$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3d3ef4c-26e3-3221-958f-91be97c5e0d0.roa File: d3d3ef4c-26e3-3221-958f-91be97c5e0d0.roa (raw, json) Hash identifier: HWmj+B8k1bRTJMKGbefjObV5B1NyDDmv2Ykr2nCkmkw= Subject key identifier: 2D:74:03:D1:23:86:FA:FD:04:D3:C3:E2:9B:C7:D8:EC:99:64:22:48 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B58948E0AFD673E1899B6E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3d3ef4c-26e3-3221-958f-91be97c5e0d0.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.68.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:58:94:8e:0a:fd:67:3e:18:99:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=5ab12a4e-0b36-42cf-87b1-4d5cbef87a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d3:9d:5a:b2:19:0d:61:8e:08:6a:60:11:fa: 4b:2a:80:db:63:d2:c5:3a:6d:58:20:b8:05:4b:82: 20:37:92:c1:23:a6:0f:2b:74:8e:24:78:1d:ab:e9: a7:2b:ba:95:d5:c5:62:f5:55:6a:0d:04:10:04:e2: 60:98:87:02:fc:6b:a6:a1:83:f6:3f:00:63:0c:4e: 1a:14:f6:cc:33:c7:b9:69:5f:3e:be:7a:28:bd:29: 13:51:8e:e5:4a:e9:7e:28:a4:67:d7:73:b0:65:cf: f3:ae:b0:45:e6:7e:8d:d4:24:6e:ff:19:34:e1:74: 74:5b:47:86:61:26:74:68:bd:2a:34:0e:f4:75:d8: e9:45:3c:e2:09:bb:05:75:e4:74:dc:b6:23:c2:dd: 89:d4:0e:e8:58:d9:e2:57:86:ab:72:0d:be:b2:82: 5e:9b:2e:77:c6:3c:9f:27:68:1f:0d:82:b7:50:fa: b7:e4:c7:a1:dd:bf:db:9a:4b:ca:76:cb:3f:5d:35: ac:c8:9a:f4:63:d6:3a:ad:e9:49:e5:7d:1f:09:51: 79:f6:8c:0b:2d:13:82:d5:84:29:2a:cc:ee:ca:eb: f2:57:ea:bd:b0:f5:04:a8:6d:0c:e2:1e:03:77:22: 8e:0b:bf:b7:99:bd:06:d1:b1:51:64:e8:33:5f:7c: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:74:03:D1:23:86:FA:FD:04:D3:C3:E2:9B:C7:D8:EC:99:64:22:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3d3ef4c-26e3-3221-958f-91be97c5e0d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:59:a2:cf:09:df:3b:7b:6f:ab:01:7c:52:0c:90:b9:ce:19: 28:1f:3f:97:4e:65:41:0f:85:6d:e5:94:fd:20:ed:e0:41:c0: ef:b7:3d:b4:21:09:ee:6f:13:84:dd:0c:a5:27:74:21:36:b9: 4a:ab:9f:46:38:06:8a:78:bc:2a:c8:fb:31:92:73:de:2e:38: 2f:38:4f:54:4a:59:c3:62:49:c6:b6:ed:8d:92:1c:7a:a0:c4: 68:55:73:d4:67:91:9c:b1:9f:64:79:62:34:28:30:92:e5:2e: 4a:51:42:01:d8:54:72:55:26:99:24:92:14:74:7a:8e:80:b8: 43:14:80:57:81:6b:14:dd:46:b1:09:a7:e7:f6:33:17:6a:a2: eb:ad:6b:ed:22:50:c0:a2:4d:b8:b8:f0:fa:bc:a3:4c:cc:f7: bc:0c:df:46:20:4a:69:82:59:fc:ad:b4:9a:a3:74:f2:40:6b: fb:3e:f9:3c:73:b2:f3:e4:b1:be:2e:24:e0:6e:e5:9b:ec:46: bb:39:69:1e:94:70:06:a4:4a:11:e3:6a:d0:08:a9:d9:47:9a: e7:b9:28:3e:6e:da:fe:a5:b0:42:c3:9b:b9:c0:87:4c:31:fe: 93:dd:2d:7f:58:db:2d:95:6a:bb:29:10:19:e7:e7:b7:53:81: 9c:67:e2:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7WJSOCv1nPhiZtuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk NWFiMTJhNGUtMGIzNi00MmNmLTg3YjEtNGQ1Y2JlZjg3YTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidOdWrIZDWGOCGpgEfpLKoDbY9LFOm1YILgF S4IgN5LBI6YPK3SOJHgdq+mnK7qV1cVi9VVqDQQQBOJgmIcC/GumoYP2PwBjDE4a FPbMM8e5aV8+vnoovSkTUY7lSul+KKRn13OwZc/zrrBF5n6N1CRu/xk04XR0W0eG YSZ0aL0qNA70ddjpRTziCbsFdeR03LYjwt2J1A7oWNniV4arcg2+soJemy53xjyf J2gfDYK3UPq35Meh3b/bmkvKdss/XTWsyJr0Y9Y6relJ5X0fCVF59owLLROC1YQp KszuyuvyV+q9sPUEqG0M4h4DdyKOC7+3mb0G0bFRZOgzX3w+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC10A9Ejhvr9BNPD4pvH2OyZZCJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDNkM2VmNGMtMjZlMy0z MjIxLTk1OGYtOTFiZTk3YzVlMGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9Zos8J3zt7b6sBfFIMkLnOGSgfP5dOZUEPhW3llP0g7eBBwO+3PbQh Ce5vE4TdDKUndCE2uUqrn0Y4Bop4vCrI+zGSc94uOC84T1RKWcNiSca27Y2SHHqg xGhVc9RnkZyxn2R5YjQoMJLlLkpRQgHYVHJVJpkkkhR0eo6AuEMUgFeBaxTdRrEJ p+f2Mxdqouuta+0iUMCiTbi48Pq8o0zM97wM30YgSmmCWfyttJqjdPJAa/s++Txz svPksb4uJOBu5ZvsRrs5aR6UcAakShHjatAIqdlHmue5KD5u2v6lsELDm7nAh0wx /pPdLX9Y2y2VarspEBnn57dTgZxn4m0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:57 2025 by rpki-client