$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5bdd0ee-392a-3f40-8c1b-a6b9113ba5a5.roa File: d5bdd0ee-392a-3f40-8c1b-a6b9113ba5a5.roa (raw, json) Hash identifier: HttfSPQc77wGlOTwgN1A2yxhGZmTncJ5N0mU5JF+UVE= Subject key identifier: 91:3F:E6:EC:04:54:9F:E5:A4:EA:02:5D:22:0E:EF:6A:E4:70:71:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69B3A8A42D3BB3C8E9460 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5bdd0ee-392a-3f40-8c1b-a6b9113ba5a5.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9b:3a:8a:42:d3:bb:3c:8e:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=707b695e-e13c-4be7-852d-100e286e3b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:17:f3:af:89:49:33:21:94:ec:b0:10:a6: 1b:39:c8:6d:e7:e4:e7:59:77:85:41:06:5f:12:c1: 1d:73:0c:86:b6:bb:02:d6:bc:03:57:f3:42:5f:0a: 98:c3:42:65:d3:53:45:0f:4e:a5:0c:42:cc:24:8c: 30:b2:a1:d1:02:d1:66:5b:c9:05:78:6c:40:6c:f9: 05:f7:b3:dc:e4:1a:a3:d9:d4:2b:4b:f0:5a:04:3f: 3d:d0:4f:91:55:8a:9c:86:e7:4f:53:57:ce:b4:5e: 9a:9d:a3:e9:53:33:d2:a1:70:05:2e:78:58:fd:9c: 21:f8:79:44:4b:b0:4a:b7:c1:b3:76:63:61:c6:e6: 5b:03:11:b2:19:cf:3f:f5:b9:14:f1:ec:b3:32:65: 39:1a:ac:c1:a1:39:b8:71:bf:1d:0f:67:43:20:01: d0:40:0b:a5:4c:4a:5f:94:33:4d:35:2a:fc:cc:33: ca:be:8c:3a:4b:e9:b9:3f:52:bd:0d:b5:33:d7:99: e2:d9:2b:07:bb:47:25:90:96:c9:a0:79:0d:02:cb: 61:60:a6:84:07:17:1b:dc:f4:42:84:60:61:f4:79: 7c:89:98:16:c6:0d:88:2c:b4:60:b0:fb:e9:2e:db: 94:3b:8d:db:36:09:37:73:1a:34:c1:09:eb:ea:cb: ce:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3F:E6:EC:04:54:9F:E5:A4:EA:02:5D:22:0E:EF:6A:E4:70:71:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5bdd0ee-392a-3f40-8c1b-a6b9113ba5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:59:e2:8e:68:ec:44:fc:da:e5:49:37:42:78:61:a7:3a:09: ab:cc:4a:cc:90:fb:b3:bf:c1:98:38:e6:0b:a1:e2:f9:5a:8d: df:d2:20:ad:66:f2:e4:0f:e7:ae:d3:00:1c:97:83:f0:3a:52: 23:38:ae:48:ad:e9:bb:67:84:ed:d0:4d:63:82:13:93:95:98: 89:d7:d4:f3:63:7c:36:f0:d0:00:ba:ef:08:c4:49:5c:2d:1e: 36:5c:2d:95:06:e7:ae:d8:b6:81:a4:f8:b0:00:aa:8b:be:54: ce:15:c3:8d:fa:ac:fa:df:64:cf:f7:56:41:14:86:e2:e4:07: 3e:27:85:f9:a7:80:19:3c:e3:26:e5:f6:e5:2d:98:52:8b:5d: d9:6d:2b:a5:13:6e:8f:0c:47:6c:23:17:fb:f9:29:c0:c8:0f: 61:ce:70:58:98:ce:b3:bc:ed:62:d8:01:cf:87:95:50:05:d7: 3d:d0:44:10:6b:a7:60:eb:1a:65:54:79:9a:bd:07:50:7b:5a: fa:c4:db:bb:1d:7d:0a:b0:ff:d7:76:06:70:f9:a2:b1:24:83: cc:7b:d5:cb:0d:25:1e:4c:96:b1:30:31:a3:cb:c7:0b:f4:55: b7:52:41:26:be:1e:91:44:70:bb:5f:a8:1b:fa:a7:9b:0e:c2: 7f:de:08:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5ps6ikLTuzyOlGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk NzA3YjY5NWUtZTEzYy00YmU3LTg1MmQtMTAwZTI4NmUzYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ0X86+JSTMhlOywEKYbOcht5+TnWXeFQQZf EsEdcwyGtrsC1rwDV/NCXwqYw0Jl01NFD06lDELMJIwwsqHRAtFmW8kFeGxAbPkF 97Pc5Bqj2dQrS/BaBD890E+RVYqchudPU1fOtF6anaPpUzPSoXAFLnhY/Zwh+HlE S7BKt8GzdmNhxuZbAxGyGc8/9bkU8eyzMmU5GqzBoTm4cb8dD2dDIAHQQAulTEpf lDNNNSr8zDPKvow6S+m5P1K9DbUz15ni2SsHu0clkJbJoHkNAsthYKaEBxcb3PRC hGBh9Hl8iZgWxg2ILLRgsPvpLtuUO43bNgk3cxo0wQnr6svOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE/5uwEVJ/lpOoCXSIO72rkcHFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDViZGQwZWUtMzkyYS0z ZjQwLThjMWItYTZiOTExM2JhNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1Z4o5o7ET82uVJN0J4Yac6CavMSsyQ+7O/wZg45guh4vlajd/SIK1m 8uQP567TAByXg/A6UiM4rkit6btnhO3QTWOCE5OVmInX1PNjfDbw0AC67wjESVwt HjZcLZUG567YtoGk+LAAqou+VM4Vw436rPrfZM/3VkEUhuLkBz4nhfmngBk84ybl 9uUtmFKLXdltK6UTbo8MR2wjF/v5KcDID2HOcFiYzrO87WLYAc+HlVAF1z3QRBBr p2DrGmVUeZq9B1B7WvrE27sdfQqw/9d2BnD5orEkg8x71csNJR5MlrEwMaPLxwv0 VbdSQSa+HpFEcLtfqBv6p5sOwn/eCA0= -----END CERTIFICATE-----Generated at Sat Apr 5 06:36:40 2025 by rpki-client