$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa File: da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa (raw, json) Hash identifier: /8XvmBKJeTnLcw+IC0Fm9/tJ8KDEU23bWPy+eQfhBk0= Subject key identifier: BD:87:75:71:72:7C:29:3E:A2:FE:1F:D4:F8:F5:CC:E6:D3:D0:75:52 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69E77F7D04D9EC9B3D1C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9e:77:f7:d0:4d:9e:c9:b3:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=2133a014-5582-41cd-ab23-092bf574ad36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0d:d2:55:1c:71:d7:0a:00:c6:e1:62:67:a3: 77:42:d2:d9:f0:9c:fd:76:11:c3:d8:6e:bb:7a:3d: a6:5f:ea:05:94:5f:9e:14:82:39:25:8f:a0:a7:1a: eb:8b:8d:23:3c:ba:23:fb:cc:95:ec:db:15:99:78: 46:1f:dd:d2:96:a5:cb:54:c2:f9:a4:70:d3:20:3f: 8f:f8:9c:fe:37:92:ef:82:2c:85:ee:f3:be:a9:d4: 13:10:ba:f7:ff:d8:45:79:23:e6:b2:7d:d6:d9:24: de:3a:8b:a8:44:f5:37:47:5e:e2:59:83:0e:1c:b3: 45:c6:90:1f:89:7b:d0:fc:76:91:a6:5d:ab:2f:c3: 79:f9:29:82:52:bf:e0:0d:b1:89:63:f5:c9:d5:af: 57:22:24:cc:5c:d0:39:5d:c9:7d:b1:ae:a3:a2:e3: 4c:5e:0e:c5:ad:e6:d7:23:3b:21:a2:80:81:9a:fa: 40:9b:08:2c:05:a9:92:6a:f4:8a:7f:ea:fd:9d:70: 57:eb:c9:95:aa:b0:13:a2:24:68:27:2f:67:9f:5a: 11:5e:33:ea:47:a6:26:00:5a:b9:2e:16:c8:19:62: 33:b5:eb:74:27:6a:2d:f3:23:df:c1:cc:9b:cf:70: 69:97:95:a4:b2:5e:2f:1f:3f:5a:54:c2:52:bf:da: c7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:87:75:71:72:7C:29:3E:A2:FE:1F:D4:F8:F5:CC:E6:D3:D0:75:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da59fd2d-323a-3905-9f5f-8b77b9fd1e82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:01:9c:f6:27:cf:1c:f4:26:01:a7:6b:ef:b0:5e:9f:5e:e6: 07:23:c2:ca:31:77:5f:80:dc:bf:5b:b5:b9:34:82:68:82:dc: bf:36:fb:d2:d1:56:f4:10:10:45:67:14:3d:5e:65:03:6f:d3: 7d:0c:01:b3:0f:f8:1a:cc:6c:77:39:37:58:e1:22:cf:28:e5: 69:e0:df:04:b6:28:64:c0:3b:33:a0:e1:e8:b1:d0:0e:d2:52: 03:47:a1:b6:dd:ed:8d:e8:20:1a:95:41:47:5d:b9:52:4d:40: 47:d3:5e:af:db:f5:97:26:1b:e6:ff:09:d1:0c:be:14:9f:33: 99:a3:fe:44:3d:c8:68:30:9b:b2:3f:83:93:11:07:70:48:0f: 51:d0:7f:3c:00:3e:4a:0f:2a:a7:98:de:f4:c2:88:86:38:98: 4b:e0:c9:0f:28:a9:4e:de:e7:d1:36:00:b5:ca:5a:c2:65:74: b9:85:20:fe:70:69:8b:fa:4f:88:c3:6f:f8:0c:f6:3f:2c:78: 63:d4:ee:8e:6e:22:89:4f:d5:35:af:33:be:74:dc:4c:e4:ff: c4:f6:bc:ce:53:51:ee:d7:75:2c:bf:ba:89:6f:22:b3:cc:69: 39:f1:9b:64:53:f3:dd:90:e9:6f:65:a6:ff:4d:91:48:99:61: c9:27:19:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p5399BNnsmz0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MjEzM2EwMTQtNTU4Mi00MWNkLWFiMjMtMDkyYmY1NzRhZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ3SVRxx1woAxuFiZ6N3QtLZ8Jz9dhHD2G67 ej2mX+oFlF+eFII5JY+gpxrri40jPLoj+8yV7NsVmXhGH93SlqXLVML5pHDTID+P +Jz+N5LvgiyF7vO+qdQTELr3/9hFeSPmsn3W2STeOouoRPU3R17iWYMOHLNFxpAf iXvQ/HaRpl2rL8N5+SmCUr/gDbGJY/XJ1a9XIiTMXNA5Xcl9sa6jouNMXg7FrebX IzshooCBmvpAmwgsBamSavSKf+r9nXBX68mVqrAToiRoJy9nn1oRXjPqR6YmAFq5 LhbIGWIztet0J2ot8yPfwcybz3Bpl5Wksl4vHz9aVMJSv9rHOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2HdXFyfCk+ov4f1Pj1zObT0HVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE1OWZkMmQtMzIzYS0z OTA1LTlmNWYtOGI3N2I5ZmQxZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArES8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMBnPYnzxz0JgGna++wXp9e5gcjwsoxd1+A3L9btbk0gmiC3L82+9LR VvQQEEVnFD1eZQNv030MAbMP+BrMbHc5N1jhIs8o5Wng3wS2KGTAOzOg4eix0A7S UgNHobbd7Y3oIBqVQUdduVJNQEfTXq/b9ZcmG+b/CdEMvhSfM5mj/kQ9yGgwm7I/ g5MRB3BID1HQfzwAPkoPKqeY3vTCiIY4mEvgyQ8oqU7e59E2ALXKWsJldLmFIP5w aYv6T4jDb/gM9j8seGPU7o5uIolP1TWvM7503Ezk/8T2vM5TUe7XdSy/uolvIrPM aTnxm2RT892Q6W9lpv9NkUiZYcknGYU= -----END CERTIFICATE-----Generated at Sat Apr 5 07:57:02 2025 by rpki-client