$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa File: 6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa (raw, json) Hash identifier: 6FlTctbpSVRLcd6D+YegYpwgVq9LS0buZIKRRP1NeHM= Subject key identifier: D9:D7:60:22:D1:09:48:25:F8:FD:61:86:82:82:9E:A1:54:73:2D:3E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C173B8E1FAD6E622D5088 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:17:3b:8e:1f:ad:6e:62:2d:50:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=44c85d45-64e3-4f4c-b78a-9ecb520848a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:c4:7d:2e:e6:d4:cc:6b:1b:1d:87:f3:0c: 6f:0c:1c:ea:10:e9:9d:e0:a3:53:02:d0:c5:89:ad: 31:0a:b1:d8:cb:af:9e:86:e6:f0:f4:f8:6c:9c:90: bd:8f:34:fb:68:58:05:c0:65:cc:91:b7:18:04:bf: 1a:c1:35:ba:c5:36:43:31:fe:19:26:d8:42:d0:11: 9d:a1:12:fe:f4:91:50:70:cd:1f:3c:98:4f:4f:3d: b8:1b:53:1e:8d:5c:8b:e5:91:f9:27:28:3a:7c:06: 98:b1:fb:50:58:c1:3f:97:89:98:99:57:e6:68:12: c0:d0:f1:67:50:5c:53:d3:42:49:ba:74:98:08:00: 71:85:9e:28:cd:27:d4:09:26:80:94:ac:8c:11:61: d8:0f:1a:5b:8c:86:48:4b:23:0a:8c:af:48:5d:b3: 18:b7:36:31:88:0b:77:7e:bc:6e:67:77:2d:81:36: ca:1e:eb:65:8b:3d:c7:92:c0:00:c9:da:64:bd:9c: 1f:7e:c7:c5:7d:65:20:22:1a:7d:1a:2a:cf:ca:21: 6c:21:7d:aa:3d:5a:9e:eb:1b:21:59:1a:76:d8:98: 17:f9:55:24:df:cf:0b:ce:ee:01:ab:5c:0d:91:f4: 0c:12:e2:6b:79:0f:38:08:12:b5:6a:70:3d:24:f6: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D7:60:22:D1:09:48:25:F8:FD:61:86:82:82:9E:A1:54:73:2D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6c964f17-dd9e-305a-b4a3-efd8e43d3a89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:79:f8:ac:e4:36:d9:38:3d:83:d7:aa:d0:33:b9:e0:44:c3: a8:a0:74:fb:49:6a:c2:11:78:14:6f:1c:a4:e4:a7:ec:07:af: 41:2f:f4:9b:15:ff:dd:1c:dc:36:dc:1b:ee:50:b8:e4:d9:4b: dc:49:9e:28:b6:99:70:ee:ba:fe:f8:49:ff:89:10:99:38:89: 35:27:f7:64:f4:10:40:95:5a:f1:93:1d:3b:a7:7c:ba:e6:2e: 5c:27:45:8d:01:22:f5:46:23:17:4a:86:05:ec:aa:85:bd:1a: bd:65:92:f8:c0:83:56:77:c4:d3:da:bb:10:cb:6a:76:38:06: d5:b1:9f:e2:c1:4c:6a:bc:0c:0c:15:2a:8b:12:19:57:23:3d: a5:42:99:a1:88:50:3c:94:3f:1c:26:69:21:94:38:99:44:df: 87:bb:46:82:96:d0:1b:c1:9c:b4:2d:d2:22:91:1a:d5:3d:44: ee:59:1a:a8:9c:4e:4e:11:7b:f2:ba:a0:30:0d:67:78:6e:3f: a7:40:55:27:34:40:5b:a7:a6:9d:26:64:b6:67:dd:e2:99:f0: 56:a3:57:88:13:ba:16:57:d4:92:c6:a0:40:d9:84:97:00:80: b9:2e:1b:15:3b:16:70:18:d0:31:32:29:c4:42:46:6d:2a:7a: 9a:16:98:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBc7jh+tbmItUIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NDRjODVkNDUtNjRlMy00ZjRjLWI3OGEtOWVjYjUyMDg0OGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJLEfS7m1MxrGx2H8wxvDBzqEOmd4KNTAtDF ia0xCrHYy6+ehubw9PhsnJC9jzT7aFgFwGXMkbcYBL8awTW6xTZDMf4ZJthC0BGd oRL+9JFQcM0fPJhPTz24G1MejVyL5ZH5Jyg6fAaYsftQWME/l4mYmVfmaBLA0PFn UFxT00JJunSYCABxhZ4ozSfUCSaAlKyMEWHYDxpbjIZISyMKjK9IXbMYtzYxiAt3 frxuZ3ctgTbKHutliz3HksAAydpkvZwffsfFfWUgIhp9GirPyiFsIX2qPVqe6xsh WRp22JgX+VUk388Lzu4Bq1wNkfQMEuJreQ84CBK1anA9JPa3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnXYCLRCUgl+P1hhoKCnqFUcy0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmM5NjRmMTctZGQ5ZS0z MDVhLWI0YTMtZWZkOGU0M2QzYTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF5+KzkNtk4PYPXqtAzueBEw6igdPtJasIReBRvHKTkp+wHr0Ev9JsV /90c3DbcG+5QuOTZS9xJnii2mXDuuv74Sf+JEJk4iTUn92T0EECVWvGTHTunfLrm LlwnRY0BIvVGIxdKhgXsqoW9Gr1lkvjAg1Z3xNPauxDLanY4BtWxn+LBTGq8DAwV KosSGVcjPaVCmaGIUDyUPxwmaSGUOJlE34e7RoKW0BvBnLQt0iKRGtU9RO5ZGqic Tk4Re/K6oDANZ3huP6dAVSc0QFunpp0mZLZn3eKZ8FajV4gTuhZX1JLGoEDZhJcA gLkuGxU7FnAY0DEyKcRCRm0qepoWmAw= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:16 2025 by rpki-client