$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd00342d-b538-3526-8e2d-196842108c4a.roa File: fd00342d-b538-3526-8e2d-196842108c4a.roa (raw, json) Hash identifier: 9yZjE/fCgsDs9ksK4wCaXFNwkiArz+QHUUeyFFpsheg= Subject key identifier: D8:62:15:71:73:32:E7:65:59:7C:BA:B2:81:42:6A:DF:9A:91:34:49 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858419BCBD149BA48A522AB662880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd00342d-b538-3526-8e2d-196842108c4a.roa Signing time: Tue 18 Apr 2023 12:00:00 +0000 ROA not before: Tue 18 Apr 2023 12:00:00 +0000 ROA not after: Sun 11 Jun 2028 04:00:00 +0000 asID: 13335 IP address blocks: 172.69.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:9b:cb:d1:49:ba:48:a5:22:ab:66:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 18 12:00:00 2023 GMT Not After : Jun 11 04:00:00 2028 GMT Subject: CN=5a6e2c0d-8b42-4e4c-a67c-09a7f18d4dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:36:65:c4:81:f7:cc:01:63:1e:eb:c5:a7: 08:5c:94:d0:15:53:3c:d0:60:d5:bc:9d:3a:84:87: 5c:dc:3c:ce:1b:aa:47:da:f2:e0:ad:63:8f:b8:64: 5c:6f:4c:d6:17:00:c4:da:ae:1f:b7:80:23:db:9c: 59:e4:b2:39:06:20:6c:03:17:2a:73:91:63:98:cb: f5:50:61:92:04:e2:ef:be:d7:3b:5e:cc:96:7f:a7: e8:63:43:48:16:c1:cd:7d:b2:14:85:4c:26:65:79: 76:48:41:1e:4c:7e:5c:24:1c:50:3a:55:20:87:6e: 9a:9b:28:09:08:a3:32:14:17:9b:19:bb:02:e6:9a: 29:1d:70:bc:ff:26:5d:ca:7b:7e:cb:f2:00:34:ad: cf:93:e5:17:09:ba:44:0e:a6:1e:45:85:d2:bd:a6: 50:d4:8c:ae:48:39:4f:b6:55:e6:c2:77:f9:b5:87: ff:71:41:e6:c6:f2:9c:c6:c1:db:92:22:1c:d8:6c: 41:03:d2:46:88:cc:9c:20:28:86:08:e5:39:73:79: 68:57:9d:78:f8:d6:b4:38:b9:94:b7:62:f6:dc:09: 45:2e:83:3d:6c:8e:9e:c5:00:f9:b9:af:6d:1d:40: fb:b0:fc:a6:08:cf:aa:4a:43:1c:48:58:e7:75:d9: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:62:15:71:73:32:E7:65:59:7C:BA:B2:81:42:6A:DF:9A:91:34:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd00342d-b538-3526-8e2d-196842108c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:53:72:0d:3a:50:aa:99:c1:97:7f:5b:8c:c9:b7:57:3a:58: 75:f1:a8:ad:b8:76:1a:1a:52:16:3e:ff:0f:06:e9:10:c9:cc: d3:52:e2:ff:19:de:ee:c9:dc:f4:79:37:bd:5e:d1:5a:c0:cb: 7e:e9:ae:01:a1:e6:02:d4:d3:07:00:07:b6:34:f5:51:41:aa: f9:c1:f1:04:74:9a:69:7d:b3:6c:be:d5:4e:bb:5c:63:e6:14: e7:76:ae:2c:17:ce:91:45:e5:16:79:2d:64:5f:20:63:fd:f2: 02:bc:37:31:d7:49:f0:04:cb:c6:b7:fc:ed:50:4d:5f:32:4e: a8:a6:b0:cc:5a:7b:65:96:bf:4a:ae:01:6a:b8:00:cf:fc:32: a5:2d:4a:5f:21:63:1f:7a:9c:06:3c:81:0b:f2:08:fc:9c:e3: 93:48:13:bb:d2:33:20:be:92:89:50:90:a6:47:21:5e:f1:d1: 92:87:0a:1d:cf:88:a8:6b:be:34:01:d9:a1:15:5e:be:d0:90: 70:2e:cd:f6:ac:86:ab:6a:11:2f:23:a9:72:b9:3b:05:ee:a5: 0d:a3:90:bf:82:e3:1e:6e:d2:3a:c6:71:98:5a:49:5a:b6:d0: 5e:fe:81:6c:51:4b:c2:92:a9:af:0d:e8:3f:21:39:a7:ec:bf: 72:ec:f5:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGby9FJukilIqtmKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTIzMDQxODEyMDAwMFoXDTI4MDYxMTA0MDAwMFowLzEtMCsGA1UEAxMk NWE2ZTJjMGQtOGI0Mi00ZTRjLWE2N2MtMDlhN2YxOGQ0ZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqI2ZcSB98wBYx7rxacIXJTQFVM80GDVvJ06 hIdc3DzOG6pH2vLgrWOPuGRcb0zWFwDE2q4ft4Aj25xZ5LI5BiBsAxcqc5FjmMv1 UGGSBOLvvtc7XsyWf6foY0NIFsHNfbIUhUwmZXl2SEEeTH5cJBxQOlUgh26amygJ CKMyFBebGbsC5popHXC8/yZdynt+y/IANK3Pk+UXCbpEDqYeRYXSvaZQ1IyuSDlP tlXmwnf5tYf/cUHmxvKcxsHbkiIc2GxBA9JGiMycICiGCOU5c3loV514+Na0OLmU t2L23AlFLoM9bI6exQD5ua9tHUD7sPymCM+qSkMcSFjnddm5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhiFXFzMudlWXy6soFCat+akTRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmQwMDM0MmQtYjUzOC0z NTI2LThlMmQtMTk2ODQyMTA4YzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVTcg06UKqZwZd/W4zJt1c6WHXxqK24dhoaUhY+/w8G6RDJzNNS4v8Z 3u7J3PR5N71e0VrAy37prgGh5gLU0wcAB7Y09VFBqvnB8QR0mml9s2y+1U67XGPm FOd2riwXzpFF5RZ5LWRfIGP98gK8NzHXSfAEy8a3/O1QTV8yTqimsMxae2WWv0qu AWq4AM/8MqUtSl8hYx96nAY8gQvyCPyc45NIE7vSMyC+kolQkKZHIV7x0ZKHCh3P iKhrvjQB2aEVXr7QkHAuzfashqtqES8jqXK5OwXupQ2jkL+C4x5u0jrGcZhaSVq2 0F7+gWxRS8KSqa8N6D8hOafsv3Ls9Tg= -----END CERTIFICATE-----Generated at Sun Feb 16 16:04:22 2025 by rpki-client