$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa File: 5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa (raw, json) Hash identifier: 2JQrmKpokxR6NCqSuT81UdZMVoArILCDTsPLZ0Md9vs= Subject key identifier: 3E:F1:17:55:0A:E9:26:ED:31:EC:AC:23:BA:77:72:7D:BD:60:E6:FA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C04D168D94151E314E180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.70.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:04:d1:68:d9:41:51:e3:14:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=ea3bb8ee-fbaf-4dd7-87ad-fa475395142f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:11:02:ea:a2:4e:3e:24:33:5b:13:5d:11:f9: 8f:80:ee:f7:4b:91:67:df:f0:e3:44:b0:7c:86:7c: 23:5e:db:99:65:62:67:32:b4:87:69:42:5f:a7:37: c4:f6:5c:7c:4b:32:82:7d:7a:dc:19:2a:ec:b8:7f: e3:04:4d:5b:27:9e:4a:24:52:0e:7f:ee:bf:00:6f: d6:1e:b8:90:e9:48:8c:c8:fc:de:08:84:93:42:27: 4d:a3:bc:0e:26:d8:d2:7d:20:46:55:79:d5:22:0a: 6b:9e:4b:54:53:08:8d:61:f4:fe:26:8b:0a:01:c4: d3:16:c0:4b:ea:28:90:69:dd:e6:b9:f0:ac:07:a1: e0:ac:af:a2:f3:b1:f0:e8:7c:9e:69:fd:a0:01:dd: 2d:50:20:c3:c1:47:e5:06:1c:ec:79:fa:1f:f1:ec: d7:56:1b:00:ee:0f:18:80:2e:21:f9:ef:e6:20:09: 62:92:81:a7:7e:dc:e0:1d:c4:d5:8d:7e:7c:d1:45: a1:09:5a:c8:f4:7a:8b:be:08:a8:7a:3b:59:67:d7: 32:cb:96:fe:8d:f8:48:86:14:00:95:d0:20:39:37: dc:34:2e:58:d6:4f:b6:f6:1d:40:25:38:d7:4f:65: 7d:6a:1e:a6:e9:2a:03:7e:75:e3:75:cb:ab:05:ec: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F1:17:55:0A:E9:26:ED:31:EC:AC:23:BA:77:72:7D:BD:60:E6:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5f7b260a-9bf9-32f1-bf09-bcff7a2df3fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:d2:2b:9a:fb:5d:c1:e0:91:b7:e7:cc:e4:01:1c:07:d5:e7: 00:19:aa:2c:d4:3c:ef:69:ac:54:c8:b8:42:66:a8:35:b1:93: 5d:95:14:b2:0a:22:d1:16:b0:94:2b:33:ae:49:0d:b0:fd:db: 4d:b8:41:65:91:01:fd:21:ab:db:84:2b:1c:b1:5b:58:ec:a2: a0:dd:06:fd:c4:65:d7:3f:f1:6d:46:cf:50:0e:94:ef:e1:4f: 6f:be:f2:63:36:49:0c:49:3f:6a:11:e7:f6:a0:11:7e:b5:eb: 15:d5:8d:6f:5c:ce:43:69:b4:8d:6f:b7:35:e9:1f:35:c5:59: a2:4c:38:20:59:87:96:bf:11:bf:6d:20:28:f3:43:c5:3f:3e: f1:5c:2a:dc:ba:02:a0:03:5d:64:26:b6:05:7a:16:4a:1a:1a: 60:f2:ad:6b:f3:9b:e9:3a:d8:11:b0:ad:1a:da:07:c2:33:86: ce:34:37:22:55:2d:21:2c:de:ec:ab:ba:07:10:7a:58:cf:81: 46:66:4a:3c:05:d0:52:1a:ce:e3:34:85:f7:3d:73:ef:e6:0e: 4f:b4:a6:9f:60:0f:07:d0:b4:72:c8:40:93:ff:cf:70:03:a4: 76:ae:e0:aa:5e:f1:03:cc:42:00:b9:b6:9a:39:13:26:33:84: a4:c0:39:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHATRaNlBUeMU4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZWEzYmI4ZWUtZmJhZi00ZGQ3LTg3YWQtZmE0NzUzOTUxNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1REC6qJOPiQzWxNdEfmPgO73S5Fn3/DjRLB8 hnwjXtuZZWJnMrSHaUJfpzfE9lx8SzKCfXrcGSrsuH/jBE1bJ55KJFIOf+6/AG/W HriQ6UiMyPzeCISTQidNo7wOJtjSfSBGVXnVIgprnktUUwiNYfT+JosKAcTTFsBL 6iiQad3mufCsB6HgrK+i87Hw6Hyeaf2gAd0tUCDDwUflBhzsefof8ezXVhsA7g8Y gC4h+e/mIAlikoGnftzgHcTVjX580UWhCVrI9HqLvgioejtZZ9cyy5b+jfhIhhQA ldAgOTfcNC5Y1k+29h1AJTjXT2V9ah6m6SoDfnXjdcurBewQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7xF1UK6SbtMeysI7p3cn29YOb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWY3YjI2MGEtOWJmOS0z MmYxLWJmMDktYmNmZjdhMmRmM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPSK5r7XcHgkbfnzOQBHAfV5wAZqizUPO9prFTIuEJmqDWxk12VFLIK ItEWsJQrM65JDbD92024QWWRAf0hq9uEKxyxW1jsoqDdBv3EZdc/8W1Gz1AOlO/h T2++8mM2SQxJP2oR5/agEX616xXVjW9czkNptI1vtzXpHzXFWaJMOCBZh5a/Eb9t ICjzQ8U/PvFcKty6AqADXWQmtgV6FkoaGmDyrWvzm+k62BGwrRraB8Izhs40NyJV LSEs3uyrugcQeljPgUZmSjwF0FIazuM0hfc9c+/mDk+0pp9gDwfQtHLIQJP/z3AD pHau4Kpe8QPMQgC5tpo5EyYzhKTAOQ0= -----END CERTIFICATE-----Generated at Sat Apr 26 20:20:36 2025 by rpki-client