$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa File: ef9a051b-46da-3f87-ba2d-2803e8af972c.roa (raw, json) Hash identifier: xUKSVtGltaHZrT029X8E1NDXsQs6l1IqmDdhyYHCMSM= Subject key identifier: 10:2F:10:35:05:71:7B:3B:2E:41:E4:7F:BA:D5:AA:B3:CE:2C:13:AC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C066AC51D221531F2E480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:06:6a:c5:1d:22:15:31:f2:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=613c75d4-35a2-4793-aac7-567c4c33f4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:2b:f1:04:4d:4a:7d:ba:d2:95:d2:e9:27: ab:60:19:bb:ef:b5:bf:a3:11:d8:56:21:b4:79:8c: 75:98:55:f8:d1:d2:d7:38:d3:32:c7:71:16:23:98: fc:76:14:fd:00:f8:30:06:39:ff:94:09:ec:7d:94: b1:c9:23:fd:c3:04:81:2b:c0:66:22:ec:7c:27:78: 39:df:8f:7b:80:3d:7e:e8:7b:ac:69:aa:31:35:10: dc:13:b3:c8:5f:9e:dd:fe:a3:5b:72:90:e7:26:0b: 4a:e0:ae:2b:be:60:43:d1:6b:da:74:b2:65:bb:10: 9d:69:9d:47:7b:d2:2a:ac:4c:b4:04:f0:d1:00:41: a3:8c:0a:4e:fc:d6:56:1d:25:00:3f:bc:2e:ef:0b: 6c:8a:b2:74:e5:0c:94:c0:8c:b2:53:ed:6d:09:1d: 69:62:b8:6b:e5:c1:cb:0d:51:34:89:b3:36:44:36: 28:76:e4:7d:f1:21:da:76:4d:fc:a0:fe:d8:87:e6: a8:2d:f6:f0:62:75:94:6a:32:83:ce:74:03:e7:30: 23:d0:71:8a:5e:9a:03:c4:e5:89:fe:b5:04:ac:17: 65:2a:5c:d8:1e:54:6a:60:d4:a1:96:0f:59:a4:98: 2f:8b:1a:93:ee:19:d3:97:d0:63:85:8d:32:23:e4: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2F:10:35:05:71:7B:3B:2E:41:E4:7F:BA:D5:AA:B3:CE:2C:13:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef9a051b-46da-3f87-ba2d-2803e8af972c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d2:34:f2:82:c3:33:b2:58:31:8a:62:02:85:48:40:35:bf: 40:a9:d1:6a:fe:7c:64:f7:76:af:30:5a:ec:d2:28:9d:62:79: e6:11:c6:ad:41:60:91:2b:7b:39:b5:c3:57:b4:90:29:a9:39: bc:d2:85:16:d1:8b:13:b2:de:3a:bd:31:f5:73:e8:31:21:9a: 29:89:18:2d:33:f3:2c:03:65:2f:e1:a7:b1:0f:98:5e:1c:d0: 37:d3:fa:8b:ea:ea:de:cf:d2:44:0c:da:8e:cb:ce:59:44:f5: 5b:53:d4:2e:98:c5:78:32:72:11:5f:4e:5d:22:63:ea:7e:6a: 81:8f:61:f3:c7:c2:64:0d:04:1e:29:bc:3e:7a:80:52:c3:88: df:69:3b:30:28:3a:86:26:dd:cc:7f:a8:b8:be:04:c9:07:77: e9:01:73:c6:23:1f:23:da:77:18:0c:1b:f2:f3:13:92:db:83: 65:16:b2:f6:e2:64:e9:bd:c9:cc:27:54:1a:9e:94:a8:93:cb: cb:e4:5b:c4:ed:15:d7:86:ee:23:e8:c4:0b:de:5a:3d:1e:f2: 34:dd:ce:99:05:f9:f9:97:05:57:a7:82:4a:e4:6b:02:b1:fc: 60:87:47:dc:8d:f3:b9:9f:a4:da:16:44:a0:ad:68:72:90:85: 4d:9d:6b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAZqxR0iFTHy5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NjEzYzc1ZDQtMzVhMi00NzkzLWFhYzctNTY3YzRjMzNmNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnMr8QRNSn260pXS6SerYBm777W/oxHYViG0 eYx1mFX40dLXONMyx3EWI5j8dhT9APgwBjn/lAnsfZSxySP9wwSBK8BmIux8J3g5 3497gD1+6HusaaoxNRDcE7PIX57d/qNbcpDnJgtK4K4rvmBD0WvadLJluxCdaZ1H e9IqrEy0BPDRAEGjjApO/NZWHSUAP7wu7wtsirJ05QyUwIyyU+1tCR1pYrhr5cHL DVE0ibM2RDYoduR98SHadk38oP7Yh+aoLfbwYnWUajKDznQD5zAj0HGKXpoDxOWJ /rUErBdlKlzYHlRqYNShlg9ZpJgvixqT7hnTl9BjhY0yI+T1mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAvEDUFcXs7LkHkf7rVqrPOLBOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWY5YTA1MWItNDZkYS0z Zjg3LWJhMmQtMjgwM2U4YWY5NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHSNPKCwzOyWDGKYgKFSEA1v0Cp0Wr+fGT3dq8wWuzSKJ1ieeYRxq1B YJErezm1w1e0kCmpObzShRbRixOy3jq9MfVz6DEhmimJGC0z8ywDZS/hp7EPmF4c 0DfT+ovq6t7P0kQM2o7LzllE9VtT1C6YxXgychFfTl0iY+p+aoGPYfPHwmQNBB4p vD56gFLDiN9pOzAoOoYm3cx/qLi+BMkHd+kBc8YjHyPadxgMG/LzE5Lbg2UWsvbi ZOm9ycwnVBqelKiTy8vkW8TtFdeG7iPoxAveWj0e8jTdzpkF+fmXBVengkrkawKx /GCHR9yN87mfpNoWRKCtaHKQhU2da/k= -----END CERTIFICATE-----Generated at Sat Apr 5 07:44:07 2025 by rpki-client