$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc13973e-b895-31ab-a03b-1d14cbea8429.roa File: cc13973e-b895-31ab-a03b-1d14cbea8429.roa (raw, json) Hash identifier: rI7k2PGh4Lc305jGcbgyg+zwpJ03ozBridzxxpOOjxY= Subject key identifier: C0:6E:55:06:43:D6:90:A5:34:60:B4:8E:38:3C:06:5D:4C:0A:4E:B2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328576D51CC73C042CFC171CA1D8157 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc13973e-b895-31ab-a03b-1d14cbea8429.roa Signing time: Thu 30 Apr 2020 08:04:23 +0000 ROA not before: Thu 30 Apr 2020 04:00:00 +0000 ROA not after: Fri 05 Mar 2027 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:ca:1d:81:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 30 04:00:00 2020 GMT Not After : Mar 5 05:00:00 2027 GMT Subject: CN=66cbcc14-ad38-4ab6-96b3-4db9c4fa93f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:2d:ac:fb:05:8e:09:99:e5:9c:23:85:56: 3d:3d:f6:56:b9:f0:6f:b5:59:d3:d2:64:25:bd:3c: 3d:d4:00:74:e2:a6:74:08:d8:76:32:e9:9c:1a:5f: 99:13:34:2e:bd:fd:b8:2e:90:a9:2d:05:d6:34:d5: b8:d4:2d:ff:85:c4:09:cb:2b:30:c8:eb:c5:0e:33: 55:c6:69:15:88:a8:89:03:22:62:72:c9:cb:71:2d: 0f:a1:74:9f:3b:86:1e:29:56:f8:99:65:b1:b8:33: d3:7b:70:9e:6b:8b:19:38:78:4d:37:9c:be:93:34: ae:1e:1b:cf:ad:51:d1:81:63:eb:2c:03:37:95:59: f0:f6:8c:6b:e8:f3:97:c8:fb:6d:ad:e8:7a:99:3f: ea:c1:a5:f8:fb:01:e6:3f:13:8c:72:93:f3:99:ac: f8:00:00:b0:f4:6f:42:0f:96:71:e9:70:ae:99:0b: 70:13:92:c7:2a:51:55:8c:31:57:ba:87:d2:d7:0b: 93:c2:5d:5f:eb:8a:c2:f0:22:f9:18:c7:59:22:98: cf:95:ab:d7:04:f7:34:51:ae:20:f4:f8:2c:a9:7f: d2:92:c5:b4:06:1d:6a:01:fd:11:91:a2:0b:6e:68: b8:5b:be:29:02:a8:df:56:12:5c:2f:37:10:97:0f: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6E:55:06:43:D6:90:A5:34:60:B4:8E:38:3C:06:5D:4C:0A:4E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc13973e-b895-31ab-a03b-1d14cbea8429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d0:db:c9:d7:62:a5:77:ed:78:a2:63:94:87:65:80:d8:64: b6:62:f4:7f:08:b1:16:93:83:24:89:fb:8e:17:da:5d:5e:07: 0c:23:1a:78:f7:bf:80:6f:76:ab:71:33:c5:56:43:fa:10:6c: 35:e9:7c:d4:a0:2c:ed:9e:78:83:39:46:a7:9b:5c:f8:e4:7d: 31:19:6b:d3:f3:0a:13:5f:29:a0:85:ce:e9:c7:2a:97:d8:6b: b6:2c:8d:07:0a:4e:fa:f8:c7:4d:71:f3:3c:ed:ea:8e:92:b1: 77:01:61:99:b8:20:4e:d9:dd:01:fa:99:0c:9a:bf:f2:c6:d9: 4b:b4:ec:77:dc:f3:7b:1d:fa:58:22:ac:21:4f:01:a8:31:ea: 4c:73:ee:2b:d0:12:0e:cc:57:95:5b:e5:22:d9:28:cc:a1:12: d0:39:dd:02:5d:80:21:9d:59:08:d2:1c:04:84:86:47:ce:60: f3:f6:9c:6e:01:79:39:72:54:4a:f8:25:0d:9c:ff:96:56:ec: d8:1b:f8:6e:99:e8:c3:20:d2:77:ef:ac:6e:07:22:b2:48:1d: cf:e8:73:a7:40:29:d7:40:6b:d2:1b:0e:fa:36:27:63:1b:25: 81:8f:4f:09:04:9b:76:67:db:ea:39:6b:db:67:02:5a:6d:9c: f8:9f:24:e2 -----BEGIN CERTIFICATE----- MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BccodgVcwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGI4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFkMGZh ZTAeFw0yMDA0MzAwNDAwMDBaFw0yNzAzMDUwNTAwMDBaMC8xLTArBgNVBAMTJDY2 Y2JjYzE0LWFkMzgtNGFiNi05NmIzLTRkYjljNGZhOTNmODCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAK1rLaz7BY4JmeWcI4VWPT32Vrnwb7VZ09JkJb08 PdQAdOKmdAjYdjLpnBpfmRM0Lr39uC6QqS0F1jTVuNQt/4XECcsrMMjrxQ4zVcZp FYioiQMiYnLJy3EtD6F0nzuGHilW+Jllsbgz03twnmuLGTh4TTecvpM0rh4bz61R 0YFj6ywDN5VZ8PaMa+jzl8j7ba3oepk/6sGl+PsB5j8TjHKT85ms+AAAsPRvQg+W celwrpkLcBOSxypRVYwxV7qH0tcLk8JdX+uKwvAi+RjHWSKYz5Wr1wT3NFGuIPT4 LKl/0pLFtAYdagH9EZGiC25ouFu+KQKo31YSXC83EJcPJpECAwEAAaOCA1UwggNR MB0GA1UdDgQWBBTAblUGQ9aQpTRgtI44PAZdTApOsjCB5QYIKwYBBQUHAQsEgdgw gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5 NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQwZmFlL2NjMTM5NzNlLWI4OTUtMzFh Yi1hMDNiLTFkMTRjYmVhODQyOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2 Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2 LTQ2MTYzZjFkMGZhZS9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBm YWUuY3JsMB8GA1UdIwQYMBaAFKbnprRAGc9OOIdm2UBndZnQxJLcMA4GA1UdDwEB /wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt YmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNm MWQwZmFlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxEgjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC AQEAVdDbyddipXfteKJjlIdlgNhktmL0fwixFpODJIn7jhfaXV4HDCMaePe/gG92 q3EzxVZD+hBsNel81KAs7Z54gzlGp5tc+OR9MRlr0/MKE18poIXO6ccql9hrtiyN BwpO+vjHTXHzPO3qjpKxdwFhmbggTtndAfqZDJq/8sbZS7Tsd9zzex36WCKsIU8B qDHqTHPuK9ASDsxXlVvlItkozKES0DndAl2AIZ1ZCNIcBISGR85g8/acbgF5OXJU SvglDZz/llbs2Bv4bpnowyDSd++sbgciskgdz+hzp0Ap10Br0hsO+jYnYxslgY9P CQSbdmfb6jlr22cCWm2c+J8k4g== -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:12 2025 by rpki-client