$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa File: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (raw, json) Hash identifier: 4v2jnVSaOczwf7ANFBEsIK9YeURi2vhxgWlXQELtgo8= Subject key identifier: CD:97:AD:31:CD:81:77:56:A2:F1:88:C8:30:C6:8B:66:80:27:B6:27 Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F432858489075FF09357A1D6208971800 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 32242 IP address blocks: 172.102.2.0/24 maxlen: 24 172.102.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:ff:09:35:7a:1d:62:08:97:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=621f6e57-aa16-4239-a0ae-6b7409b547d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:99:e3:f9:34:dd:14:6c:4b:7d:39:77:a0: 16:b5:48:fa:4b:b5:a8:0a:16:e5:ed:d7:63:6f:f3: f0:e2:22:20:c8:ad:3e:35:4b:f9:af:a0:23:2e:21: 3c:53:8f:09:92:cc:03:1e:75:b7:a7:0c:af:cd:e1: 32:8b:96:54:5c:67:14:be:e1:01:ee:88:4d:21:34: 0a:a5:fe:9f:62:22:8b:dd:a2:92:97:f5:b8:ca:1b: 4d:43:01:48:17:c7:7b:10:86:e9:b4:bf:b8:4b:aa: 42:08:53:0a:9b:01:97:fb:10:56:89:29:ca:d5:44: d6:ae:e0:20:3e:41:f6:bb:1f:cd:c2:61:8b:5f:a1: b3:26:76:27:72:4d:cb:72:f7:33:ff:36:60:5d:6a: ab:7c:5a:6d:0c:88:82:c3:3f:4e:54:fd:55:d2:1d: b2:ee:de:c8:2d:ae:85:0d:4a:c1:b1:69:0c:47:1f: c1:3f:28:b6:4f:75:f7:eb:60:4d:81:5d:29:b6:5b: 5b:d3:06:a3:a7:44:66:55:d2:f9:16:e2:cd:96:3d: 66:a1:95:48:c7:41:95:aa:8f:59:52:86:b7:40:46: ae:72:7f:94:84:d8:78:51:a1:29:34:2e:75:89:06: 6b:1d:17:10:36:e4:46:99:ea:95:3a:8e:d8:da:2b: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:97:AD:31:CD:81:77:56:A2:F1:88:C8:30:C6:8B:66:80:27:B6:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv4: 172.102.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3e:25:5e:ca:a3:84:b4:ed:c7:28:c0:05:01:a2:a3:81:47: 5a:b3:41:5c:1f:77:48:42:b1:9a:19:89:52:80:20:e6:50:25: a5:67:8f:94:f8:f5:1b:a9:34:0c:99:ac:d7:37:4f:18:37:f9: c7:27:c0:4e:26:9f:75:d7:88:48:13:5b:1d:24:33:65:9a:56: 62:08:40:a5:6e:9e:a7:89:b0:19:46:2b:bb:0e:e4:7b:05:f3: b9:a7:fd:07:f4:ad:51:a7:e6:6d:33:24:72:a6:46:32:87:b2: 85:0f:01:a1:c7:56:e9:3a:e2:76:f7:10:e5:cd:f9:95:3a:cb: 56:e1:86:81:6e:95:af:e4:8e:a6:74:56:c4:29:d1:07:7a:94: ec:86:ff:45:1f:3f:cc:a9:67:38:d8:44:63:b3:73:9a:48:21: 1f:98:ce:8f:72:8c:17:d4:8f:84:24:c7:74:79:85:18:2d:72: ed:fd:60:e8:68:13:07:71:9d:3b:42:25:6b:55:63:49:5a:39: e6:98:09:5e:cb:be:53:81:d0:7b:d3:bc:bf:99:d9:f0:3c:45: 63:71:4f:4f:c7:73:8a:45:40:dd:70:2e:5a:73:8b:3b:8a:07: b7:91:44:67:91:fc:8d:05:39:96:84:76:0d:b1:a7:75:7b:ae: c0:bf:92:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdf8JNXodYgiXGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk NjIxZjZlNTctYWExNi00MjM5LWEwYWUtNmI3NDA5YjU0N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoKZ4/k03RRsS305d6AWtUj6S7WoChbl7ddj b/Pw4iIgyK0+NUv5r6AjLiE8U48JkswDHnW3pwyvzeEyi5ZUXGcUvuEB7ohNITQK pf6fYiKL3aKSl/W4yhtNQwFIF8d7EIbptL+4S6pCCFMKmwGX+xBWiSnK1UTWruAg PkH2ux/NwmGLX6GzJnYnck3Lcvcz/zZgXWqrfFptDIiCwz9OVP1V0h2y7t7ILa6F DUrBsWkMRx/BPyi2T3X362BNgV0ptltb0wajp0RmVdL5FuLNlj1moZVIx0GVqo9Z Uoa3QEaucn+UhNh4UaEpNC51iQZrHRcQNuRGmeqVOo7Y2isi2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2XrTHNgXdWovGIyDDGi2aAJ7YnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvNzBlYjJkMDktYmY1MS0z NzkzLThhZjMtODMxMjE3YjhhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY+JV7Ko4S07ccowAUBoqOBR1qzQVwfd0hCsZoZiVKAIOZQJaVnj5T4 9RupNAyZrNc3Txg3+ccnwE4mn3XXiEgTWx0kM2WaVmIIQKVunqeJsBlGK7sO5HsF 87mn/Qf0rVGn5m0zJHKmRjKHsoUPAaHHVuk64nb3EOXN+ZU6y1bhhoFula/kjqZ0 VsQp0Qd6lOyG/0UfP8ypZzjYRGOzc5pIIR+Yzo9yjBfUj4Qkx3R5hRgtcu39YOho EwdxnTtCJWtVY0laOeaYCV7LvlOB0HvTvL+Z2fA8RWNxT0/Hc4pFQN1wLlpzizuK B7eRRGeR/I0FOZaEdg2xp3V7rsC/ksc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:39:31 2025 by rpki-client