$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa File: fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa (raw, json) Hash identifier: /ijMMTBMeo6W9wtgHBzMlsBOy+Jb7xc0i9aR6SYJ3sg= Subject key identifier: 61:51:10:7F:2B:77:FB:7B:FB:71:59:81:A5:09:F6:E9:04:78:DF:2A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69D93370234F3A15BFF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9d:93:37:02:34:f3:a1:5b:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=a8e5b92b-827c-403b-91e1-3bdc5c6ccd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:88:80:4a:df:e5:45:cd:d9:13:26:98:68: ef:38:14:a1:fd:4b:dc:b7:b4:1e:63:1f:65:d4:8b: bd:77:92:72:7b:a4:2a:30:8c:14:bc:90:53:17:0c: 36:ac:33:37:9b:b0:9a:76:12:a8:2b:5b:a8:4a:a3: 18:96:cf:f0:fe:31:75:6a:13:eb:12:30:cf:9c:64: c4:96:12:57:74:87:29:84:70:80:92:e5:03:9b:b4: c0:89:0e:c3:2d:f5:17:08:13:3e:37:c7:5c:08:0b: 94:05:5a:45:94:3e:fc:b6:10:6d:44:57:5b:5d:62: c7:9a:e5:4c:4a:e8:6b:49:f1:3b:6a:cf:d1:48:eb: d2:03:f4:53:1c:5a:62:3b:83:2d:5b:72:82:23:be: 58:73:a8:f0:6e:ce:f4:56:2c:4b:b2:3c:9b:1a:4b: 34:03:97:2e:f2:84:16:20:2d:cf:b1:c7:44:d5:be: 3d:8d:39:d1:80:db:97:7a:c0:e9:14:fb:fc:c2:13: 34:49:f6:0f:25:09:19:d8:00:12:f1:12:99:db:95: 98:12:d7:8d:22:54:0d:f5:82:f3:22:a4:dc:6b:a1: 0a:5f:31:4f:98:ab:67:83:e2:75:d4:f6:7c:46:75: 7a:c7:52:98:47:10:51:b7:b6:ca:27:0a:b8:90:dc: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:51:10:7F:2B:77:FB:7B:FB:71:59:81:A5:09:F6:E9:04:78:DF:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb65c8f7-c6d2-32f9-bff9-66628b24a5d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8d:75:67:90:02:f1:06:d0:d0:78:e7:c2:1e:66:0d:30:50: eb:72:57:6a:20:98:46:d1:a8:18:f6:c9:be:25:9c:8e:1d:6c: d1:07:9e:7d:6c:65:a3:15:6e:32:a6:d0:30:4c:e8:2c:0f:6b: fe:44:f4:32:4e:f2:cb:c0:d5:42:75:2f:e2:de:33:92:fd:e1: 97:b9:34:28:53:4d:87:20:22:aa:47:66:e1:c0:2d:90:c1:ed: 75:65:d2:68:05:2b:8d:e8:1d:44:c4:05:71:87:ae:11:69:05: ad:d6:ed:cd:bb:bd:7f:3a:5d:f4:11:f5:33:bd:9b:1d:d7:44: 2e:84:96:12:cd:3f:60:d0:66:38:b5:71:7e:8f:cf:0c:3a:c3: 95:cd:67:ec:47:55:bb:2b:64:66:49:bc:a9:6c:ab:b4:c2:6c: c0:fa:1e:bf:e4:66:73:5f:9c:b8:35:ad:dc:f0:ad:59:32:76: 63:62:f7:79:3f:58:5c:64:f7:e1:5a:96:1b:c8:aa:d8:1f:d7: cf:aa:94:59:35:44:6f:ba:21:4f:d5:50:22:8f:4e:39:59:6e: 33:d4:e6:3a:ec:65:2f:b0:e0:04:46:ff:ec:0e:42:be:fd:40: 7e:c3:b3:48:da:76:7d:94:fa:62:03:c2:1b:20:3c:04:1c:82: 71:a2:ff:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p2TNwI086Fb/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk YThlNWI5MmItODI3Yy00MDNiLTkxZTEtM2JkYzVjNmNjZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JqIgErf5UXN2RMmmGjvOBSh/Uvct7QeYx9l 1Iu9d5Jye6QqMIwUvJBTFww2rDM3m7CadhKoK1uoSqMYls/w/jF1ahPrEjDPnGTE lhJXdIcphHCAkuUDm7TAiQ7DLfUXCBM+N8dcCAuUBVpFlD78thBtRFdbXWLHmuVM SuhrSfE7as/RSOvSA/RTHFpiO4MtW3KCI75Yc6jwbs70VixLsjybGks0A5cu8oQW IC3PscdE1b49jTnRgNuXesDpFPv8whM0SfYPJQkZ2AAS8RKZ25WYEteNIlQN9YLz IqTca6EKXzFPmKtng+J11PZ8RnV6x1KYRxBRt7bKJwq4kNxt/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFREH8rd/t7+3FZgaUJ9ukEeN8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmI2NWM4ZjctYzZkMi0z MmY5LWJmZjktNjY2MjhiMjRhNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuNdWeQAvEG0NB458IeZg0wUOtyV2ogmEbRqBj2yb4lnI4dbNEHnn1s ZaMVbjKm0DBM6CwPa/5E9DJO8svA1UJ1L+LeM5L94Ze5NChTTYcgIqpHZuHALZDB 7XVl0mgFK43oHUTEBXGHrhFpBa3W7c27vX86XfQR9TO9mx3XRC6ElhLNP2DQZji1 cX6Pzww6w5XNZ+xHVbsrZGZJvKlsq7TCbMD6Hr/kZnNfnLg1rdzwrVkydmNi93k/ WFxk9+FalhvIqtgf18+qlFk1RG+6IU/VUCKPTjlZbjPU5jrsZS+w4ARG/+wOQr79 QH7Ds0jadn2U+mIDwhsgPAQcgnGi/ws= -----END CERTIFICATE-----Generated at Sat Apr 5 04:34:20 2025 by rpki-client