$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/509c76b9-8821-32e6-8856-2e765239c8a2.roa File: 509c76b9-8821-32e6-8856-2e765239c8a2.roa (raw, json) Hash identifier: DTPpkyzzhjXNYHgkyN8IG1GrT2Ta/de3Kh1n9QKdxgA= Subject key identifier: 75:C0:93:16:7F:97:7C:72:C3:7F:68:E7:E5:3F:24:8E:BB:EB:6C:9A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C0B9579176E433148A2C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/509c76b9-8821-32e6-8856-2e765239c8a2.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:0b:95:79:17:6e:43:31:48:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=7b03d827-8928-4fc6-8a62-c6007395b518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:56:a3:5c:c0:c9:98:cc:7f:08:73:68:f3:2f: 44:f7:6a:23:35:5c:d4:4f:42:ae:7f:d7:ff:8e:22: 66:9e:e4:6b:89:90:9b:a8:a5:7e:b9:ce:5d:15:12: b5:86:fc:30:30:ab:68:0d:ed:2a:1b:51:da:8b:84: 07:93:d4:23:5c:6d:23:1a:26:9a:14:f2:53:57:07: 31:d7:ad:02:74:77:d0:ef:de:91:d4:01:1a:ba:e2: 67:13:04:45:44:4c:09:c3:60:56:d1:f2:3d:10:f5: d2:4e:65:8d:b5:e9:9d:78:e7:9c:56:6e:c0:46:29: 60:f9:b1:05:3c:71:ea:97:ea:4a:73:e1:33:81:37: 3d:fd:3f:a0:7e:dc:39:76:4a:c6:8e:33:ee:7d:b4: ed:62:5a:fc:c7:57:3e:6c:0e:7c:11:b3:f2:39:db: 06:3c:b8:a2:ab:13:6a:84:08:dd:a4:38:5f:b8:95: aa:a5:eb:f7:87:be:f8:db:04:c8:e1:f1:c5:56:3a: 7d:3d:ef:41:c8:14:4b:5d:48:05:52:45:c4:3a:66: 51:f3:89:94:d3:85:65:34:8b:63:63:14:ad:89:1f: 3c:52:53:1a:66:3b:4e:3a:07:c4:0e:df:a5:4a:4c: e9:0a:2a:1b:d9:06:88:d1:1a:ab:88:83:58:99:8a: 8b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C0:93:16:7F:97:7C:72:C3:7F:68:E7:E5:3F:24:8E:BB:EB:6C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/509c76b9-8821-32e6-8856-2e765239c8a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:65:41:c1:ae:50:58:8b:7c:29:00:86:d2:5c:24:c8:6a:a9: 21:fb:6f:ba:58:37:2b:e7:6a:ae:e5:fe:f2:e0:b0:96:fe:95: 48:e5:d7:b8:37:85:4d:9a:8b:c2:66:8f:05:ea:43:02:e7:58: 2a:a1:fe:6a:dc:de:60:c0:13:a9:c8:5e:3e:80:98:d9:5a:55: 83:2b:6f:da:01:25:e9:f7:4e:68:8c:21:f8:26:f3:5b:74:b8: b4:c1:28:bc:39:98:18:92:c5:1a:8a:84:f7:ed:0b:35:0c:9c: 44:d2:89:3a:0a:cc:fe:6c:f7:7f:c6:66:ae:e7:b9:12:d1:05: 7c:8b:37:a8:aa:f4:32:da:cc:e0:03:1f:02:52:73:2f:93:e0: ae:e6:d3:ca:63:10:ec:43:61:a9:f1:8f:9d:ef:74:ce:e3:b0: 9a:0a:67:e2:7c:ef:cc:b6:56:59:79:4d:2c:3b:05:a7:fd:27: 6f:30:36:f9:a1:df:33:ca:3b:19:00:bc:2f:ec:b9:bf:45:ac: a4:eb:05:2c:22:e5:80:3e:5b:9d:99:46:47:b4:14:7b:b8:65: f4:3d:bb:29:27:e5:dc:0b:2a:0a:f2:7b:29:9a:82:8a:3a:bb: 84:11:93:83:9e:63:d2:dc:0f:29:92:cc:56:83:29:7c:bc:db: 74:d2:27:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAuVeRduQzFIosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk N2IwM2Q4MjctODkyOC00ZmM2LThhNjItYzYwMDczOTViNTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVajXMDJmMx/CHNo8y9E92ojNVzUT0Kuf9f/ jiJmnuRriZCbqKV+uc5dFRK1hvwwMKtoDe0qG1Hai4QHk9QjXG0jGiaaFPJTVwcx 160CdHfQ796R1AEauuJnEwRFREwJw2BW0fI9EPXSTmWNtemdeOecVm7ARilg+bEF PHHql+pKc+EzgTc9/T+gftw5dkrGjjPufbTtYlr8x1c+bA58EbPyOdsGPLiiqxNq hAjdpDhfuJWqpev3h7742wTI4fHFVjp9Pe9ByBRLXUgFUkXEOmZR84mU04VlNItj YxStiR88UlMaZjtOOgfEDt+lSkzpCiob2QaI0RqriINYmYqLvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXAkxZ/l3xyw39o5+U/JI6762yaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTA5Yzc2YjktODgyMS0z MmU2LTg4NTYtMmU3NjUyMzljOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrEUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9lQcGuUFiLfCkAhtJcJMhqqSH7b7pYNyvnaq7l/vLgsJb+lUjl17g3 hU2ai8JmjwXqQwLnWCqh/mrc3mDAE6nIXj6AmNlaVYMrb9oBJen3TmiMIfgm81t0 uLTBKLw5mBiSxRqKhPftCzUMnETSiToKzP5s93/GZq7nuRLRBXyLN6iq9DLazOAD HwJScy+T4K7m08pjEOxDYanxj53vdM7jsJoKZ+J878y2Vll5TSw7Baf9J28wNvmh 3zPKOxkAvC/sub9FrKTrBSwi5YA+W52ZRke0FHu4ZfQ9uykn5dwLKgryeymagoo6 u4QRk4OeY9LcDymSzFaDKXy823TSJ4I= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:18 2025 by rpki-client