$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa File: dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa (raw, json) Hash identifier: XclPx/slMLz5SZjAfqtg4vfOEsWiSPsoXeZNWTqoSG4= Subject key identifier: 80:B7:15:77:BB:AF:D7:6F:00:98:D9:A1:C9:47:3E:F8:74:7C:B5:91 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C149E1B17C1C70274ED80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:14:9e:1b:17:c1:c7:02:74:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=e8b74d6c-7968-4c53-ba66-9b17ab1b2284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:4c:8a:91:ba:39:78:28:8e:c4:55:cd:c4: ce:bc:28:57:0d:c1:1d:06:69:bf:9f:df:84:89:35: 7d:0f:c9:18:44:36:10:ce:b0:70:a2:46:fe:dd:ae: 3a:14:cc:b1:84:df:0a:fc:b3:c4:ef:88:61:f7:ca: 8e:46:60:b9:5c:71:b3:5b:85:6b:c2:eb:61:eb:1f: 9f:2e:33:e7:b1:d8:ab:84:a2:8d:ff:28:74:be:31: 1f:07:77:c0:2f:bc:40:57:8c:28:bf:fa:de:27:de: 41:45:80:d0:d0:c7:7e:62:ab:77:37:20:89:05:10: 5d:3d:55:ea:e1:d4:f8:3b:29:25:7d:20:5c:1c:80: a2:ec:94:ac:f8:b9:0d:ea:da:d8:0a:7e:e5:1d:de: a3:2b:ab:be:01:84:f5:a6:4e:cb:e5:e5:c1:eb:80: 76:9d:9e:22:b2:eb:65:34:d7:bc:17:79:7b:fa:87: 07:f8:73:bd:8d:9a:14:51:39:b6:68:31:bc:3e:5e: 97:1c:f0:29:6b:b6:2a:76:c0:4c:a6:9f:cc:1e:de: 0a:14:ae:3d:19:dd:69:50:b1:6c:16:be:ba:0a:1e: d6:4c:4f:78:ed:c4:1a:06:d5:08:b0:03:24:32:a7: 5b:5f:52:6b:d2:fa:77:5f:03:a6:de:0b:19:22:46: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B7:15:77:BB:AF:D7:6F:00:98:D9:A1:C9:47:3E:F8:74:7C:B5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbe6af08-dc09-3608-a84d-d83ffa9e2f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5e:9f:30:b8:dd:e1:b6:aa:eb:9a:2c:14:2a:41:6a:fe:4d: e5:a7:48:26:93:f3:04:bd:ea:55:7f:a7:5d:33:36:eb:df:df: d5:a8:5b:85:33:26:6b:66:90:92:b0:f6:60:69:ce:05:c7:bc: a7:37:31:91:6e:16:38:9e:4e:29:70:7e:84:a3:73:70:cd:92: 1e:d3:d5:7c:c7:8d:cd:ab:ed:f6:08:37:06:6d:63:cc:bb:fa: 16:82:99:af:1e:d3:c0:de:b7:0e:91:57:68:30:8a:08:02:89: de:63:93:86:dd:91:52:38:d0:71:8d:81:21:0f:72:37:0f:f6: b2:b8:16:b7:79:75:c0:7b:43:69:ac:14:6e:c4:43:0b:00:5c: 32:4b:6c:d0:de:7f:cd:3d:59:61:29:ea:ff:b5:bc:2f:c6:4b: 61:34:29:b8:83:ae:f4:ee:9d:9b:3b:a8:c1:8c:51:92:d5:ad: 42:b6:36:b5:bc:97:5f:8b:f8:e3:0e:ee:91:da:7d:fd:a8:9c: 89:9e:00:c1:61:b7:1d:af:20:8a:6a:64:fc:3b:1b:34:c9:83: 88:eb:71:1f:6f:2c:4d:c4:13:76:f1:18:1e:5c:b0:77:64:ef: fb:c9:ab:07:c7:09:c1:49:f4:e8:2d:03:b8:d8:19:cb:9c:7c: f0:51:b1:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBSeGxfBxwJ07YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZThiNzRkNmMtNzk2OC00YzUzLWJhNjYtOWIxN2FiMWIyMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcxMipG6OXgojsRVzcTOvChXDcEdBmm/n9+E iTV9D8kYRDYQzrBwokb+3a46FMyxhN8K/LPE74hh98qORmC5XHGzW4Vrwuth6x+f LjPnsdirhKKN/yh0vjEfB3fAL7xAV4wov/reJ95BRYDQ0Md+Yqt3NyCJBRBdPVXq 4dT4OyklfSBcHICi7JSs+LkN6trYCn7lHd6jK6u+AYT1pk7L5eXB64B2nZ4isutl NNe8F3l7+ocH+HO9jZoUUTm2aDG8Pl6XHPApa7YqdsBMpp/MHt4KFK49Gd1pULFs Fr66Ch7WTE947cQaBtUIsAMkMqdbX1Jr0vp3XwOm3gsZIkbf9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC3FXe7r9dvAJjZoclHPvh0fLWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGJlNmFmMDgtZGMwOS0z NjA4LWE4NGQtZDgzZmZhOWUyZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBenzC43eG2quuaLBQqQWr+TeWnSCaT8wS96lV/p10zNuvf39WoW4Uz JmtmkJKw9mBpzgXHvKc3MZFuFjieTilwfoSjc3DNkh7T1XzHjc2r7fYINwZtY8y7 +haCma8e08Detw6RV2gwiggCid5jk4bdkVI40HGNgSEPcjcP9rK4Frd5dcB7Q2ms FG7EQwsAXDJLbNDef809WWEp6v+1vC/GS2E0KbiDrvTunZs7qMGMUZLVrUK2NrW8 l1+L+OMO7pHaff2onImeAMFhtx2vIIpqZPw7GzTJg4jrcR9vLE3EE3bxGB5csHdk 7/vJqwfHCcFJ9OgtA7jYGcucfPBRsdY= -----END CERTIFICATE-----Generated at Sat Apr 5 04:33:30 2025 by rpki-client