$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d115b7dd-99ef-3ef6-9281-564cd04d4818.roa File: d115b7dd-99ef-3ef6-9281-564cd04d4818.roa (raw, json) Hash identifier: nqK9YQUPN5TCRQBWiL2ST8+QnT9Y/GPOSIrSI0JlA9g= Subject key identifier: E5:81:9D:AA:7F:73:AC:94:BC:F3:D5:8E:6D:D4:B9:DA:56:43:72:D4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C15717B0D248A088FD040 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d115b7dd-99ef-3ef6-9281-564cd04d4818.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:15:71:7b:0d:24:8a:08:8f:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=33a9c721-bd0e-4bcf-93e3-8d4ab996ceb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:fb:b2:4d:db:a1:cf:b6:50:73:3f:af:50: c8:4b:7a:5a:d1:dc:a2:fe:5a:39:8a:d3:8a:41:12: 78:df:3b:f3:ba:30:6c:1b:16:2f:44:88:eb:d5:35: 42:15:fb:8a:65:54:fe:12:b4:43:18:13:47:ee:a9: bb:83:0c:95:1c:2e:6a:c2:bd:b6:1a:9a:f7:2a:30: 65:eb:e7:86:cd:58:b4:94:06:6c:9c:80:18:2f:96: 4e:91:39:0f:cc:7c:f6:96:c8:9a:52:4d:b9:28:e7: 4e:d2:6f:e5:ba:bd:57:fd:28:2b:4e:a7:c5:01:b1: f9:19:66:8b:d3:c2:80:2f:28:61:a5:23:27:8a:ad: f7:7a:20:8f:bf:0a:b0:9b:74:9f:50:d9:63:be:b0: 94:33:73:02:2b:b7:63:df:af:43:56:94:e0:4d:41: 5f:a9:b7:23:20:f3:3c:4b:f3:50:67:89:6a:72:9c: c0:ca:0e:1b:a8:5a:d4:b5:f7:17:e9:94:a1:f1:2d: b9:8e:87:cf:10:d2:1b:ff:e6:8c:fb:18:22:ac:19: 3a:6f:e2:f2:5b:91:1e:08:34:c9:23:d8:84:74:e9: 07:59:a0:a4:7c:7b:1b:d4:fc:6d:46:c6:b2:2e:75: 8b:e2:14:b0:2d:54:65:3d:d3:e1:59:0b:bc:28:71: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:81:9D:AA:7F:73:AC:94:BC:F3:D5:8E:6D:D4:B9:DA:56:43:72:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d115b7dd-99ef-3ef6-9281-564cd04d4818.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4d:09:53:c9:a6:7d:e8:a5:ac:3d:d0:52:79:39:84:53:0e: f4:43:66:8d:61:8c:08:15:0d:57:46:5f:a3:60:96:07:07:d4: 6a:cf:a8:c2:29:07:c4:1d:f4:90:86:37:08:5f:a4:fa:60:41: 69:e8:66:48:52:02:7e:a7:3a:b8:df:ad:41:fc:bf:fd:5f:bf: 91:31:d1:e1:92:4f:e0:be:79:e8:a8:ec:0c:4f:1b:b7:7c:f6: 09:9b:40:5b:36:76:b4:c0:93:44:c0:f4:d2:ad:5b:7f:e0:d9: b7:59:fb:5a:5a:dc:83:2c:fe:3d:55:38:d2:ad:79:db:6e:53: 08:b4:96:e1:f3:33:33:8d:01:de:49:d3:5d:53:3b:8e:c6:10: 11:ee:f6:73:84:d7:44:7a:56:53:e0:47:eb:35:f9:62:ca:55: 0a:4f:96:a9:02:db:0d:fb:17:ff:d3:a5:8e:3b:07:5f:47:27: 6d:f7:9c:59:6c:10:c6:9d:58:6f:31:b7:94:aa:a0:d0:68:5c: 25:fb:69:b9:88:5f:36:8f:5b:6b:5a:a2:70:37:33:2a:e3:34: 75:aa:d4:e0:f1:31:64:a5:72:9d:d9:5a:a6:a4:44:f9:f7:73: 41:5e:d8:b8:97:0c:a6:18:6d:42:a8:b5:93:31:ac:06:f9:1d: 4d:af:3a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBVxew0kigiP0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MzNhOWM3MjEtYmQwZS00YmNmLTkzZTMtOGQ0YWI5OTZjZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryj7sk3boc+2UHM/r1DIS3pa0dyi/lo5itOK QRJ43zvzujBsGxYvRIjr1TVCFfuKZVT+ErRDGBNH7qm7gwyVHC5qwr22Gpr3KjBl 6+eGzVi0lAZsnIAYL5ZOkTkPzHz2lsiaUk25KOdO0m/lur1X/SgrTqfFAbH5GWaL 08KALyhhpSMniq33eiCPvwqwm3SfUNljvrCUM3MCK7dj369DVpTgTUFfqbcjIPM8 S/NQZ4lqcpzAyg4bqFrUtfcX6ZSh8S25jofPENIb/+aM+xgirBk6b+LyW5EeCDTJ I9iEdOkHWaCkfHsb1PxtRsayLnWL4hSwLVRlPdPhWQu8KHFmFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWBnap/c6yUvPPVjm3UudpWQ3LUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDExNWI3ZGQtOTllZi0z ZWY2LTkyODEtNTY0Y2QwNGQ0ODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhNCVPJpn3opaw90FJ5OYRTDvRDZo1hjAgVDVdGX6NglgcH1GrPqMIp B8Qd9JCGNwhfpPpgQWnoZkhSAn6nOrjfrUH8v/1fv5Ex0eGST+C+eeio7AxPG7d8 9gmbQFs2drTAk0TA9NKtW3/g2bdZ+1pa3IMs/j1VONKtedtuUwi0luHzMzONAd5J 011TO47GEBHu9nOE10R6VlPgR+s1+WLKVQpPlqkC2w37F//TpY47B19HJ233nFls EMadWG8xt5SqoNBoXCX7abmIXzaPW2taonA3MyrjNHWq1ODxMWSlcp3ZWqakRPn3 c0Fe2LiXDKYYbUKotZMxrAb5HU2vOrw= -----END CERTIFICATE-----Generated at Sat Apr 5 07:41:35 2025 by rpki-client