$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff05a450-20a6-3063-b7c0-11cc2d69784e.roa File: ff05a450-20a6-3063-b7c0-11cc2d69784e.roa (raw, json) Hash identifier: tSyJ3zp70mg9iBFRefcv/oSIU5rsFjnGOGcnxmJ1jlM= Subject key identifier: 13:9F:B9:75:21:8D:BF:94:73:60:6C:96:72:A8:24:C5:56:49:69:A8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C0D4723E4C3D131995D10 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff05a450-20a6-3063-b7c0-11cc2d69784e.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:0d:47:23:e4:c3:d1:31:99:5d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=f67db17c-e57d-4388-b20e-a0624a14e76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3c:4e:64:5d:1d:11:c0:1f:8e:68:13:4b:9b: 8b:a9:23:b7:9b:6e:4f:53:fb:ba:bf:ea:74:b8:c8: 50:f2:50:2a:3b:7c:37:37:5d:02:b2:63:a1:ed:c5: 01:2c:0e:45:26:75:0b:62:44:d4:75:c0:52:02:96: 9b:56:a2:2f:a4:1b:f4:51:c2:17:45:30:40:22:fa: 06:82:99:51:32:ea:d7:c1:00:cd:99:9d:01:07:2e: c8:d5:ad:39:91:a9:39:58:0e:4a:3b:a5:41:63:53: e2:49:51:62:6e:da:fc:cc:3c:81:e0:df:2e:34:6b: e3:e2:c9:07:16:8a:f5:d3:18:28:62:7d:9a:c6:ca: 6c:cb:a2:5c:c1:90:54:15:d5:64:f0:26:ac:e3:35: e2:f2:14:5f:29:cf:b3:0c:00:af:83:4b:73:dd:6a: 63:03:be:f7:9a:dc:00:25:03:24:b9:32:1e:5f:bf: 4e:4a:0a:a2:a6:5e:25:d7:4d:50:e7:66:dd:d9:fb: 31:1f:b2:f0:ca:9a:fc:1a:7b:47:8e:01:5b:05:b3: bc:08:b0:14:57:3d:d7:f5:90:af:5e:a3:5f:c6:6f: 5a:14:3f:d5:f4:10:1c:a0:2e:af:12:20:f1:b9:c4: 65:36:4a:49:78:0c:9c:bb:35:9b:94:50:98:92:0c: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9F:B9:75:21:8D:BF:94:73:60:6C:96:72:A8:24:C5:56:49:69:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff05a450-20a6-3063-b7c0-11cc2d69784e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:52:da:2b:32:9a:d1:59:be:53:d2:61:29:9c:8c:92:c1:46: 96:3f:ba:20:ea:b0:be:09:11:43:7a:1d:10:ea:9c:a2:79:29: 45:3c:24:71:ce:b3:e5:48:b9:49:04:a6:97:26:96:75:3a:69: b4:df:41:11:ef:0e:cc:29:42:97:1a:fc:e0:02:67:da:f0:fb: 38:8c:00:8e:a8:86:19:c5:3e:1b:ed:2b:99:c7:6d:71:95:e5: ca:ab:ca:4b:24:1a:6a:84:05:f1:04:c0:77:38:c7:b9:a8:c8: 9b:e5:b5:b2:2b:57:59:7e:cb:46:0d:6e:b8:31:97:01:05:01: c5:8c:c3:01:8d:56:b8:06:3e:56:c1:88:dd:7c:e0:5a:ea:50: 34:8b:90:3c:16:51:3a:04:fb:01:99:bb:db:7d:26:00:cd:3b: 5a:c7:93:0a:e4:82:d3:e1:a7:4e:36:aa:8f:31:3a:91:37:85: 74:35:d6:d9:f5:42:80:ec:3a:eb:53:c9:88:e5:ea:22:98:d6: 3c:81:73:53:f0:21:fc:25:24:68:03:b3:31:ca:cd:50:51:93: 8e:3d:b8:4a:f0:17:ac:d9:c6:e0:51:4b:8f:1a:f4:b4:9a:19: cd:5b:39:20:3b:86:95:44:45:4b:24:b4:c6:a3:e3:6b:16:c5: 5e:1c:ab:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTA1HI+TD0TGZXRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZjY3ZGIxN2MtZTU3ZC00Mzg4LWIyMGUtYTA2MjRhMTRlNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DxOZF0dEcAfjmgTS5uLqSO3m25PU/u6v+p0 uMhQ8lAqO3w3N10CsmOh7cUBLA5FJnULYkTUdcBSApabVqIvpBv0UcIXRTBAIvoG gplRMurXwQDNmZ0BBy7I1a05kak5WA5KO6VBY1PiSVFibtr8zDyB4N8uNGvj4skH For10xgoYn2axspsy6JcwZBUFdVk8Cas4zXi8hRfKc+zDACvg0tz3WpjA773mtwA JQMkuTIeX79OSgqipl4l101Q52bd2fsxH7Lwypr8GntHjgFbBbO8CLAUVz3X9ZCv XqNfxm9aFD/V9BAcoC6vEiDxucRlNkpJeAycuzWblFCYkgyMqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOfuXUhjb+Uc2BslnKoJMVWSWmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmYwNWE0NTAtMjBhNi0z MDYzLWI3YzAtMTFjYzJkNjk3ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1S2isymtFZvlPSYSmcjJLBRpY/uiDqsL4JEUN6HRDqnKJ5KUU8JHHO s+VIuUkEppcmlnU6abTfQRHvDswpQpca/OACZ9rw+ziMAI6ohhnFPhvtK5nHbXGV 5cqrykskGmqEBfEEwHc4x7moyJvltbIrV1l+y0YNbrgxlwEFAcWMwwGNVrgGPlbB iN184FrqUDSLkDwWUToE+wGZu9t9JgDNO1rHkwrkgtPhp042qo8xOpE3hXQ11tn1 QoDsOutTyYjl6iKY1jyBc1PwIfwlJGgDszHKzVBRk449uErwF6zZxuBRS48a9LSa Gc1bOSA7hpVERUsktMaj42sWxV4cq+A= -----END CERTIFICATE-----Generated at Sat Apr 5 10:07:44 2025 by rpki-client