$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa File: f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa (raw, json) Hash identifier: eIddLs8e4TMitMyXPCcXFu7nPdQEeCT/5QJPqzJ0EQE= Subject key identifier: 6D:24:89:4D:3D:E1:1D:A9:17:12:08:DD:C4:AE:CD:65:EF:0C:4C:4C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818C53A7DFC367DDAA5E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.65.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8c:53:a7:df:c3:67:dd:aa:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=d98f802b-5930-4776-a843-40f3d15b143b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:99:ff:1b:4e:69:cc:19:a8:9b:db:99:e6: a9:6d:47:2f:c9:5d:64:c7:cc:c4:2c:b2:be:1f:eb: 0c:4b:d0:1b:ff:b5:23:1a:76:14:0d:7b:34:e9:e1: e7:9f:80:de:d7:da:e8:29:d5:ff:76:41:a5:61:87: 97:99:15:0f:30:eb:21:e8:d9:cb:72:ad:61:61:35: 22:69:94:c9:50:19:65:a7:20:23:67:34:95:3e:06: d0:30:8f:84:6c:ff:55:5e:03:fa:91:5b:4c:17:4e: 4d:52:65:db:6b:02:cf:c9:87:6d:1b:08:ad:48:cb: f3:c0:3b:a4:eb:16:8e:9a:8a:ce:3f:ff:78:8e:d9: e3:55:3b:08:5a:5f:56:dc:e7:64:3c:bc:f3:6f:ac: 13:19:06:73:0f:77:df:6e:ab:6f:a8:d8:ff:7f:a2: 90:b5:5e:63:d5:93:19:ed:3c:8a:0d:b2:fb:d1:36: 04:55:30:7d:d9:41:22:94:42:2c:54:08:9d:fa:3d: 10:43:a4:18:75:e9:c0:9f:83:df:fe:db:c4:77:67: bd:82:b0:d2:1e:73:ab:b4:59:f1:0d:71:9e:0f:15: 13:75:7d:6d:f3:1f:aa:a0:d3:7b:9c:87:9c:dd:54: 6b:da:0e:77:ec:48:1b:30:39:33:ef:3e:d2:cb:cd: 5a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:24:89:4D:3D:E1:1D:A9:17:12:08:DD:C4:AE:CD:65:EF:0C:4C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f8fa47a4-8c16-3e6a-a2da-d0f6abf2da31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8d:ee:3e:6c:82:93:b5:80:2c:33:0c:c9:d2:a1:b4:ea:10: 59:9f:ca:b3:ad:a8:ea:a5:5c:0e:a8:5a:c5:cf:44:6a:e2:8f: b0:45:15:96:63:5b:f2:e7:0e:7a:cc:46:3a:8a:50:90:d1:07: 24:36:f0:16:70:ec:69:69:a1:bc:05:91:4f:98:e4:24:37:02: d0:7b:82:17:70:79:cd:8a:dd:6b:80:bd:62:76:d2:ad:2e:91: bf:80:ff:54:68:e5:ca:88:6c:f3:39:c2:49:63:df:bb:4a:78: 22:da:47:75:2c:fb:55:d8:18:aa:bb:84:71:ef:05:7f:5a:dd: 5f:47:93:b9:92:71:0d:7d:fe:f4:30:9e:ed:d0:39:61:f9:92: 45:ad:43:c0:76:02:db:81:29:23:60:ff:f9:57:f3:86:20:55: 40:3d:b6:e6:5c:4d:8f:c2:cd:f5:7d:84:d0:77:45:75:e8:54: 08:34:98:26:ae:1b:99:30:57:70:da:23:2a:bb:90:47:14:bf: f1:74:64:54:23:16:5e:31:b8:e1:b4:da:ce:36:d0:03:2a:1b: df:8b:1d:d3:5c:11:ce:b5:9c:c3:b5:13:62:5a:8a:4c:23:a3: af:32:83:33:f6:47:15:79:42:28:c2:64:3d:63:cd:e1:2f:3a: 8a:fa:1c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYxTp9/DZ92qXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDk4ZjgwMmItNTkzMC00Nzc2LWE4NDMtNDBmM2QxNWIxNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJGZ/xtOacwZqJvbmeapbUcvyV1kx8zELLK+ H+sMS9Ab/7UjGnYUDXs06eHnn4De19roKdX/dkGlYYeXmRUPMOsh6NnLcq1hYTUi aZTJUBllpyAjZzSVPgbQMI+EbP9VXgP6kVtMF05NUmXbawLPyYdtGwitSMvzwDuk 6xaOmorOP/94jtnjVTsIWl9W3OdkPLzzb6wTGQZzD3ffbqtvqNj/f6KQtV5j1ZMZ 7TyKDbL70TYEVTB92UEilEIsVAid+j0QQ6QYdenAn4Pf/tvEd2e9grDSHnOrtFnx DXGeDxUTdX1t8x+qoNN7nIec3VRr2g537EgbMDkz7z7Sy81aJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0kiU094R2pFxII3cSuzWXvDExMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjhmYTQ3YTQtOGMxNi0z ZTZhLWEyZGEtZDBmNmFiZjJkYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqN7j5sgpO1gCwzDMnSobTqEFmfyrOtqOqlXA6oWsXPRGrij7BFFZZj W/LnDnrMRjqKUJDRByQ28BZw7GlpobwFkU+Y5CQ3AtB7ghdwec2K3WuAvWJ20q0u kb+A/1Ro5cqIbPM5wklj37tKeCLaR3Us+1XYGKq7hHHvBX9a3V9Hk7mScQ19/vQw nu3QOWH5kkWtQ8B2AtuBKSNg//lX84YgVUA9tuZcTY/CzfV9hNB3RXXoVAg0mCau G5kwV3DaIyq7kEcUv/F0ZFQjFl4xuOG02s420AMqG9+LHdNcEc61nMO1E2Jaikwj o68ygzP2RxV5QijCZD1jzeEvOor6HNQ= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:42 2025 by rpki-client