$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa File: 144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa (raw, json) Hash identifier: e0MxcYmMgN+LixCayykNP9OFfVu1rx6NITSyciqGkxg= Subject key identifier: 4A:5C:A0:9F:DC:BB:98:D3:59:AC:43:AC:B3:97:48:6C:D6:15:E3:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818ECE738B890840C73280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8e:ce:73:8b:89:08:40:c7:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=54e90f1f-c6c8-49e2-a8b9-432d2b486a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2f:8a:86:03:c8:bd:c1:ef:81:48:3c:9a:d1: f0:7f:60:6e:2e:51:0c:34:32:ab:1a:90:5a:49:fe: 83:a2:d6:85:41:99:55:3b:7b:7f:35:53:14:03:ec: d1:96:e7:5f:bc:82:ab:54:72:f8:90:b3:f1:c5:48: c1:60:8d:36:c5:e4:57:8b:26:9d:2d:17:c7:5a:fc: f5:f7:2a:9c:e9:ee:a3:99:fa:32:95:b1:fb:0a:78: 5b:93:59:b9:aa:74:f7:91:cb:77:05:93:f1:95:d5: 42:80:f1:7f:47:92:de:c6:93:1e:cc:5c:c5:78:84: 89:c4:fb:47:b7:b2:01:84:43:b5:f7:b3:ca:5d:5b: dd:a9:aa:0f:4b:47:27:7d:9b:fc:5e:a1:3d:ce:2f: 8f:e5:34:f3:8c:02:af:c9:7e:df:a2:a7:11:26:69: ca:d3:23:c5:1e:ae:9f:18:9d:d4:48:fa:82:0c:f1: f2:69:a1:ff:64:bc:dc:94:f8:1e:0e:9a:ea:09:66: 46:75:72:aa:fe:32:47:84:bb:30:71:a5:d5:63:28: 08:11:3e:38:a1:06:2d:67:ab:aa:a8:96:b5:6f:59: e2:07:47:3f:33:c4:f5:b7:71:0f:9c:a6:58:ce:09: f0:af:94:36:f0:0f:07:6b:48:c5:8e:7c:a2:8d:d1: 14:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5C:A0:9F:DC:BB:98:D3:59:AC:43:AC:B3:97:48:6C:D6:15:E3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144ffcfe-f508-3c6c-a0af-51b2cdf9406e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:39:7b:ef:f0:91:f3:a3:3b:8e:60:4a:10:ac:d4:f3:5c:21: 0f:b3:d4:03:87:aa:ed:50:41:f4:ff:94:30:07:cb:9e:85:f4: 41:33:72:b2:d5:c9:f5:8c:86:21:46:b7:93:ba:10:f5:af:bb: 9e:ea:74:8b:ad:07:0a:7b:bb:85:c6:72:2c:4f:0f:4f:a4:9b: f9:1b:a9:90:24:95:c1:bd:cd:63:ca:27:f4:d1:42:aa:eb:d1: 6f:b3:2e:17:02:61:1d:46:f7:ec:0c:8f:18:01:a5:40:2b:cc: 62:eb:57:0f:57:6f:6f:f1:07:3e:03:45:45:a5:f4:e0:3e:30: d5:45:e4:53:08:3b:b1:45:cd:da:f1:96:7a:d2:f0:8f:de:cf: 62:69:19:1b:1e:12:4d:32:7e:af:b1:57:1c:32:95:00:84:3c: 16:db:6a:e2:d7:e7:fc:00:a1:85:d3:33:f4:da:c9:69:5e:b4: d8:4b:df:05:da:03:63:b9:ce:3d:ec:c2:25:bd:d5:99:c0:d8: 3d:06:9c:0b:39:b7:d4:3e:a2:6f:6b:a7:fb:8b:81:9f:04:ca: 83:6c:17:9d:46:27:82:c7:a8:ee:06:40:ea:59:f1:72:b8:c2: dd:4c:40:92:05:88:2b:02:81:13:6c:0d:0c:e3:86:0c:5f:62: fa:5c:f8:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgY7Oc4uJCEDHMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NTRlOTBmMWYtYzZjOC00OWUyLWE4YjktNDMyZDJiNDg2YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC+KhgPIvcHvgUg8mtHwf2BuLlEMNDKrGpBa Sf6DotaFQZlVO3t/NVMUA+zRludfvIKrVHL4kLPxxUjBYI02xeRXiyadLRfHWvz1 9yqc6e6jmfoylbH7Cnhbk1m5qnT3kct3BZPxldVCgPF/R5LexpMezFzFeISJxPtH t7IBhEO197PKXVvdqaoPS0cnfZv8XqE9zi+P5TTzjAKvyX7foqcRJmnK0yPFHq6f GJ3USPqCDPHyaaH/ZLzclPgeDprqCWZGdXKq/jJHhLswcaXVYygIET44oQYtZ6uq qJa1b1niB0c/M8T1t3EPnKZYzgnwr5Q28A8Ha0jFjnyijdEUqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpcoJ/cu5jTWaxDrLOXSGzWFeNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTQ0ZmZjZmUtZjUwOC0z YzZjLWEwYWYtNTFiMmNkZjk0MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs5e+/wkfOjO45gShCs1PNcIQ+z1AOHqu1QQfT/lDAHy56F9EEzcrLV yfWMhiFGt5O6EPWvu57qdIutBwp7u4XGcixPD0+km/kbqZAklcG9zWPKJ/TRQqrr 0W+zLhcCYR1G9+wMjxgBpUArzGLrVw9Xb2/xBz4DRUWl9OA+MNVF5FMIO7FFzdrx lnrS8I/ez2JpGRseEk0yfq+xVxwylQCEPBbbauLX5/wAoYXTM/TayWletNhL3wXa A2O5zj3swiW91ZnA2D0GnAs5t9Q+om9rp/uLgZ8EyoNsF51GJ4LHqO4GQOpZ8XK4 wt1MQJIFiCsCgRNsDQzjhgxfYvpc+J0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:49 2025 by rpki-client