4:bc:0e:fb:1b:21:4d:1b:00:9c: 53:0e:ac:a8:76:04:3b:44:1a:1c:c1:2a:69:04:fa:8f:7f:57: ef:f3:e1:7c:22:f5:3b:bc:ac:ed:9c:04:c4:15:23:af:77:e1: 13:07:2c:2a:bf:69:b2:aa:48:8f:0d:ee:78:1d:95:f6:09:54: f7:01:6a:c5:98:99:42:34:f4:07:59:1b:2b:88:cc:6b:07:a8: 27:33:79:16:04:b0:fc:be:1d:c6:1c:f2:de:25:b4:f3:c6:7c: 77:47:56:80:a2:71:10:cf:86:df:82:cf:4a:5e:c0:21:3b:03: 7b:9a:f7:29:1d:dc:58:02:a7:e4:0e:18:e4:c3:c0:26:65:d1: d4:63:60:8d:e1:62:5b:2a:98:3a:9a:2e:7d:e8:e5:96:b6:43: a6:29:51:6b:61:d2:71:93:73:1f:3d:44:de:00:18:90:01:89: 7e:f9:e3:57:4b:73:6d:94:9b:ed:c2:c9:8f:01:1f:4b:c7:57: cc:2f:96:91:db:06:31:08:a8:b7:70:39:a4:b4:fb:7f:ad:46: 63:23:5f:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv1aWhs8Yj2uyn95mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIxMTExNzA1MDAwMFoXDTI3MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk OTFjMTA4ODYtMDcwNy00ZjkyLTg0MDgtNWZkMDdiNmNmZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgpJzdW/1Hsp/5Y5DG1cVB3od7H+we3JtqWg zkIcv66U8anMUKxwXbustelqUd9YRDnZ8z9yTME55U+8Kjtev4/YKw3rxN2LZzbl RPLcjojuMImX+RBbFPVXiV+RGa//liAOhtW6DWnNtuRvzh8bOg+DHuQEq4jHpHuV 7QjVzJRIHpBcbtjDy3QI508fGCzTwP9ZsfIF2bV8ftbKnaKyV2TV126eMK25WaRd HsOfKEqkG4eZ+KVYSJLqh4kn0efvP7nGqEaKyWqDRBaaEF+LsWdLrXfAIm4e44eW wOld7AOjgNNDkOEmF0YKH61uOOalqXE8myCQUOmxo0F+m+BmRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUJudpsAJ7yfdSpYf6v1P0awbD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2I0MGMwMzQtNmU4Mi0z MjRkLThlMGMtYzg0N2ZkMjZhMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzxTRiadYBsIp8eyxntSKPYDzm0hV0os/ohvWchTtnmoFu+d3r57Q6E qdYn9LwO+xshTRsAnFMOrKh2BDtEGhzBKmkE+o9/V+/z4Xwi9Tu8rO2cBMQVI693 4RMHLCq/abKqSI8N7ngdlfYJVPcBasWYmUI09AdZGyuIzGsHqCczeRYEsPy+HcYc 8t4ltPPGfHdHVoCicRDPht+Cz0pewCE7A3ua9ykd3FgCp+QOGOTDwCZl0dRjYI3h YlsqmDqaLn3o5Za2Q6YpUWth0nGTcx89RN4AGJABiX7541dLc22Um+3CyY8BH0vH V8wvlpHbBjEIqLdwOaS0+3+tRmMjX4w= -----END CERTIFICATE-----Generated at Fri Mar 14 08:45:05 2025 by rpki-client