$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa File: 5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa (raw, json) Hash identifier: e42RpUadsKQqsrFsQrMf6AumKPJ2PVZJBANb67fyauw= Subject key identifier: DB:34:21:0E:BF:18:20:B6:66:7F:9E:47:F4:2A:D7:EC:52:F3:AF:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69B2B6475166DEF6F4180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9b:2b:64:75:16:6d:ef:6f:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=09657ed3-5a87-4c49-a252-b98c1d31403a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:43:52:96:9d:40:4f:1a:0b:fd:4d:ea:0a:98: 7f:bd:41:52:63:7b:dd:19:cd:3e:05:f2:97:e5:31: 1b:5a:bc:e5:87:88:8a:c4:06:24:db:f8:cf:d8:e2: f1:4d:d8:c1:7a:2f:0a:a1:8d:4f:ca:34:c1:39:6b: 44:04:e3:45:30:d3:6f:b4:35:ab:1e:1d:5d:f9:e5: de:98:12:31:4b:07:4d:9e:01:d6:b6:c8:ef:c3:73: 7c:8a:5c:a7:7f:58:5b:1a:d1:b3:4e:14:64:32:39: 6d:6d:72:ee:a1:84:91:ae:b3:8e:6f:aa:e6:ce:2d: e5:29:61:a7:cf:68:9a:44:0d:c3:f7:d9:59:a1:4b: eb:26:03:e7:54:cf:3d:51:dd:7c:9e:2a:65:21:37: 31:4e:10:9f:8f:c7:fe:4a:f6:10:b0:a7:f0:89:b5: ff:74:05:c9:ea:1c:aa:81:99:89:ac:e3:2d:92:94: d4:0b:5c:08:a1:f6:31:10:33:12:f2:3c:db:3c:39: 0a:81:8c:c3:f5:60:db:c1:5b:f2:ee:ff:5e:9d:82: f7:5d:72:c8:ed:c8:32:3f:26:fd:6d:85:cd:db:ac: a4:94:3a:a4:e8:23:e1:ac:51:75:f6:5c:20:a5:79: fb:8f:75:fd:26:66:c3:71:10:bf:68:06:52:be:c8: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:34:21:0E:BF:18:20:B6:66:7F:9E:47:F4:2A:D7:EC:52:F3:AF:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bdab94b-7ef8-3231-84b3-1c6fd77bb119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:35:c4:6c:ea:67:b2:61:a1:31:a5:45:34:96:55:27:0c:98: e3:55:25:51:67:01:e4:1f:a6:67:4e:08:d8:4c:87:f6:0f:dc: 98:4e:34:6c:5b:19:71:21:d1:11:91:c2:e4:dd:44:56:3e:5e: 71:f7:ec:0e:26:e5:4f:ab:52:ec:80:47:83:63:05:7a:3a:31: 35:a5:07:91:1e:7a:f0:a4:3f:18:cd:7d:a2:cb:4c:d9:3e:c3: 53:87:f7:d8:79:eb:65:88:7a:36:c1:5b:e9:c5:93:cd:66:0d: 79:3b:e1:aa:b8:54:cd:59:a9:5e:21:f2:32:3b:0c:d3:03:94: 4b:9f:92:19:0a:5e:9c:4a:91:85:ea:58:4c:65:db:00:ca:68: 71:f7:2e:2c:5d:ea:81:4f:4e:3a:e9:8d:9d:d3:f3:fa:04:5c: 82:55:de:2d:2f:52:dc:22:5b:6d:23:36:80:2a:60:1a:a7:49: 80:72:38:83:de:95:44:79:b8:51:20:33:12:4e:13:52:98:12: cb:3b:12:df:63:ba:35:70:07:7f:76:fb:22:2e:d1:ba:23:bb: 28:a1:4e:12:f7:95:18:9b:0f:13:34:87:62:2d:d0:84:3b:63: e0:fb:9d:a0:d4:fa:64:aa:22:51:2b:28:1a:5a:24:2f:78:0e: b1:09:f4:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5psrZHUWbe9vQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MDk2NTdlZDMtNWE4Ny00YzQ5LWEyNTItYjk4YzFkMzE0MDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ENSlp1ATxoL/U3qCph/vUFSY3vdGc0+BfKX 5TEbWrzlh4iKxAYk2/jP2OLxTdjBei8KoY1PyjTBOWtEBONFMNNvtDWrHh1d+eXe mBIxSwdNngHWtsjvw3N8ilynf1hbGtGzThRkMjltbXLuoYSRrrOOb6rmzi3lKWGn z2iaRA3D99lZoUvrJgPnVM89Ud18niplITcxThCfj8f+SvYQsKfwibX/dAXJ6hyq gZmJrOMtkpTUC1wIofYxEDMS8jzbPDkKgYzD9WDbwVvy7v9enYL3XXLI7cgyPyb9 bYXN26yklDqk6CPhrFF19lwgpXn7j3X9JmbDcRC/aAZSvsju4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs0IQ6/GCC2Zn+eR/Qq1+xS868cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJkYWI5NGItN2VmOC0z MjMxLTg0YjMtMWM2ZmQ3N2JiMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArER7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI1xGzqZ7JhoTGlRTSWVScMmONVJVFnAeQfpmdOCNhMh/YP3JhONGxb GXEh0RGRwuTdRFY+XnH37A4m5U+rUuyAR4NjBXo6MTWlB5EeevCkPxjNfaLLTNk+ w1OH99h562WIejbBW+nFk81mDXk74aq4VM1ZqV4h8jI7DNMDlEufkhkKXpxKkYXq WExl2wDKaHH3Lixd6oFPTjrpjZ3T8/oEXIJV3i0vUtwiW20jNoAqYBqnSYByOIPe lUR5uFEgMxJOE1KYEss7Et9jujVwB392+yIu0bojuyihThL3lRibDxM0h2It0IQ7 Y+D7naDU+mSqIlErKBpaJC94DrEJ9Gs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:18 2025 by rpki-client