$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa File: 2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa (raw, json) Hash identifier: pO9wLcCzGZ0QdFOGV/zYvAYKqj4EH9N0Rtuj4piomL0= Subject key identifier: 7C:BB:0C:8D:8C:70:A8:AA:B8:09:3A:AC:74:62:37:53:F6:57:EB:C0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490F7BF7638BA7EABB62D04200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.69.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:f7:63:8b:a7:ea:bb:62:d0:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=33d17fc3-7433-42da-814c-bcd907322604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b7:5b:5f:0f:39:92:70:63:d5:e4:8e:2f:e3: 60:66:14:fa:30:bd:8a:99:57:c4:fe:c8:5e:10:e0: 78:7c:55:17:d6:dc:8f:57:f8:8c:73:59:81:cd:45: 6b:71:a1:51:57:30:e5:1b:2b:d8:f9:8d:d2:9a:1d: fc:a3:91:72:20:c4:b2:29:ef:d5:3e:e3:08:e4:59: 45:c3:c2:ce:81:30:cc:23:96:c6:92:7f:ad:eb:e1: c3:f6:8d:50:6f:62:61:dd:41:60:48:97:cc:ac:19: 52:14:53:2a:e1:8b:88:d8:5e:ff:bd:d4:51:51:81: 01:a8:01:ad:b2:1c:2e:70:8a:5e:d4:22:f8:0f:5a: 9f:4d:ea:7d:4f:dc:ce:02:fa:c7:4c:cc:49:38:fb: bf:e4:99:f4:03:00:28:0d:53:df:e8:91:2e:3e:af: 72:8a:c2:ac:26:d2:b8:9a:b1:2c:5b:4e:ac:84:15: 2e:cf:30:24:29:92:7e:70:7f:29:5d:fb:a2:8f:6d: 23:2b:52:a8:72:68:eb:c2:b1:b8:8c:c3:b7:2b:de: e7:01:da:4b:ea:53:aa:c3:b7:eb:e6:78:c5:45:01: 96:b7:e3:85:90:d5:24:df:56:ca:5e:2b:1d:cf:16: cf:6c:bc:c6:ab:ff:37:03:72:9d:f8:fd:1c:55:50: f6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BB:0C:8D:8C:70:A8:AA:B8:09:3A:AC:74:62:37:53:F6:57:EB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a6ef38b-7055-3d68-88d4-dd134de9d7c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a9:d4:4d:dd:d6:72:09:49:75:96:e7:ab:a7:bd:61:7f:c1: e8:41:c8:0b:5a:b2:e3:3c:8d:7b:a9:94:17:fc:43:0d:e8:ef: 98:25:a2:0f:9b:67:19:8b:ad:1c:b5:0d:5a:d0:73:d0:dc:39: 4b:db:32:2f:a1:8f:6e:ef:06:ea:44:71:96:33:bb:78:55:a6: 2d:26:6a:f3:1f:9d:e1:1a:d2:2c:36:42:05:62:d0:02:8d:31: 47:f5:d9:00:c2:63:f6:cb:b9:45:7e:02:52:42:f3:c0:44:36: d3:bd:06:7c:63:6d:be:72:a8:6f:5c:0f:dd:c3:3f:58:1e:a1: a6:83:59:89:16:2c:aa:d8:cb:c5:dd:83:ea:b1:81:d2:66:38: 26:e0:bc:fc:b4:03:b2:00:37:6b:d0:0e:4d:a9:30:a3:8d:6f: f3:cd:1c:4e:0e:b9:f7:d0:89:f3:14:5d:69:ac:83:b5:d3:86: 5e:82:14:c3:b9:d7:05:97:48:aa:f0:0f:c2:31:20:d4:e8:49: e6:2e:e7:a4:69:6a:bc:5d:6b:b1:8e:3f:65:1a:b1:b6:79:6b: 7d:05:a7:85:60:f0:8d:f5:3c:5a:53:10:be:e5:ae:a1:4e:1f: a7:13:0d:87:f9:3e:cb:63:3b:ae:b5:82:82:75:28:36:1f:62: 3d:fa:9c:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/dji6fqu2LQQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MzNkMTdmYzMtNzQzMy00MmRhLTgxNGMtYmNkOTA3MzIyNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLdbXw85knBj1eSOL+NgZhT6ML2KmVfE/she EOB4fFUX1tyPV/iMc1mBzUVrcaFRVzDlGyvY+Y3Smh38o5FyIMSyKe/VPuMI5FlF w8LOgTDMI5bGkn+t6+HD9o1Qb2Jh3UFgSJfMrBlSFFMq4YuI2F7/vdRRUYEBqAGt shwucIpe1CL4D1qfTep9T9zOAvrHTMxJOPu/5Jn0AwAoDVPf6JEuPq9yisKsJtK4 mrEsW06shBUuzzAkKZJ+cH8pXfuij20jK1KocmjrwrG4jMO3K97nAdpL6lOqw7fr 5njFRQGWt+OFkNUk31bKXisdzxbPbLzGq/83A3Kd+P0cVVD2/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy7DI2McKiquAk6rHRiN1P2V+vAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmE2ZWYzOGItNzA1NS0z ZDY4LTg4ZDQtZGQxMzRkZTlkN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEX7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAup1E3d1nIJSXWW56unvWF/wehByAtasuM8jXuplBf8Qw3o75glog+b ZxmLrRy1DVrQc9DcOUvbMi+hj27vBupEcZYzu3hVpi0mavMfneEa0iw2QgVi0AKN MUf12QDCY/bLuUV+AlJC88BENtO9Bnxjbb5yqG9cD93DP1geoaaDWYkWLKrYy8Xd g+qxgdJmOCbgvPy0A7IAN2vQDk2pMKONb/PNHE4OuffQifMUXWmsg7XThl6CFMO5 1wWXSKrwD8IxINToSeYu56Rparxda7GOP2UasbZ5a30Fp4Vg8I31PFpTEL7lrqFO H6cTDYf5PstjO661goJ1KDYfYj36nOE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:08:29 2025 by rpki-client