$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa File: cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa (raw, json) Hash identifier: GIZpip7uccybEBiGxeq/IboBCK4I0DDrAwMYXu9w8dE= Subject key identifier: DC:98:FD:7A:81:65:92:70:3D:CE:DA:6A:9C:92:B4:54:8E:F4:0B:E9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C0D13AF9BDCC59B1B7B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:0d:13:af:9b:dc:c5:9b:1b:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=1bb2d0f9-7d11-47ad-b979-6e66ba6caf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:81:53:df:09:1f:28:8a:34:27:bd:69:54: c2:25:af:64:34:31:1f:d8:ea:a1:89:8e:a4:35:5d: 03:b9:18:77:60:24:d8:d4:a8:c7:5b:9d:37:82:0e: c7:13:9a:df:ee:da:98:18:27:cc:ba:5f:7f:b8:05: 97:c1:b1:6b:06:84:88:e6:51:8e:34:4d:20:ec:43: 25:fb:aa:e5:1a:50:eb:64:5c:12:de:97:c8:8e:b2: 77:aa:02:8f:71:4a:b1:03:e0:0a:a5:c6:3b:54:14: f9:2d:1d:92:61:b9:c4:4c:02:8c:5e:bd:91:7d:93: 89:1c:2b:51:c7:a1:74:7a:8b:9b:f6:d9:0f:f4:b4: f2:8c:91:3e:9d:6c:95:0a:29:ca:38:e0:7e:6e:28: 7b:e2:ef:10:96:76:f9:a8:2c:07:55:d5:67:b6:ab: a2:9b:e1:87:db:05:ec:74:67:10:2f:cb:c8:63:ba: a5:70:7f:35:e9:4a:35:73:72:82:21:86:1f:2f:27: 02:ea:d7:2a:ff:42:86:3b:b7:cf:25:b7:78:33:f5: e8:c4:8f:3e:07:e3:ba:6a:77:95:d1:ce:57:1d:ad: 9a:74:88:c5:9d:58:5c:4f:1c:31:45:77:c3:8e:15: 09:ca:99:a3:fc:08:01:a4:66:4f:01:b0:6a:b1:b6: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:98:FD:7A:81:65:92:70:3D:CE:DA:6A:9C:92:B4:54:8E:F4:0B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd20c404-cc69-3bb9-b43b-40e5ec125ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a8:d3:47:9f:bd:9f:1d:8c:6e:6e:37:c2:b2:92:99:31:07: 24:28:f0:76:a9:26:ba:e1:d6:91:f6:a7:b3:1b:fb:70:d1:80: ea:2f:b4:b4:c6:68:e2:3c:b6:0f:33:4e:2c:00:f1:c8:84:fb: 43:93:e7:35:6b:22:2e:57:51:cf:a5:c9:ac:20:5c:b2:c9:c8: be:b6:1c:62:b3:5a:59:9d:4b:8b:c1:c5:b5:19:84:ef:9d:ed: 4a:fe:01:4d:07:f1:d5:7c:d2:25:77:96:56:f7:63:8d:04:16: f7:6a:68:3d:f8:42:08:9c:19:f2:fc:36:e4:22:ad:3a:6d:b9: ce:e9:fa:22:a2:06:91:49:e3:4e:89:c5:b6:a8:aa:95:2b:c8: 0f:17:9e:7f:02:c8:a9:04:a8:d4:f1:a5:91:ff:2a:e3:11:ba: 97:02:48:14:64:03:ad:f1:d9:7f:f9:94:d5:9d:f4:dc:7b:1a: 3d:cd:47:52:e8:e8:88:fb:80:6e:56:3e:32:63:5e:2b:b6:bc: 4e:7c:3d:3f:96:46:e8:3e:04:40:fe:43:81:1d:39:aa:67:63: 61:cb:ef:70:18:fb:65:59:b2:6b:fc:93:e5:9e:f7:cb:31:b0: dd:98:aa:6f:08:e5:f8:a5:70:48:26:c6:f9:a7:29:5f:2e:c5: 3d:63:ae:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTA0Tr5vcxZsbe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MWJiMmQwZjktN2QxMS00N2FkLWI5NzktNmU2NmJhNmNhZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFiBU98JHyiKNCe9aVTCJa9kNDEf2OqhiY6k NV0DuRh3YCTY1KjHW503gg7HE5rf7tqYGCfMul9/uAWXwbFrBoSI5lGONE0g7EMl +6rlGlDrZFwS3pfIjrJ3qgKPcUqxA+AKpcY7VBT5LR2SYbnETAKMXr2RfZOJHCtR x6F0eoub9tkP9LTyjJE+nWyVCinKOOB+bih74u8Qlnb5qCwHVdVntquim+GH2wXs dGcQL8vIY7qlcH816Uo1c3KCIYYfLycC6tcq/0KGO7fPJbd4M/XoxI8+B+O6aneV 0c5XHa2adIjFnVhcTxwxRXfDjhUJypmj/AgBpGZPAbBqsbbEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyY/XqBZZJwPc7aapyStFSO9AvpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2QyMGM0MDQtY2M2OS0z YmI5LWI0M2ItNDBlNWVjMTI1ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCo00efvZ8djG5uN8KykpkxByQo8HapJrrh1pH2p7Mb+3DRgOovtLTG aOI8tg8zTiwA8ciE+0OT5zVrIi5XUc+lyawgXLLJyL62HGKzWlmdS4vBxbUZhO+d 7Ur+AU0H8dV80iV3llb3Y40EFvdqaD34QgicGfL8NuQirTptuc7p+iKiBpFJ406J xbaoqpUryA8Xnn8CyKkEqNTxpZH/KuMRupcCSBRkA63x2X/5lNWd9Nx7Gj3NR1Lo 6Ij7gG5WPjJjXiu2vE58PT+WRug+BED+Q4EdOapnY2HL73AY+2VZsmv8k+We98sx sN2Yqm8I5filcEgmxvmnKV8uxT1jruI= -----END CERTIFICATE-----Generated at Sat Apr 5 06:32:13 2025 by rpki-client