$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08808117-e9bf-3f7c-997f-7dffa22721e2.roa File: 08808117-e9bf-3f7c-997f-7dffa22721e2.roa (raw, json) Hash identifier: ZTLlIaC72Zz45BdebntxMfkH+O226p23YYxCtBw3fjE= Subject key identifier: 4D:AF:B7:CC:D8:47:D1:26:1A:53:1D:A3:33:FF:56:8A:81:03:F6:76 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490881940EDE812834489DC340 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08808117-e9bf-3f7c-997f-7dffa22721e2.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:94:0e:de:81:28:34:48:9d:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=0bfd05f9-85f6-4235-a163-3609c7951b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9c:a7:54:be:62:9a:34:1f:ba:87:40:ce:6f: c1:16:c9:14:56:a2:55:36:b7:3f:4a:86:b4:30:25: ae:5f:2d:5c:17:c6:2f:65:fc:cb:82:49:48:e3:5b: af:6c:d2:89:27:18:52:42:a1:80:d5:86:54:67:55: 33:b5:6f:6f:c6:97:71:e3:43:9a:2c:9b:ee:0d:1e: ef:b0:ac:dd:23:eb:4a:9b:0e:3a:53:8c:fa:17:50: fc:a1:8c:41:15:85:74:22:0a:cc:4c:d9:2a:3e:f4: 39:ff:0e:a7:c1:b1:ea:26:76:d6:da:4e:b8:4d:4b: 8c:2c:a4:cb:12:0b:07:f8:09:c4:3e:27:cd:b8:1f: f6:06:b5:f5:f7:7f:dd:0f:1b:52:f4:4b:ab:1e:ac: 3f:37:c1:7a:b0:17:79:1b:a7:e9:fb:17:9f:25:e1: fa:72:1e:15:94:09:32:78:e2:16:79:f5:c2:ad:d3: 4b:1b:11:75:25:21:8f:84:af:64:f4:9e:35:fa:e0: da:48:e5:bf:1a:53:bf:4e:1f:04:7e:ba:20:95:71: 91:24:8f:20:45:d0:79:2a:87:4c:c4:91:42:50:95: 43:2b:6d:38:c9:7a:63:df:6e:3b:c6:04:fc:ad:4b: e5:7b:c3:13:bf:7c:1b:db:67:7b:f3:96:71:75:d1: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AF:B7:CC:D8:47:D1:26:1A:53:1D:A3:33:FF:56:8A:81:03:F6:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/08808117-e9bf-3f7c-997f-7dffa22721e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a5:d3:cf:91:0b:88:7a:55:f7:f9:92:5d:13:c8:5f:22:88: 17:68:52:5e:ac:7c:84:97:29:0c:6b:6e:0e:5d:20:87:70:8d: 76:8b:e3:1d:16:29:05:58:de:51:e4:83:42:0a:4f:2c:6c:ef: da:a1:df:c4:9b:01:63:38:e4:e7:78:b2:af:0b:8f:de:68:e9: c2:0d:6b:7d:8b:81:35:7a:51:8d:b1:78:2e:9a:02:6d:6c:0a: 7d:31:0a:cc:11:cd:c5:41:61:53:31:19:e3:70:ca:c9:7c:8d: c3:ae:85:95:88:e6:b2:ef:2e:83:81:20:aa:d0:4a:da:e1:c8: 37:ae:f9:af:45:ff:02:14:02:bb:35:c9:bf:7c:97:71:b6:ac: 75:5b:1f:bd:73:35:4d:65:ec:c4:01:dc:2a:dd:fb:e9:cf:00: 45:1f:7d:40:0f:7d:84:a6:17:ca:d6:59:c1:83:ee:d0:f4:32: 79:a3:68:1a:a9:ac:68:ed:1d:89:6c:83:2e:eb:9d:00:5e:99: f4:e8:84:ba:9f:a2:08:4e:24:d1:9b:8c:e6:07:b2:7c:43:49: 1d:2b:7e:0e:14:c5:39:40:1c:25:f4:f7:5d:17:e6:d2:a9:86: 53:78:73:d7:f5:0f:e9:eb:3d:c6:88:d9:43:d2:a3:c3:a7:d9: 0e:6b:53:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZQO3oEoNEidw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MGJmZDA1ZjktODVmNi00MjM1LWExNjMtMzYwOWM3OTUxYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpynVL5imjQfuodAzm/BFskUVqJVNrc/Soa0 MCWuXy1cF8YvZfzLgklI41uvbNKJJxhSQqGA1YZUZ1UztW9vxpdx40OaLJvuDR7v sKzdI+tKmw46U4z6F1D8oYxBFYV0IgrMTNkqPvQ5/w6nwbHqJnbW2k64TUuMLKTL EgsH+AnEPifNuB/2BrX193/dDxtS9EurHqw/N8F6sBd5G6fp+xefJeH6ch4VlAky eOIWefXCrdNLGxF1JSGPhK9k9J41+uDaSOW/GlO/Th8EfroglXGRJI8gRdB5KodM xJFCUJVDK204yXpj3247xgT8rUvle8MTv3wb22d785ZxddG1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2vt8zYR9EmGlMdozP/VoqBA/Z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDg4MDgxMTctZTliZi0z ZjdjLTk5N2YtN2RmZmEyMjcyMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKl08+RC4h6Vff5kl0TyF8iiBdoUl6sfISXKQxrbg5dIIdwjXaL4x0W KQVY3lHkg0IKTyxs79qh38SbAWM45Od4sq8Lj95o6cINa32LgTV6UY2xeC6aAm1s Cn0xCswRzcVBYVMxGeNwysl8jcOuhZWI5rLvLoOBIKrQStrhyDeu+a9F/wIUArs1 yb98l3G2rHVbH71zNU1l7MQB3Crd++nPAEUffUAPfYSmF8rWWcGD7tD0MnmjaBqp rGjtHYlsgy7rnQBemfTohLqfoghOJNGbjOYHsnxDSR0rfg4UxTlAHCX0910X5tKp hlN4c9f1D+nrPcaI2UPSo8On2Q5rU0g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:20 2025 by rpki-client