$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa File: 5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa (raw, json) Hash identifier: wRhRP46TROvmCW5wXCiN8zBvcsr+QJbnWEqxiuAoKPQ= Subject key identifier: F1:0E:AF:D4:C7:E5:08:75:B0:1F:9F:70:CD:D3:E9:CE:3D:6B:A9:18 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908819040BC168EF066376380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:90:40:bc:16:8e:f0:66:37:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=53f5c5f6-bebf-4d74-bc2e-4ca071119629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:87:7d:90:34:2c:50:0a:8d:42:b1:1b:d5: 0f:03:4a:a4:ef:65:64:1d:49:d7:71:94:e9:9d:75: 09:04:d8:76:4c:63:4d:e0:e6:e5:5c:27:cc:27:be: 04:19:f3:36:31:12:03:38:3f:ec:fd:72:a6:77:ea: 18:44:92:3d:da:21:90:ed:11:c3:6e:43:44:ce:64: 40:94:a5:9a:77:fe:cd:f2:57:59:18:b7:41:b2:e3: 73:80:4e:f2:99:d9:ae:1c:f7:a1:0b:7a:e8:3e:f5: 38:47:eb:33:df:aa:0e:41:f9:fd:7c:89:03:db:3b: 44:d4:b0:c0:2b:81:6d:b4:30:fe:7d:94:02:e0:df: c0:9f:dc:36:a9:28:83:d4:6d:61:00:c9:08:a4:c9: 64:44:a8:86:5d:89:61:27:c7:62:b6:23:21:fc:ea: 2a:bf:eb:af:74:47:2b:3d:4b:86:11:3b:7f:70:7f: 3a:3e:99:e8:b5:a1:95:78:df:86:da:ea:80:33:79: 09:74:dd:d0:83:f8:f6:6b:7c:59:8c:d1:5d:d7:41: 4b:92:06:11:bb:64:6c:7a:61:85:bb:ba:2b:35:74: 87:40:b7:46:ec:bd:29:7d:88:aa:84:c5:03:b4:2a: eb:b4:bd:63:6b:0e:0b:18:50:e0:c3:92:21:78:c5: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0E:AF:D4:C7:E5:08:75:B0:1F:9F:70:CD:D3:E9:CE:3D:6B:A9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bfcb1b8-fdc8-33e4-a1e0-0741f7b101ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ea:2b:ea:46:88:7e:84:3c:2a:31:2f:30:84:8d:d9:44:56: 08:27:57:3c:2a:0e:17:99:32:1c:18:ad:5c:d1:7e:49:5b:1e: a2:4e:63:34:6a:3f:11:2d:18:a3:0c:91:54:bc:38:d3:f0:7a: 30:62:95:b9:4c:64:f6:ae:ec:86:f1:ff:4d:d7:2f:20:68:5b: 73:8f:ac:16:54:18:8a:36:c7:c5:8f:04:ad:1b:7a:29:4e:0a: ca:11:2a:b3:0f:f5:da:0d:09:5e:e4:57:05:42:36:b0:e4:bb: b3:79:bc:8d:b2:76:43:8d:1f:1e:ac:b4:22:21:8d:fb:d2:af: a1:38:ad:1a:7f:24:cc:b9:92:4e:a2:74:11:45:74:c5:85:83: 93:26:5b:3b:cd:24:b5:42:cd:5f:cd:77:65:f7:28:2e:78:44: ae:2f:b8:44:d0:52:ec:29:da:78:3b:be:88:15:be:b0:19:a8: da:9b:5c:6c:b3:66:2b:d9:ac:5c:2b:a5:80:7e:58:17:ae:d5: 57:c6:5c:a1:c2:13:5d:72:a5:06:45:6a:e5:62:c6:d1:80:e1: d2:cc:47:10:27:7c:ac:ab:a1:3d:21:ef:ea:82:67:d2:6a:35: 70:5b:32:dd:89:ee:4e:7c:0f:02:58:bd:2c:77:0a:b6:f8:bc: ae:74:fb:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZBAvBaO8GY3Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NTNmNWM1ZjYtYmViZi00ZDc0LWJjMmUtNGNhMDcxMTE5NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqemHfZA0LFAKjUKxG9UPA0qk72VkHUnXcZTp nXUJBNh2TGNN4OblXCfMJ74EGfM2MRIDOD/s/XKmd+oYRJI92iGQ7RHDbkNEzmRA lKWad/7N8ldZGLdBsuNzgE7ymdmuHPehC3roPvU4R+sz36oOQfn9fIkD2ztE1LDA K4FttDD+fZQC4N/An9w2qSiD1G1hAMkIpMlkRKiGXYlhJ8ditiMh/Ooqv+uvdEcr PUuGETt/cH86PpnotaGVeN+G2uqAM3kJdN3Qg/j2a3xZjNFd10FLkgYRu2RsemGF u7orNXSHQLdG7L0pfYiqhMUDtCrrtL1jaw4LGFDgw5IheMUrCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEOr9TH5Qh1sB+fcM3T6c49a6kYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJmY2IxYjgtZmRjOC0z M2U0LWExZTAtMDc0MWY3YjEwMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/qK+pGiH6EPCoxLzCEjdlEVggnVzwqDheZMhwYrVzRfklbHqJOYzRq PxEtGKMMkVS8ONPwejBilblMZPau7Ibx/03XLyBoW3OPrBZUGIo2x8WPBK0beilO CsoRKrMP9doNCV7kVwVCNrDku7N5vI2ydkONHx6stCIhjfvSr6E4rRp/JMy5kk6i dBFFdMWFg5MmWzvNJLVCzV/Nd2X3KC54RK4vuETQUuwp2ng7vogVvrAZqNqbXGyz ZivZrFwrpYB+WBeu1VfGXKHCE11ypQZFauVixtGA4dLMRxAnfKyroT0h7+qCZ9Jq NXBbMt2J7k58DwJYvSx3Crb4vK50+yg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:39 2025 by rpki-client