$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3c521e1-cc18-3153-8248-a65d35dc9cf1.roa File: d3c521e1-cc18-3153-8248-a65d35dc9cf1.roa (raw, json) Hash identifier: Om4XhvP6WxYy4zgx9FDeMpFjHutSs/MvNW8TInKk6aM= Subject key identifier: 11:8F:71:B1:86:01:FF:64:A8:AB:CC:17:79:60:52:04:D3:64:2D:5E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69D80353BB01D105B0CA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3c521e1-cc18-3153-8248-a65d35dc9cf1.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.69.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9d:80:35:3b:b0:1d:10:5b:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=830103c2-10f7-42fd-909c-74b12e9e9e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:8b:73:c8:cf:5f:1e:94:9d:a7:c5:0a:87: 19:ec:57:b9:82:6d:32:0b:39:35:3a:b5:d8:86:a4: 0a:b7:fa:ff:7a:ef:e9:e4:42:f3:1b:46:ae:e8:71: ab:e2:78:d8:ba:d3:a9:da:84:74:f2:86:9c:b8:20: 37:ce:98:1a:d9:d6:19:71:f6:01:72:f6:d4:48:b8: fb:ba:2e:f5:e0:8c:98:7c:e8:ad:04:1d:50:ba:9e: c5:4b:b5:a9:b4:12:a3:3f:9f:94:09:00:d4:c4:1a: 40:0d:26:d6:7f:a8:14:85:e6:eb:e5:fd:0b:da:cd: ec:48:47:96:dc:fe:bd:65:eb:5f:42:15:2b:ba:82: 78:d4:21:42:ea:7b:fb:db:ac:5a:db:71:b6:5b:19: 31:b9:56:12:40:00:7f:96:94:10:b6:0a:4c:f3:6e: f4:69:78:bd:05:37:fd:bc:be:56:42:ca:bc:e4:84: 3a:33:3c:d1:13:65:33:fc:6c:5f:75:a9:83:8c:0f: ae:6d:27:de:3d:d9:3f:3a:39:82:e3:66:5b:34:b9: 3c:89:b1:03:4b:96:f5:cd:56:44:cb:d2:f7:21:b4: 4d:78:14:13:ef:72:04:4b:e6:95:70:5f:ec:22:66: cb:55:2c:11:00:65:5c:6b:30:27:93:8f:91:f4:92: aa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8F:71:B1:86:01:FF:64:A8:AB:CC:17:79:60:52:04:D3:64:2D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3c521e1-cc18-3153-8248-a65d35dc9cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:21:c5:01:ad:eb:50:91:dd:fe:d7:e6:54:b4:43:78:44:2b: c4:73:22:88:db:33:d2:25:51:2e:f3:db:3d:a9:5f:f2:0f:ff: cf:ce:04:32:79:1d:c8:76:ca:c6:5f:65:59:a3:5b:0f:00:c8: 9f:3f:eb:07:fb:19:6a:66:3f:dc:ad:9f:52:60:c7:c5:bd:2d: 13:c0:b3:4a:c9:86:bb:f2:c7:40:f1:d5:b0:11:b4:bc:e6:a5: 8f:87:a8:53:5f:10:d9:09:94:96:be:a7:6f:21:da:d8:91:e4: da:a0:92:37:c0:88:0f:a2:3b:45:93:4d:d7:89:b9:49:ba:42: e3:29:34:4a:8e:da:ef:13:b2:16:de:74:60:89:54:31:2b:ec: 0f:32:9c:8e:75:9c:60:88:e2:b2:4b:b1:5d:59:21:cf:c4:72: 07:95:ac:f4:ba:f6:39:fc:9a:04:87:fb:f5:6c:45:98:9c:bc: a1:09:de:aa:8a:a9:95:d6:c1:8e:44:db:fc:88:2e:29:aa:60: 98:08:70:97:5a:84:b5:ba:d6:c7:c1:64:cd:cc:73:7c:da:df: d5:13:aa:a0:87:b6:18:08:ce:c3:5a:04:52:f4:2e:06:85:54: 47:c5:5d:c9:3f:b8:3f:69:34:f5:cb:35:b9:54:c8:f4:0a:02: e9:64:a5:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p2ANTuwHRBbDKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk ODMwMTAzYzItMTBmNy00MmZkLTkwOWMtNzRiMTJlOWU5ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2OLc8jPXx6UnafFCocZ7Fe5gm0yCzk1OrXY hqQKt/r/eu/p5ELzG0au6HGr4njYutOp2oR08oacuCA3zpga2dYZcfYBcvbUSLj7 ui714IyYfOitBB1Qup7FS7WptBKjP5+UCQDUxBpADSbWf6gUhebr5f0L2s3sSEeW 3P69ZetfQhUruoJ41CFC6nv726xa23G2WxkxuVYSQAB/lpQQtgpM8270aXi9BTf9 vL5WQsq85IQ6MzzRE2Uz/GxfdamDjA+ubSfePdk/OjmC42ZbNLk8ibEDS5b1zVZE y9L3IbRNeBQT73IES+aVcF/sImbLVSwRAGVcazAnk4+R9JKqtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGPcbGGAf9kqKvMF3lgUgTTZC1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDNjNTIxZTEtY2MxOC0z MTUzLTgyNDgtYTY1ZDM1ZGM5Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrEXiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEhxQGt61CR3f7X5lS0Q3hEK8RzIojbM9IlUS7z2z2pX/IP/8/OBDJ5 Hch2ysZfZVmjWw8AyJ8/6wf7GWpmP9ytn1Jgx8W9LRPAs0rJhrvyx0Dx1bARtLzm pY+HqFNfENkJlJa+p28h2tiR5NqgkjfAiA+iO0WTTdeJuUm6QuMpNEqO2u8Tshbe dGCJVDEr7A8ynI51nGCI4rJLsV1ZIc/EcgeVrPS69jn8mgSH+/VsRZicvKEJ3qqK qZXWwY5E2/yILimqYJgIcJdahLW61sfBZM3Mc3za39UTqqCHthgIzsNaBFL0LgaF VEfFXck/uD9pNPXLNblUyPQKAulkpZg= -----END CERTIFICATE-----Generated at Wed Apr 9 18:04:16 2025 by rpki-client