$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef55bbb4-56e1-3aad-8dee-01847a2c965c.roa File: ef55bbb4-56e1-3aad-8dee-01847a2c965c.roa (raw, json) Hash identifier: 1AUAq0iaLaSNRWW+X+aexABnrfnrM3hgec61OjJdikI= Subject key identifier: 0D:5A:D9:01:22:C3:20:FF:38:9E:CF:25:0F:22:1C:0F:FE:40:A6:18 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328583CA78868445CFF09A225C4A8C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef55bbb4-56e1-3aad-8dee-01847a2c965c.roa Signing time: Thu 20 Jan 2022 05:00:00 +0000 ROA not before: Thu 20 Jan 2022 05:00:00 +0000 ROA not after: Sat 18 Sep 2027 04:00:00 +0000 asID: 13335 IP address blocks: 172.70.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3c:a7:88:68:44:5c:ff:09:a2:25:c4:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 20 05:00:00 2022 GMT Not After : Sep 18 04:00:00 2027 GMT Subject: CN=33cbe89b-6b84-4bb4-91f7-e43bc8c7672b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1e:3e:a7:3b:03:4b:2d:39:42:f1:65:d9:da: 95:5c:b6:11:86:57:ad:21:2d:a4:d2:7f:75:0d:27: a4:21:ff:44:fe:c6:88:25:5d:bb:c6:84:3f:14:8e: 82:69:eb:39:13:e2:d5:c8:30:72:8d:0f:86:d1:fb: 12:31:34:a8:62:b2:6a:43:a8:ae:ed:03:c4:ee:4a: 2d:68:86:56:b6:8e:88:0c:a2:e0:ca:bc:0b:a7:e5: df:d6:69:74:2b:a2:82:fd:c0:60:99:ef:7f:2e:74: 3f:ff:33:f4:e4:e9:5c:ee:16:75:e7:d6:84:90:01: c0:cc:58:31:69:8e:80:21:63:d4:63:0c:d5:78:a7: f2:c9:4e:3c:69:ac:ed:6d:af:5d:04:61:46:a0:0f: 8d:f9:c0:61:3d:87:a2:92:7a:c6:22:70:ae:e9:9e: 0b:f3:8d:ed:bb:7d:3c:2f:74:e2:eb:2d:04:3e:67: 8e:6a:64:83:b7:66:9a:09:ef:34:8a:76:20:f5:d6: 9e:cd:b4:33:83:26:87:9e:78:77:a6:47:05:db:eb: 67:8d:b7:ad:f8:ab:17:e6:ff:f7:09:79:5b:35:aa: b8:9a:20:cb:b7:4e:2c:b4:36:e4:01:83:23:0c:5f: bd:2a:e9:31:23:6e:af:1b:e6:96:2f:ae:70:ac:35: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5A:D9:01:22:C3:20:FF:38:9E:CF:25:0F:22:1C:0F:FE:40:A6:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef55bbb4-56e1-3aad-8dee-01847a2c965c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:c3:56:18:c1:a6:35:3e:fb:8d:90:17:12:71:57:0e:68:bc: 2b:fb:56:e3:6e:5d:ab:4f:99:e0:1c:3e:19:30:05:23:a9:1e: 74:bb:8d:9a:d8:57:b2:d9:6d:ce:e8:6c:7c:0d:d0:95:66:d7: 57:0a:89:e0:82:bc:63:eb:11:7e:dd:48:7f:ed:76:f8:7f:41: 82:be:f4:4d:4d:4b:bd:e8:66:13:18:19:21:fc:77:8f:c0:34: 1b:76:d0:ee:6f:9f:6f:2e:da:c4:01:5f:db:cc:64:90:80:73: b8:3f:ac:1f:30:48:9d:2f:7d:be:27:b1:70:90:56:eb:17:ad: e3:30:95:fc:fb:fe:07:c4:5f:2c:d7:28:14:85:fb:9e:c2:15: fe:fa:18:4d:b3:a6:b7:dc:56:c0:b1:7c:79:90:bf:7b:d9:d5: 39:9b:ab:c4:f8:48:8f:30:3d:94:19:b8:ab:92:80:f1:a4:a1: c3:63:eb:a5:ea:df:5b:09:33:a1:2d:48:fb:f4:3b:d4:44:f5: be:b4:4d:3d:62:20:f1:85:60:a0:3f:98:65:70:3d:36:36:f6: 2b:84:b5:90:18:e7:da:f4:b5:a1:c6:cd:0a:8a:9f:48:ed:87: e1:aa:da:ae:a0:ff:14:a2:e4:f8:87:d3:0f:9c:8d:fc:ed:b1: e1:34:e2:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyniGhEXP8JoiXEqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIyMDEyMDA1MDAwMFoXDTI3MDkxODA0MDAwMFowLzEtMCsGA1UEAxMk MzNjYmU4OWItNmI4NC00YmI0LTkxZjctZTQzYmM4Yzc2NzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h4+pzsDSy05QvFl2dqVXLYRhletIS2k0n91 DSekIf9E/saIJV27xoQ/FI6Caes5E+LVyDByjQ+G0fsSMTSoYrJqQ6iu7QPE7kot aIZWto6IDKLgyrwLp+Xf1ml0K6KC/cBgme9/LnQ//zP05Olc7hZ159aEkAHAzFgx aY6AIWPUYwzVeKfyyU48aaztba9dBGFGoA+N+cBhPYeiknrGInCu6Z4L843tu308 L3Ti6y0EPmeOamSDt2aaCe80inYg9daezbQzgyaHnnh3pkcF2+tnjbet+KsX5v/3 CXlbNaq4miDLt04stDbkAYMjDF+9KukxI26vG+aWL65wrDWiewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1a2QEiwyD/OJ7PJQ8iHA/+QKYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWY1NWJiYjQtNTZlMS0z YWFkLThkZWUtMDE4NDdhMmM5NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzDVhjBpjU++42QFxJxVw5ovCv7VuNuXatPmeAcPhkwBSOpHnS7jZrY V7LZbc7obHwN0JVm11cKieCCvGPrEX7dSH/tdvh/QYK+9E1NS73oZhMYGSH8d4/A NBt20O5vn28u2sQBX9vMZJCAc7g/rB8wSJ0vfb4nsXCQVusXreMwlfz7/gfEXyzX KBSF+57CFf76GE2zprfcVsCxfHmQv3vZ1Tmbq8T4SI8wPZQZuKuSgPGkocNj66Xq 31sJM6EtSPv0O9RE9b60TT1iIPGFYKA/mGVwPTY29iuEtZAY59r0taHGzQqKn0jt h+Gq2q6g/xSi5PiH0w+cjfztseE04hA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:36 2025 by rpki-client