$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa File: 6f08d253-32e3-370e-97ee-7b41bde60260.roa (raw, json) Hash identifier: SY5LJH7nNJX5ck73Yf1zoDw7btI6tr1K3cVU6mQTNY8= Subject key identifier: AA:45:C5:E7:94:E0:69:85:52:0C:5C:B9:61:BB:1D:45:5C:9D:64:88 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088190647BAE53B8F2DADE40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:90:64:7b:ae:53:b8:f2:da:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=cb8e8c9d-caff-4d99-b365-dfa5c8026139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:0e:ae:ca:ce:76:70:0d:b1:31:3c:d1:62: 5d:7b:c0:fe:f8:f2:d9:2b:c7:04:f9:8b:12:44:c7: eb:0f:72:3b:77:cc:f1:ce:fa:ce:7f:4a:d0:a7:8e: 8d:34:9e:b3:aa:b2:8f:8d:71:c0:b8:1d:2c:63:19: 19:f8:22:67:0e:af:7e:c2:85:84:23:3e:20:49:b6: 8b:73:9c:e7:e9:a6:df:a0:18:73:95:e0:6d:14:a1: f9:19:28:4b:f2:7c:5f:04:ad:b8:91:dd:7f:69:f7: 66:45:3f:77:72:32:17:bf:c9:df:32:39:d8:61:92: ff:ce:79:e9:dc:fb:61:f6:e9:73:74:78:a7:20:a7: dd:b1:e3:0f:06:f8:fe:06:13:6a:67:f5:8a:63:a3: be:af:ba:e7:e3:4f:a3:b4:32:9c:89:ca:37:fb:43: b3:f6:c1:67:fd:9b:0b:46:6c:0a:f6:30:df:c0:69: 81:11:a8:08:2d:cf:f5:d0:f3:4a:ec:a4:62:17:f9: 90:be:ed:25:65:4b:03:1f:2a:19:c7:71:49:91:0f: b2:e1:c8:55:f7:b5:86:e5:ab:cb:8b:2e:a4:a0:b3: ff:51:ad:a5:e8:5e:8e:b0:94:b5:f4:04:d0:1e:33: a7:da:de:ea:8c:d9:59:5c:3f:41:b3:e0:58:78:b1: 3a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:45:C5:E7:94:E0:69:85:52:0C:5C:B9:61:BB:1D:45:5C:9D:64:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6f08d253-32e3-370e-97ee-7b41bde60260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:63:fc:76:0d:d2:aa:f4:8b:92:8e:11:47:38:8e:f6:4d:41: 87:d5:e4:f2:77:cc:91:82:3d:d8:9e:e4:08:ab:58:7c:75:91: 45:4a:e5:0f:99:e9:52:5c:30:d5:2e:33:96:bf:7a:e8:95:ee: 4d:f9:5e:c6:24:c6:21:98:96:20:19:90:a8:17:b8:5d:ec:a2: ab:7c:39:5d:82:23:2d:22:27:b9:ef:e0:62:27:2b:79:0e:4b: e9:09:c7:0f:7c:b0:4b:22:40:96:2a:45:5c:4b:e4:fd:b5:93: 85:ee:0b:0d:24:52:40:b5:cf:b7:06:42:3a:d3:03:8a:d9:4c: d3:4f:62:0d:46:d0:c0:a4:e6:65:43:e6:17:0f:d4:b5:0a:b7: d2:cb:95:29:0a:7c:56:7d:b4:4e:bf:22:be:d3:8c:1e:2d:25: 44:3b:8c:68:40:63:2e:49:5b:6b:5e:61:1e:d2:6b:a6:11:e1: 3f:d7:6e:cb:1f:77:9f:66:78:b6:5d:b5:34:09:6e:b4:a9:7e: 77:cb:42:8c:7a:f0:93:d0:be:70:43:2d:27:3c:c2:a7:fd:51: cf:64:b5:c9:b3:af:e5:c0:77:ce:bb:df:ad:61:80:b7:35:7d: 41:ff:5c:a9:03:58:87:9e:3c:65:06:95:8f:c0:67:e5:66:07: 05:14:53:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZBke65TuPLa3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk Y2I4ZThjOWQtY2FmZi00ZDk5LWIzNjUtZGZhNWM4MDI2MTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQEOrsrOdnANsTE80WJde8D++PLZK8cE+YsS RMfrD3I7d8zxzvrOf0rQp46NNJ6zqrKPjXHAuB0sYxkZ+CJnDq9+woWEIz4gSbaL c5zn6abfoBhzleBtFKH5GShL8nxfBK24kd1/afdmRT93cjIXv8nfMjnYYZL/znnp 3Pth9ulzdHinIKfdseMPBvj+BhNqZ/WKY6O+r7rn40+jtDKcico3+0Oz9sFn/ZsL RmwK9jDfwGmBEagILc/10PNK7KRiF/mQvu0lZUsDHyoZx3FJkQ+y4chV97WG5avL iy6koLP/Ua2l6F6OsJS19ATQHjOn2t7qjNlZXD9Bs+BYeLE6BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpFxeeU4GmFUgxcuWG7HUVcnWSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmYwOGQyNTMtMzJlMy0z NzBlLTk3ZWUtN2I0MWJkZTYwMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhj/HYN0qr0i5KOEUc4jvZNQYfV5PJ3zJGCPdie5AirWHx1kUVK5Q+Z 6VJcMNUuM5a/euiV7k35XsYkxiGYliAZkKgXuF3soqt8OV2CIy0iJ7nv4GInK3kO S+kJxw98sEsiQJYqRVxL5P21k4XuCw0kUkC1z7cGQjrTA4rZTNNPYg1G0MCk5mVD 5hcP1LUKt9LLlSkKfFZ9tE6/Ir7TjB4tJUQ7jGhAYy5JW2teYR7Sa6YR4T/Xbssf d59meLZdtTQJbrSpfnfLQox68JPQvnBDLSc8wqf9Uc9ktcmzr+XAd867361hgLc1 fUH/XKkDWIeePGUGlY/AZ+VmBwUUU18= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:19 2025 by rpki-client