$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa File: dc2dc789-3aaf-3694-9090-4f4c006937fe.roa (raw, json) Hash identifier: KYIqO1Onaq/XDn1c0JX81R4I4Iz4oVrAhBA6OkuyG+Q= Subject key identifier: EA:EA:D9:26:B9:47:13:9B:61:26:79:6F:A7:C0:7A:CD:97:A3:67:1F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490F7BFAEE7D7A60E90AB36480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.70.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:fa:ee:7d:7a:60:e9:0a:b3:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=8b5098a4-5301-4dda-a261-2c3dacb6e2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:4d:3e:bd:cd:66:87:e0:2c:0d:1e:10:4f: a8:b7:1b:85:1f:65:b6:a5:9e:53:9f:0d:24:18:57: 0b:7b:70:02:4c:2c:61:21:34:4a:39:9d:62:29:e8: 79:7c:ae:6a:2c:e3:30:78:07:2e:b0:b4:b2:3f:87: bb:2f:b3:68:a3:ee:79:c9:da:75:c4:3c:de:bf:fd: 85:73:cb:01:dd:bf:42:dc:3f:74:18:89:ab:51:ed: 00:b8:65:73:f2:c1:04:89:0e:c7:2a:a1:72:e7:49: 32:97:64:57:8d:61:c4:26:12:9b:d7:91:f1:27:5f: 38:9e:09:d3:9c:cd:59:6b:a7:e4:a8:78:ed:4c:17: ff:be:ff:2f:23:03:27:50:32:c6:c6:92:fc:ea:c8: 98:c2:b4:94:d0:53:62:33:3f:69:8a:71:20:08:1d: 54:77:e4:22:39:9c:3b:a4:96:fa:ec:de:e6:d7:70: a6:4a:8f:77:53:ac:2b:05:76:e1:eb:ff:cc:61:af: 09:b4:b1:39:99:c8:72:0b:59:59:59:01:aa:3e:49: 89:b7:f6:fa:43:d4:1b:75:11:d2:0d:48:a1:15:f7: e7:ae:7f:b1:22:db:d0:be:1a:71:7e:09:dd:3e:94: c6:bf:2d:49:80:c3:17:02:37:cb:15:a3:bc:aa:8d: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EA:D9:26:B9:47:13:9B:61:26:79:6F:A7:C0:7A:CD:97:A3:67:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:75:cd:20:1d:46:fe:7a:cb:5e:ec:db:f2:9d:6f:01:cf:51: 66:2e:4f:28:3f:dc:7e:78:b8:dc:fa:90:66:d9:d0:d7:ef:77: eb:bb:63:5d:a1:0d:ad:3d:19:c5:35:40:f2:e0:5d:d3:66:84: 50:32:a7:d0:5a:1c:ad:91:6d:36:5e:3e:08:c4:70:f7:19:a7: 06:e4:a0:dd:9e:5f:08:73:c5:6b:fb:ce:9a:6e:d4:9a:31:51: 08:f3:be:6e:74:96:a5:f3:33:ef:d4:e8:e0:af:0a:8f:4c:8f: a0:dd:2e:bd:21:97:e8:b4:7a:c9:8d:df:f2:bf:de:fd:b7:49: d4:9d:89:ef:c7:3f:93:d7:37:6a:91:c4:df:d1:07:e8:4f:23: f9:06:82:fb:e9:66:34:ab:c5:92:b5:df:87:4d:92:bd:d6:85: c4:72:77:77:8e:d4:8e:fc:4d:68:b7:72:1c:ad:b8:61:95:cb: 26:67:ba:c7:17:6b:f0:d6:dc:56:48:fc:a2:cf:40:a9:95:6b: c3:61:d3:4e:68:b7:91:d5:85:54:81:40:77:b3:ed:44:06:cc: 6d:86:d6:84:b7:b6:4e:1f:b4:0c:f0:43:5f:78:d7:25:69:d4: 25:fc:37:74:4b:eb:66:64:46:9e:d2:f8:ba:94:99:0a:68:2b: 52:c5:74:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/rufXpg6QqzZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk OGI1MDk4YTQtNTMwMS00ZGRhLWEyNjEtMmMzZGFjYjZlMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueBNPr3NZofgLA0eEE+otxuFH2W2pZ5Tnw0k GFcLe3ACTCxhITRKOZ1iKeh5fK5qLOMweAcusLSyP4e7L7Noo+55ydp1xDzev/2F c8sB3b9C3D90GImrUe0AuGVz8sEEiQ7HKqFy50kyl2RXjWHEJhKb15HxJ184ngnT nM1Za6fkqHjtTBf/vv8vIwMnUDLGxpL86siYwrSU0FNiMz9pinEgCB1Ud+QiOZw7 pJb67N7m13CmSo93U6wrBXbh6//MYa8JtLE5mchyC1lZWQGqPkmJt/b6Q9QbdRHS DUihFffnrn+xItvQvhpxfgndPpTGvy1JgMMXAjfLFaO8qo1oqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrq2Sa5RxObYSZ5b6fAes2Xo2cfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGMyZGM3ODktM2FhZi0z Njk0LTkwOTAtNGY0YzAwNjkzN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR1zSAdRv56y17s2/KdbwHPUWYuTyg/3H54uNz6kGbZ0Nfvd+u7Y12h Da09GcU1QPLgXdNmhFAyp9BaHK2RbTZePgjEcPcZpwbkoN2eXwhzxWv7zppu1Jox UQjzvm50lqXzM+/U6OCvCo9Mj6DdLr0hl+i0esmN3/K/3v23SdSdie/HP5PXN2qR xN/RB+hPI/kGgvvpZjSrxZK134dNkr3WhcRyd3eO1I78TWi3chytuGGVyyZnuscX a/DW3FZI/KLPQKmVa8Nh005ot5HVhVSBQHez7UQGzG2G1oS3tk4ftAzwQ1941yVp 1CX8N3RL62ZkRp7S+LqUmQpoK1LFdD8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:25:29 2025 by rpki-client