$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa File: 2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa (raw, json) Hash identifier: CCOzyCBbtrWNbIMhiTwWerPJYqgP2qM7ezpy9sLVj+A= Subject key identifier: 0F:8F:BF:7F:87:6E:63:CB:45:D7:89:45:B5:96:E0:0A:1A:4B:0A:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584917DC21A914FA055DFCFC32EF Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 132892 IP address blocks: 172.70.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:21:a9:14:fa:05:5d:fc:fc:32:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=f0ea1b4b-971e-4ddc-a461-974d9a377b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:9f:34:00:30:1f:95:e1:b2:49:1f:01:6f: 8f:d5:8e:90:d7:e7:b7:64:3d:88:a2:ee:1d:3c:45: b5:7a:f5:c4:c4:62:34:52:e1:06:77:7c:49:2f:0d: 8a:cb:4f:62:4d:01:09:05:ca:c0:74:2f:9a:4d:47: 17:1a:3e:df:7a:80:79:ca:ba:87:f9:de:9e:63:61: 97:4e:43:de:b9:88:94:80:3e:96:44:b0:7a:2b:ad: 9c:bf:84:87:ef:87:0a:02:97:0b:ac:39:1b:4a:a0: 22:07:fa:a5:02:18:21:f2:ce:64:98:0e:6b:41:0c: 32:d2:f7:69:47:b0:34:c4:79:5c:d1:1e:a3:d9:23: 09:ac:15:6d:d7:37:f7:e4:65:b8:3a:57:ad:76:88: 9b:fb:61:93:af:2e:07:a5:00:c0:cd:fe:94:32:ff: f8:fc:a3:60:22:04:61:9d:78:5a:98:64:49:27:2a: 1b:b7:38:d4:f2:a9:cc:d6:d8:d7:69:a3:38:91:14: 7b:7e:84:e1:eb:13:8a:b9:c7:db:07:7d:a9:20:8c: e0:a2:6c:40:9d:f0:2b:c7:b5:6b:47:31:ab:15:57: 5e:96:c9:48:7e:9e:d2:06:21:69:4c:52:61:17:b6: 48:1c:86:58:fd:0f:75:eb:6d:f3:82:57:77:10:2a: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8F:BF:7F:87:6E:63:CB:45:D7:89:45:B5:96:E0:0A:1A:4B:0A:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2af91c13-374b-3444-b28d-e3d1c4cd66ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:12:48:cb:bc:0d:d9:21:ba:ea:dd:c2:41:05:4a:2a:e1:bd: de:6e:12:c3:62:55:e8:93:93:0a:33:f1:13:db:e0:ca:ce:45: b3:8b:45:11:08:76:47:e4:9b:49:ce:e6:ee:ff:4e:83:79:6d: 6b:f5:04:83:a0:a8:40:cf:b9:ae:b3:d8:b4:08:e6:cc:f3:59: 4b:d8:48:ec:51:f6:cf:25:5b:8c:18:2e:7f:cc:36:76:27:55: 71:87:d7:1c:ab:85:33:eb:03:e4:d8:ea:93:ba:fb:8a:ff:46: 14:b7:25:6e:6b:b0:44:46:b2:8b:14:30:bd:97:75:51:70:87: 07:f8:10:09:bb:3d:88:3a:84:fe:39:67:e8:e8:84:09:c4:db: a2:ec:dc:2c:1b:42:c5:65:86:bc:1b:d6:cf:58:e8:9f:23:77: ee:c6:0c:be:50:78:af:28:fc:e4:c7:d6:67:f8:f7:68:e2:44: 16:e6:68:2b:b5:93:46:7b:98:d9:a6:8e:81:fe:03:d8:db:43: 80:fd:a9:8d:48:6d:28:05:c6:54:db:c6:ef:36:b6:93:3f:51: bc:41:f8:cc:3f:ab:7e:69:5f:ec:bc:d1:59:56:40:01:f4:dc: 20:8c:da:36:34:cf:6b:d1:4f:68:9b:63:ab:ac:2b:1e:46:50: 03:dc:cc:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CGpFPoFXfz8Mu8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjBlYTFiNGItOTcxZS00ZGRjLWE0NjEtOTc0ZDlhMzc3YjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWyfNAAwH5XhskkfAW+P1Y6Q1+e3ZD2Iou4d PEW1evXExGI0UuEGd3xJLw2Ky09iTQEJBcrAdC+aTUcXGj7feoB5yrqH+d6eY2GX TkPeuYiUgD6WRLB6K62cv4SH74cKApcLrDkbSqAiB/qlAhgh8s5kmA5rQQwy0vdp R7A0xHlc0R6j2SMJrBVt1zf35GW4Oletdoib+2GTry4HpQDAzf6UMv/4/KNgIgRh nXhamGRJJyobtzjU8qnM1tjXaaM4kRR7foTh6xOKucfbB32pIIzgomxAnfArx7Vr RzGrFVdelslIfp7SBiFpTFJhF7ZIHIZY/Q91623zgld3ECov1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+Pv3+HbmPLRdeJRbWW4AoaSwoKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmFmOTFjMTMtMzc0Yi0z NDQ0LWIyOGQtZTNkMWM0Y2Q2NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrEYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUSSMu8DdkhuurdwkEFSirhvd5uEsNiVeiTkwoz8RPb4MrORbOLRREI dkfkm0nO5u7/ToN5bWv1BIOgqEDPua6z2LQI5szzWUvYSOxR9s8lW4wYLn/MNnYn VXGH1xyrhTPrA+TY6pO6+4r/RhS3JW5rsERGsosUML2XdVFwhwf4EAm7PYg6hP45 Z+johAnE26Ls3CwbQsVlhrwb1s9Y6J8jd+7GDL5QeK8o/OTH1mf492jiRBbmaCu1 k0Z7mNmmjoH+A9jbQ4D9qY1IbSgFxlTbxu82tpM/UbxB+Mw/q35pX+y80VlWQAH0 3CCM2jY0z2vRT2ibY6usKx5GUAPczCo= -----END CERTIFICATE-----Generated at Sun Apr 27 02:38:55 2025 by rpki-client