$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16e3b577-4ea0-31b5-980a-e9475640c31a.roa File: 16e3b577-4ea0-31b5-980a-e9475640c31a.roa (raw, json) Hash identifier: 2A6LonbnjurEK3H3TUIS+MlW7YEukSC/qgHQpEAIZQQ= Subject key identifier: CF:75:1E:48:A2:A8:3E:E5:B1:40:77:93:9B:BB:52:2D:DC:BB:C7:25 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818199E6DF348608399E60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16e3b577-4ea0-31b5-980a-e9475640c31a.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:81:99:e6:df:34:86:08:39:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=26cceb48-3d63-457a-bb8b-142f63df50ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:ce:66:18:a4:34:95:6d:5d:84:b2:3b:ff: 1d:8a:03:02:b4:5f:02:47:a9:8a:c0:7b:b7:71:6f: 8f:60:22:3b:fb:99:ca:43:92:5a:31:58:1a:4c:9b: 13:ab:e0:25:6c:42:c6:94:80:b3:4f:1a:5f:d9:5c: eb:c0:7b:6e:07:80:78:eb:a8:59:91:5f:f6:31:20: 40:53:46:e9:3d:c2:76:57:fb:0f:2b:88:1b:d3:0c: 38:21:71:b4:c6:c8:f6:ff:8c:cd:4c:22:74:99:62: 55:01:90:cb:8e:97:4b:c6:a8:63:e3:52:0e:9c:c6: 8f:ec:df:da:5e:cd:28:87:f1:45:41:a5:96:bb:52: 93:ee:b0:28:83:06:f5:69:68:9e:3c:d4:bb:e3:8f: f4:e3:80:68:6e:d1:88:03:90:bf:5b:6f:b1:69:e6: 6d:8a:b6:9e:85:02:63:54:53:5d:91:ab:73:05:aa: 23:e8:38:b7:c9:d8:68:e0:2a:18:e3:fe:87:48:d3: 1c:be:bc:38:75:56:c3:18:cc:b2:dd:09:0d:04:9d: 9e:27:be:85:85:76:ab:b8:69:bd:43:65:07:de:8b: 34:2b:2c:b9:57:25:02:80:52:c8:1c:f6:de:05:3f: d0:d4:8c:aa:1f:e9:1d:48:1e:bc:7a:57:87:3c:ed: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:75:1E:48:A2:A8:3E:E5:B1:40:77:93:9B:BB:52:2D:DC:BB:C7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16e3b577-4ea0-31b5-980a-e9475640c31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:27:e5:03:19:80:44:e3:69:15:52:cd:28:4d:f8:f8:f1:b7: be:e1:50:82:83:48:07:83:5b:3b:5b:13:0d:e3:4d:45:c5:06: 74:96:de:cb:12:bf:06:92:a3:af:e9:d3:51:f1:58:8e:44:ec: 9c:33:9c:d1:50:c8:f5:e7:84:c9:e5:15:42:94:86:30:26:56: c7:f9:a3:fd:76:f2:02:08:96:61:fd:90:42:de:31:f5:75:d2: f9:ff:c2:3d:65:3f:c7:ae:30:d0:fc:4f:24:9e:74:ad:3e:a2: cb:d3:41:95:22:57:b6:74:5a:02:73:1e:a7:74:5d:1a:44:56: 89:76:cc:b0:fe:f5:db:92:f5:92:cd:79:4b:11:ff:9f:37:fa: a3:2d:b1:7d:ea:bb:51:9d:01:cb:23:d5:56:5b:1e:28:b0:b7: cc:ef:94:71:1e:68:1e:1e:76:85:0e:2f:d5:33:54:60:86:4f: 7d:e4:89:4f:b2:5a:00:06:1f:3f:9c:1e:46:b9:5d:e7:e0:4f: 4c:be:36:59:eb:ff:70:fe:98:77:c3:49:35:a5:06:2d:75:58: ac:ca:8f:06:8f:bd:57:f2:32:46:48:8b:9e:56:19:de:a6:ae: 15:cd:81:97:86:91:1e:c9:a6:b0:a9:e5:2c:71:f6:59:49:70: ee:b0:1e:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYGZ5t80hgg5nmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MjZjY2ViNDgtM2Q2My00NTdhLWJiOGItMTQyZjYzZGY1MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fPOZhikNJVtXYSyO/8digMCtF8CR6mKwHu3 cW+PYCI7+5nKQ5JaMVgaTJsTq+AlbELGlICzTxpf2VzrwHtuB4B466hZkV/2MSBA U0bpPcJ2V/sPK4gb0ww4IXG0xsj2/4zNTCJ0mWJVAZDLjpdLxqhj41IOnMaP7N/a Xs0oh/FFQaWWu1KT7rAogwb1aWiePNS744/044BobtGIA5C/W2+xaeZtiraehQJj VFNdkatzBaoj6Di3ydho4CoY4/6HSNMcvrw4dVbDGMyy3QkNBJ2eJ76FhXaruGm9 Q2UH3os0Kyy5VyUCgFLIHPbeBT/Q1IyqH+kdSB68eleHPO3xgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM91HkiiqD7lsUB3k5u7Ui3cu8clMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTZlM2I1NzctNGVhMC0z MWI1LTk4MGEtZTk0NzU2NDBjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4n5QMZgETjaRVSzShN+Pjxt77hUIKDSAeDWztbEw3jTUXFBnSW3ssS vwaSo6/p01HxWI5E7JwznNFQyPXnhMnlFUKUhjAmVsf5o/128gIIlmH9kELeMfV1 0vn/wj1lP8euMND8TySedK0+osvTQZUiV7Z0WgJzHqd0XRpEVol2zLD+9duS9ZLN eUsR/583+qMtsX3qu1GdAcsj1VZbHiiwt8zvlHEeaB4edoUOL9UzVGCGT33kiU+y WgAGHz+cHka5XefgT0y+Nlnr/3D+mHfDSTWlBi11WKzKjwaPvVfyMkZIi55WGd6m rhXNgZeGkR7JprCp5Sxx9llJcO6wHic= -----END CERTIFICATE-----Generated at Sat Apr 26 16:26:37 2025 by rpki-client