$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/352fc5c3-2a25-3c5c-929c-3cd926f99080.roa File: 352fc5c3-2a25-3c5c-929c-3cd926f99080.roa (raw, json) Hash identifier: 0yXMce3XLgfyNkNuRKBdPBpX+vT0y5EI+WnKQEmng10= Subject key identifier: 88:34:1F:5F:40:6A:E7:26:71:C8:BC:CE:FF:3D:A0:55:7A:34:5C:07 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C11A131A55DC082853600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/352fc5c3-2a25-3c5c-929c-3cd926f99080.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:11:a1:31:a5:5d:c0:82:85:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=bf862a7f-f961-4773-a357-64f236d2b542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:69:36:ab:6d:b0:d2:d5:a6:db:44:34:ec: e7:e6:b3:a9:a3:ad:62:8d:2d:93:13:f0:c0:4f:e7: 3a:bc:47:9c:e6:3e:cd:0a:a5:3b:92:d2:ad:71:f9: 1c:fd:6f:3f:b4:20:5a:fc:58:db:7e:b9:38:04:f7: 59:2d:83:2b:c8:a5:d1:6b:4f:71:03:de:30:cf:46: 61:fa:d9:a8:88:35:d1:0d:41:a7:e1:a4:da:06:8f: 92:f8:de:88:93:a1:8b:11:74:60:75:5d:c8:58:70: 8b:5d:50:74:21:49:f6:2e:4d:58:62:cd:96:b9:1c: 18:6c:fb:f3:a9:d0:73:5d:88:df:f8:8f:aa:09:03: 25:a5:62:6b:cd:34:cf:59:44:99:c7:7a:0d:33:15: 8d:d6:d2:e3:1a:87:13:c0:e3:8c:8b:a1:95:a6:14: c2:1c:92:13:0c:74:86:30:d8:30:0c:1d:d5:5c:d9: 00:2e:44:7f:50:85:ae:55:bf:cd:63:42:bd:47:c8: 88:99:37:bb:60:b1:28:06:f4:0e:a8:12:b7:55:cd: 65:ef:e5:9d:2d:eb:ce:ca:2e:ab:e4:ac:58:fe:d3: 26:8f:2d:03:14:44:87:83:73:f8:76:c6:61:b4:d5: ac:fd:08:bc:26:c2:21:0c:61:cd:65:7e:f1:2f:2f: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:34:1F:5F:40:6A:E7:26:71:C8:BC:CE:FF:3D:A0:55:7A:34:5C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/352fc5c3-2a25-3c5c-929c-3cd926f99080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:92:0e:8b:67:2e:2b:8e:99:c9:e9:8c:86:70:7f:ec:7f:e2: bf:80:bc:b2:f5:c9:b1:d1:3c:2b:a0:c0:5d:5d:98:26:89:9d: df:e7:07:36:35:20:c9:cf:23:e1:f0:c5:63:20:1c:2f:d5:fa: 8a:42:b8:af:21:5f:87:30:71:58:20:ea:4f:ce:8e:a8:79:18: a0:df:c7:9d:50:09:84:69:fa:2b:7f:71:91:e2:48:40:4b:87: 21:87:31:62:67:5e:ee:97:de:7c:47:a0:77:2c:1a:1c:ba:78: 98:93:af:a2:a9:2a:9d:c2:3b:5b:b1:1a:28:cb:9d:55:82:75: da:9c:52:9a:f9:cc:93:ee:45:31:46:0e:1c:34:8e:ce:c3:28: eb:80:6e:0e:32:fd:45:ce:1b:ca:30:ef:33:6a:ec:94:5f:ef: ae:42:4d:e2:a1:1e:d0:4c:53:5f:b2:f0:72:3a:df:30:10:bd: 6a:dd:bd:dc:1d:78:78:bd:eb:74:c4:81:5c:50:1f:8b:db:7a: 44:89:e7:e3:c3:32:c4:25:19:17:37:20:ca:65:03:7c:88:0d: 74:48:79:c1:12:ae:f1:80:d6:ae:2d:27:bf:65:23:1b:35:1b: fd:72:c0:66:3e:74:5d:eb:67:0e:78:c2:2c:e9:e3:b4:aa:3c: 3b:7d:54:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBGhMaVdwIKFNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YmY4NjJhN2YtZjk2MS00NzczLWEzNTctNjRmMjM2ZDJiNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xJpNqttsNLVpttENOzn5rOpo61ijS2TE/DA T+c6vEec5j7NCqU7ktKtcfkc/W8/tCBa/Fjbfrk4BPdZLYMryKXRa09xA94wz0Zh +tmoiDXRDUGn4aTaBo+S+N6Ik6GLEXRgdV3IWHCLXVB0IUn2Lk1YYs2WuRwYbPvz qdBzXYjf+I+qCQMlpWJrzTTPWUSZx3oNMxWN1tLjGocTwOOMi6GVphTCHJITDHSG MNgwDB3VXNkALkR/UIWuVb/NY0K9R8iImTe7YLEoBvQOqBK3Vc1l7+WdLevOyi6r 5KxY/tMmjy0DFESHg3P4dsZhtNWs/Qi8JsIhDGHNZX7xLy/3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg0H19Aaucmcci8zv89oFV6NFwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzUyZmM1YzMtMmEyNS0z YzVjLTkyOWMtM2NkOTI2Zjk5MDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWSDotnLiuOmcnpjIZwf+x/4r+AvLL1ybHRPCugwF1dmCaJnd/nBzY1 IMnPI+HwxWMgHC/V+opCuK8hX4cwcVgg6k/Ojqh5GKDfx51QCYRp+it/cZHiSEBL hyGHMWJnXu6X3nxHoHcsGhy6eJiTr6KpKp3CO1uxGijLnVWCddqcUpr5zJPuRTFG Dhw0js7DKOuAbg4y/UXOG8ow7zNq7JRf765CTeKhHtBMU1+y8HI63zAQvWrdvdwd eHi963TEgVxQH4vbekSJ5+PDMsQlGRc3IMplA3yIDXRIecESrvGA1q4tJ79lIxs1 G/1ywGY+dF3rZw54wizp47SqPDt9VHk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:03:56 2025 by rpki-client