$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a83b4a7-24bf-33d7-8b10-dfe0a0ea66f4.roa File: 1a83b4a7-24bf-33d7-8b10-dfe0a0ea66f4.roa (raw, json) Hash identifier: GaQwffvkwqqgc040yjL4WomMue0HhoabXdfPpD7Ro+g= Subject key identifier: 27:01:7B:36:99:1E:3F:87:BB:2D:E1:4E:6F:A4:9F:5E:5E:52:3E:D9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088182076E9C6E167CF54A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a83b4a7-24bf-33d7-8b10-dfe0a0ea66f4.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.70.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:82:07:6e:9c:6e:16:7c:f5:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=268376f3-c8a5-47e8-a084-13062eec664c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f2:b1:99:09:be:23:d8:d3:7d:f9:a4:25:e6: 88:2e:4d:7c:70:93:46:cd:e8:d3:1e:5a:1b:95:7e: b6:e3:20:fb:2e:09:ae:c9:10:d3:57:5f:0c:80:3a: 42:8e:0b:b0:53:46:2f:27:7c:a0:c6:43:61:d8:2b: 29:2b:12:88:3e:ad:f7:2a:d9:d9:78:52:79:b1:a0: a8:7f:97:22:67:f5:8e:ee:ed:53:83:eb:45:d0:9a: bf:a4:68:d6:ef:7c:a0:87:d2:81:6f:fd:ca:ac:64: 1b:96:d9:6e:95:59:44:49:01:e6:b1:dd:e6:c8:49: 73:61:cf:27:8f:04:29:8a:b8:4b:a0:79:f5:7e:e9: 44:3e:84:08:10:f6:d9:3d:8e:4f:d1:ac:03:bf:d2: da:11:8c:0d:1c:2f:b7:39:99:d9:8a:39:2d:66:98: 73:2c:eb:c5:e3:f5:4e:26:2e:0a:3d:6e:95:ab:7a: ce:4f:0a:8f:4e:de:94:ff:2d:9f:b1:e2:a8:c4:3c: 14:33:0f:b2:68:49:e6:4c:6d:61:98:a2:0a:f5:b6: ee:f8:6f:0a:49:fa:a9:a6:e1:db:62:67:5e:05:61: 31:a7:6c:94:43:01:75:e1:95:43:27:de:4a:70:3c: 4b:df:e2:aa:44:c3:f8:24:24:f9:66:43:c1:0d:c1: fa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:01:7B:36:99:1E:3F:87:BB:2D:E1:4E:6F:A4:9F:5E:5E:52:3E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a83b4a7-24bf-33d7-8b10-dfe0a0ea66f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:71:a7:db:20:17:49:81:45:71:1b:b0:c9:17:6a:3f:aa:ef: 92:d2:3f:74:3f:90:0f:c6:c4:be:fd:9f:0b:e3:da:da:63:94: 60:cd:4e:a3:b7:ef:35:cb:59:5b:cb:92:d4:07:2f:aa:86:78: e8:a7:62:75:e0:2a:9e:5a:07:b7:97:b9:94:46:77:a8:66:85: 43:ec:11:50:8c:ab:ef:bb:e6:93:0c:58:8d:e4:14:a6:62:17: 95:f0:b7:27:29:52:4b:ed:01:61:88:94:2d:03:06:d5:42:36: 1f:59:38:49:d1:04:63:28:b5:f6:da:ce:70:83:1d:6e:2f:42: 1d:d2:71:09:28:eb:91:88:7a:06:70:85:35:ac:05:dc:07:66: 39:80:aa:f6:4d:ac:b5:19:cd:11:85:88:d5:3a:36:67:04:3b: 1e:2d:d7:62:52:72:f4:f0:04:68:7b:0b:d9:4f:c4:ac:bb:7d: e1:57:a8:0b:1e:5b:a4:66:da:d2:cd:12:ca:41:4c:06:21:48: f0:59:a3:ad:5a:c9:c5:23:e4:e3:af:02:ee:3c:b5:7e:fe:11: 7a:e9:0c:60:bb:7b:58:7c:5a:7d:b1:7b:5d:97:4e:9d:c0:4d: aa:c5:c4:16:4b:e6:ce:d9:56:11:a4:53:14:6d:b2:02:97:dc: b5:95:61:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYIHbpxuFnz1SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MjY4Mzc2ZjMtYzhhNS00N2U4LWEwODQtMTMwNjJlZWM2NjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPKxmQm+I9jTffmkJeaILk18cJNGzejTHlob lX624yD7LgmuyRDTV18MgDpCjguwU0YvJ3ygxkNh2CspKxKIPq33KtnZeFJ5saCo f5ciZ/WO7u1Tg+tF0Jq/pGjW73ygh9KBb/3KrGQbltlulVlESQHmsd3myElzYc8n jwQpirhLoHn1fulEPoQIEPbZPY5P0awDv9LaEYwNHC+3OZnZijktZphzLOvF4/VO Ji4KPW6Vq3rOTwqPTt6U/y2fseKoxDwUMw+yaEnmTG1hmKIK9bbu+G8KSfqppuHb YmdeBWExp2yUQwF14ZVDJ95KcDxL3+KqRMP4JCT5ZkPBDcH6xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcBezaZHj+Huy3hTm+kn15eUj7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWE4M2I0YTctMjRiZi0z M2Q3LThiMTAtZGZlMGEwZWE2NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlxp9sgF0mBRXEbsMkXaj+q75LSP3Q/kA/GxL79nwvj2tpjlGDNTqO3 7zXLWVvLktQHL6qGeOinYnXgKp5aB7eXuZRGd6hmhUPsEVCMq++75pMMWI3kFKZi F5XwtycpUkvtAWGIlC0DBtVCNh9ZOEnRBGMotfbaznCDHW4vQh3ScQko65GIegZw hTWsBdwHZjmAqvZNrLUZzRGFiNU6NmcEOx4t12JScvTwBGh7C9lPxKy7feFXqAse W6Rm2tLNEspBTAYhSPBZo61aycUj5OOvAu48tX7+EXrpDGC7e1h8Wn2xe12XTp3A TarFxBZL5s7ZVhGkUxRtsgKX3LWVYVc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:46 2025 by rpki-client