$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa File: 0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa (raw, json) Hash identifier: JNCFVKNIatico+1cppteDrOKPdNatBxAk84BYBxlIV8= Subject key identifier: BC:62:1E:64:C0:80:AB:B2:E0:C8:A7:A6:CD:89:73:6E:EB:B8:4F:A1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69AF6420BE1CA3BD6FF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9a:f6:42:0b:e1:ca:3b:d6:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=13f2e12c-2756-4ff3-8c93-93b1431c44f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:27:3d:f6:f3:ca:ce:67:a3:4d:4e:3e:79: 29:85:29:61:6c:8e:05:04:f8:6a:36:e1:0d:2d:5a: ab:d6:26:9f:66:be:40:f8:ac:72:11:37:be:42:51: 5c:a1:c4:74:83:23:cf:ff:75:c6:98:b3:cd:2b:83: 34:d2:a6:ff:bb:2a:ea:e8:1e:6b:70:bf:6c:6c:6d: dc:a6:f2:08:24:68:31:12:12:80:08:85:d9:81:76: 59:c4:21:f4:b7:b3:92:92:53:0f:b6:89:19:6c:c3: c9:4d:36:d2:9b:8d:ad:a4:32:a3:39:fc:88:e6:60: 80:a1:c5:22:53:3c:73:02:a4:f7:86:a3:d1:7e:61: 46:2b:d4:f4:6d:a7:91:65:a6:3d:2c:3d:0c:5b:7d: da:f6:d0:3c:42:71:68:97:27:38:4a:4e:f9:be:64: 53:b3:a6:cb:e8:e4:7d:10:2a:07:ac:91:67:8a:33: 63:fb:a4:fc:d4:1d:3a:32:4c:3d:5d:90:c4:cd:b0: 6d:23:e1:da:17:b0:88:74:0b:22:86:d6:a5:33:32: fa:10:42:38:46:d5:16:30:54:03:68:ce:e0:81:07: 0b:a9:b5:00:22:15:60:ea:15:53:92:f2:47:64:55: 45:f5:45:2d:c2:ba:97:f1:22:7e:c7:96:1a:85:c3: e1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:62:1E:64:C0:80:AB:B2:E0:C8:A7:A6:CD:89:73:6E:EB:B8:4F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d807cbb-a42b-3c3d-bd5d-88a0ec4c81a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2c:84:58:1d:1f:84:63:18:05:5b:49:10:c9:95:f2:be:89: 98:cd:6d:bc:ff:c4:0b:f5:f8:0f:96:86:c4:d7:ee:f1:e5:a3: 30:95:95:a2:d5:ac:37:63:ec:09:0f:23:d6:fe:6e:19:cb:6f: 1a:98:25:8c:81:35:18:f9:68:e2:11:58:0f:e1:43:e4:81:33: 34:de:f0:47:36:c4:9b:2b:da:8e:ac:0b:c5:e1:10:e7:90:0b: 34:f5:5e:29:2c:da:e0:99:ea:d9:f9:66:88:0e:60:03:db:b7: 73:59:0b:b6:a5:e1:86:2b:92:a9:4b:b6:53:3c:8c:aa:57:22: b1:94:be:13:55:83:74:36:52:3c:a0:f6:f9:b0:50:f7:e0:1b: 38:10:4c:d4:9f:85:73:23:1e:c5:ca:8a:9e:66:20:f5:de:74: d8:45:c2:f0:59:13:78:4a:c4:93:2a:26:45:7d:8b:ce:4b:24: 1f:90:a9:7e:44:eb:bc:40:f0:b1:2b:3c:83:24:cb:48:e5:55: e5:36:45:1b:bb:19:d1:ad:12:a8:bb:0e:f5:71:f6:9b:52:03: 28:0c:3c:aa:99:79:4f:f5:9c:d6:07:ed:10:3b:02:32:b6:d5: 3a:ac:96:9a:8e:6b:ce:39:8b:de:41:40:97:04:f5:24:93:1f: 74:52:fe:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pr2QgvhyjvW/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MTNmMmUxMmMtMjc1Ni00ZmYzLThjOTMtOTNiMTQzMWM0NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl8nPfbzys5no01OPnkphSlhbI4FBPhqNuEN LVqr1iafZr5A+KxyETe+QlFcocR0gyPP/3XGmLPNK4M00qb/uyrq6B5rcL9sbG3c pvIIJGgxEhKACIXZgXZZxCH0t7OSklMPtokZbMPJTTbSm42tpDKjOfyI5mCAocUi UzxzAqT3hqPRfmFGK9T0baeRZaY9LD0MW33a9tA8QnFolyc4Sk75vmRTs6bL6OR9 ECoHrJFnijNj+6T81B06Mkw9XZDEzbBtI+HaF7CIdAsihtalMzL6EEI4RtUWMFQD aM7ggQcLqbUAIhVg6hVTkvJHZFVF9UUtwrqX8SJ+x5YahcPhgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxiHmTAgKuy4Minps2Jc27ruE+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGQ4MDdjYmItYTQyYi0z YzNkLWJkNWQtODhhMGVjNGM4MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcshFgdH4RjGAVbSRDJlfK+iZjNbbz/xAv1+A+WhsTX7vHlozCVlaLV rDdj7AkPI9b+bhnLbxqYJYyBNRj5aOIRWA/hQ+SBMzTe8Ec2xJsr2o6sC8XhEOeQ CzT1Xiks2uCZ6tn5ZogOYAPbt3NZC7al4YYrkqlLtlM8jKpXIrGUvhNVg3Q2Ujyg 9vmwUPfgGzgQTNSfhXMjHsXKip5mIPXedNhFwvBZE3hKxJMqJkV9i85LJB+QqX5E 67xA8LErPIMky0jlVeU2RRu7GdGtEqi7DvVx9ptSAygMPKqZeU/1nNYH7RA7AjK2 1TqslpqOa845i95BQJcE9SSTH3RS/jk= -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:50 2025 by rpki-client