$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa File: 34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa (raw, json) Hash identifier: x7pAD/aCx29gP+TKYFDPL1mQhPb4jCdQDHmDx2UDBz4= Subject key identifier: 5C:4C:8C:E2:BB:A4:6E:13:09:CE:91:A3:B9:88:F2:7E:43:19:9C:50 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69CB34DF9DB211FAE9D40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9c:b3:4d:f9:db:21:1f:ae:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=7ed174a2-5bf7-42fa-9097-ca735ad923fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:69:7a:33:79:a3:9a:55:26:de:7d:9c:3a: 42:e9:af:f7:ed:1e:ad:ee:9a:3d:dd:c2:ce:5b:cc: 4f:99:4e:c5:5b:ea:96:fa:14:7e:fb:d8:99:ac:a3: d6:27:ed:c6:3e:21:a6:de:d7:4a:98:67:72:66:85: 13:e8:42:37:e2:1b:d8:16:bf:35:2f:22:d0:7f:38: bf:ff:ce:97:c5:66:ae:96:12:7c:64:a5:01:92:ca: 95:58:8f:3c:62:e4:0b:23:66:8c:70:c3:23:76:da: ce:6e:26:24:4b:5e:ac:0c:93:72:9d:de:e3:75:b3: ac:c5:a3:62:2e:a1:74:f6:9c:37:01:8d:ac:8f:47: fd:cf:79:7e:7b:0e:fa:08:98:26:01:a8:2c:95:58: 23:ff:d6:37:51:9c:f6:90:ad:9c:e6:4f:a7:11:d7: f6:8d:16:6c:50:7b:cb:e3:71:3a:68:a0:a0:11:c2: 2a:db:6f:b7:13:1e:f5:cc:62:21:af:b8:da:e7:00: ee:48:f5:4b:28:67:9e:9e:3d:12:61:57:a5:73:f0: 13:64:bc:37:b6:e1:fa:26:7d:84:b6:99:ae:d3:ea: 05:48:0f:e0:b0:83:89:e1:4c:fb:34:a3:11:61:fa: 71:26:24:0d:83:71:2e:0c:3d:86:59:92:14:e5:eb: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4C:8C:E2:BB:A4:6E:13:09:CE:91:A3:B9:88:F2:7E:43:19:9C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34bfc0b2-9b92-3272-9c81-8a0186cf6d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:78:a7:8c:b0:1b:78:f1:f1:d2:9a:1d:80:22:1a:c8:86:44: ed:25:be:97:6c:57:b2:53:0d:0e:ae:73:53:c1:59:66:c6:0a: 91:47:99:be:e0:53:27:f1:ed:d0:c4:5f:b7:9f:db:05:a1:89: 08:a0:cc:a3:86:28:43:3d:8f:65:17:3b:67:22:bf:b2:8c:a5: e6:6f:a7:8d:82:73:db:ce:2f:b2:e3:48:88:18:4f:a0:dc:a1: 94:02:c1:20:a7:5f:cd:f2:01:e9:6d:37:a6:16:36:6e:d7:54: 67:6d:0d:be:b2:91:87:ee:47:67:d0:2d:fe:52:dd:15:4d:dd: fc:35:18:d8:7a:4a:43:8f:1a:70:0f:5e:15:73:ea:41:fa:23: ae:d6:d0:f5:7e:f3:50:26:4a:55:60:62:85:31:67:a0:f9:e3: 68:88:97:ae:90:d4:09:46:9b:4e:71:a3:6c:a8:03:43:29:04: c6:43:69:ab:fb:75:8b:0e:9d:6e:03:e3:63:28:36:f1:f4:3a: 36:50:73:95:86:c4:b9:5a:67:a1:44:94:88:48:a6:9b:ef:18: 71:b2:0c:91:5e:00:da:33:4e:7b:4e:53:fb:1e:35:e7:39:3e: 02:7e:a6:44:e0:7d:6d:c6:4f:60:3d:35:52:75:e0:04:f7:98: c0:4b:9e:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pyzTfnbIR+unUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk N2VkMTc0YTItNWJmNy00MmZhLTkwOTctY2E3MzVhZDkyM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5tpejN5o5pVJt59nDpC6a/37R6t7po93cLO W8xPmU7FW+qW+hR++9iZrKPWJ+3GPiGm3tdKmGdyZoUT6EI34hvYFr81LyLQfzi/ /86XxWaulhJ8ZKUBksqVWI88YuQLI2aMcMMjdtrObiYkS16sDJNynd7jdbOsxaNi LqF09pw3AY2sj0f9z3l+ew76CJgmAagslVgj/9Y3UZz2kK2c5k+nEdf2jRZsUHvL 43E6aKCgEcIq22+3Ex71zGIhr7ja5wDuSPVLKGeenj0SYVelc/ATZLw3tuH6Jn2E tpmu0+oFSA/gsIOJ4Uz7NKMRYfpxJiQNg3EuDD2GWZIU5evoSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxMjOK7pG4TCc6Ro7mI8n5DGZxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzRiZmMwYjItOWI5Mi0z MjcyLTljODEtOGEwMTg2Y2Y2ZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC54p4ywG3jx8dKaHYAiGsiGRO0lvpdsV7JTDQ6uc1PBWWbGCpFHmb7g Uyfx7dDEX7ef2wWhiQigzKOGKEM9j2UXO2civ7KMpeZvp42Cc9vOL7LjSIgYT6Dc oZQCwSCnX83yAeltN6YWNm7XVGdtDb6ykYfuR2fQLf5S3RVN3fw1GNh6SkOPGnAP XhVz6kH6I67W0PV+81AmSlVgYoUxZ6D542iIl66Q1AlGm05xo2yoA0MpBMZDaav7 dYsOnW4D42MoNvH0OjZQc5WGxLlaZ6FElIhIppvvGHGyDJFeANozTntOU/seNec5 PgJ+pkTgfW3GT2A9NVJ14AT3mMBLntc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:16:02 2025 by rpki-client