$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa File: 3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa (raw, json) Hash identifier: tSHz84wUSBHYEL3VQnZrnkgUu8bMRgjkiSysrL/Q6+4= Subject key identifier: 0F:35:43:CE:0D:19:AB:1E:EE:9B:3B:56:11:97:E3:5D:BF:55:40:CC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088192A3A2DE2C7F45927488 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:92:a3:a2:de:2c:7f:45:92:74:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=d9d49e9d-b1f7-4653-a2c8-2352526a802c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:dd:51:1c:bc:5f:bd:6c:a3:97:54:33:01: e7:89:80:32:89:df:6c:75:0e:11:7c:16:d7:e5:b0: c4:39:40:99:f9:33:ff:cd:f3:9e:87:4b:0a:c9:e1: 7c:15:74:04:de:cf:97:01:3c:64:d2:c0:4c:d7:3d: 84:a1:ed:29:3c:d5:18:11:65:81:ae:fa:ce:a9:b6: f2:7e:f2:e7:26:20:94:e1:97:cc:17:09:a0:78:eb: 4d:72:77:02:7c:8b:e0:85:26:bd:0d:2f:04:32:cc: b7:cc:bc:69:b9:d2:4e:44:b7:f1:87:86:64:31:3d: f8:ac:10:35:78:36:ed:7c:69:41:31:10:c6:f6:70: df:88:31:e2:0d:3a:c5:cb:4d:fa:b1:2d:78:9a:9c: f1:6a:8b:82:9b:60:b5:f6:68:d7:74:8a:54:e3:48: 52:cc:82:7a:f2:c9:1a:21:ef:f8:6c:f8:01:12:f4: dd:16:60:b1:6f:be:2a:53:60:cf:5b:4c:ae:21:d2: 6d:db:c1:74:48:51:a8:0e:39:c4:9d:9f:e7:ef:d9: a9:df:a3:12:91:dd:2b:8e:f0:2d:bd:eb:01:8b:d3: ea:d2:5a:8d:80:aa:f3:ca:6d:2a:f9:6b:c8:8e:2e: b2:2f:40:4a:e8:c9:85:46:40:58:ed:50:13:8b:79: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:35:43:CE:0D:19:AB:1E:EE:9B:3B:56:11:97:E3:5D:BF:55:40:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e26c143-1fa5-3e0b-b7fa-f7117d980c08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c1:85:0d:17:42:09:fe:0f:e9:10:f4:58:5a:70:7e:7e:e4: 1c:bf:b0:78:c9:94:14:0f:ba:a2:6d:42:3f:15:52:39:32:10: a9:03:0a:30:f9:7a:4c:9d:e6:7c:67:aa:3b:b4:4d:34:98:18: f9:2d:10:bf:57:3f:a8:43:14:65:3f:e3:b2:5c:b5:a3:37:ed: ae:24:42:f3:95:e7:d0:d1:a1:e4:ce:e1:5a:a7:68:67:8c:b1: 6a:5a:7a:17:a4:d6:35:14:99:fe:13:16:fb:fc:bd:d4:be:e4: 1e:47:32:ed:19:2b:85:40:59:e0:51:9f:08:2a:ff:1c:f9:3a: e8:4a:1a:85:15:d3:f8:70:f3:07:38:0f:54:dd:03:20:82:81: d2:46:24:aa:a2:fa:2d:1a:40:f8:1d:de:35:f7:bf:d9:6d:e1: 26:4a:35:a4:30:af:15:88:7b:36:21:e4:e0:3d:77:af:51:cb: 49:7a:57:38:8f:84:78:d1:a1:18:fd:4e:62:7a:22:ea:94:d3: 7c:d4:c5:55:f3:26:05:6d:4f:64:41:a4:7b:b8:76:a6:4d:83: 16:cf:56:80:22:55:93:3d:e5:5a:92:3b:fd:93:9e:09:1e:14: 1b:c8:bc:48:92:a8:8c:aa:92:fe:67:39:c7:62:ac:04:4a:92: 18:e3:0a:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZKjot4sf0WSdIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDlkNDllOWQtYjFmNy00NjUzLWEyYzgtMjM1MjUyNmE4MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMrdURy8X71so5dUMwHniYAyid9sdQ4RfBbX 5bDEOUCZ+TP/zfOeh0sKyeF8FXQE3s+XATxk0sBM1z2Eoe0pPNUYEWWBrvrOqbby fvLnJiCU4ZfMFwmgeOtNcncCfIvghSa9DS8EMsy3zLxpudJORLfxh4ZkMT34rBA1 eDbtfGlBMRDG9nDfiDHiDTrFy036sS14mpzxaouCm2C19mjXdIpU40hSzIJ68ska Ie/4bPgBEvTdFmCxb74qU2DPW0yuIdJt28F0SFGoDjnEnZ/n79mp36MSkd0rjvAt vesBi9Pq0lqNgKrzym0q+WvIji6yL0BK6MmFRkBY7VATi3mAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA81Q84NGase7ps7VhGX412/VUDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2UyNmMxNDMtMWZhNS0z ZTBiLWI3ZmEtZjcxMTdkOTgwYzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvBhQ0XQgn+D+kQ9FhacH5+5By/sHjJlBQPuqJtQj8VUjkyEKkDCjD5 ekyd5nxnqju0TTSYGPktEL9XP6hDFGU/47JctaM37a4kQvOV59DRoeTO4VqnaGeM sWpaehek1jUUmf4TFvv8vdS+5B5HMu0ZK4VAWeBRnwgq/xz5OuhKGoUV0/hw8wc4 D1TdAyCCgdJGJKqi+i0aQPgd3jX3v9lt4SZKNaQwrxWIezYh5OA9d69Ry0l6VziP hHjRoRj9TmJ6IuqU03zUxVXzJgVtT2RBpHu4dqZNgxbPVoAiVZM95VqSO/2Tngke FBvIvEiSqIyqkv5nOcdirARKkhjjChg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:14:38 2025 by rpki-client