$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa File: 7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa (raw, json) Hash identifier: rqkt3aDHMv016+bidLWRm55NH1eKFqJ0Cw9GAj1hi6o= Subject key identifier: 1A:CB:10:44:9F:44:F7:F3:44:49:A6:47:C4:97:E3:9B:50:B8:AC:68 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490F7BF97981161FA79A964E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.70.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:f9:79:81:16:1f:a7:9a:96:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=74a00336-d4fe-4a79-83dd-fc132f08e15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:68:36:11:e6:c4:d4:f7:43:e9:ac:71:5e: fd:a8:b5:3e:55:d2:3f:c7:6f:bd:f8:f8:98:c8:5a: 8a:85:69:d0:11:4c:49:0b:62:9d:60:66:61:0e:6c: 1c:04:48:12:e3:7a:19:cf:ef:d0:5a:c2:14:d7:f6: 1e:32:41:eb:9c:18:38:7b:b5:34:1c:5e:fe:18:ce: 44:1b:37:6e:c8:de:dc:4a:33:1a:f7:4a:7b:e3:8e: 44:5a:82:b3:29:ac:90:8e:06:af:51:cb:27:4b:77: 1d:10:6f:04:a9:1e:77:e1:30:d7:0b:04:f6:7d:e3: 77:ab:46:ac:74:37:03:8b:ec:5c:53:31:db:05:c5: 31:f3:6a:0d:0b:ae:b7:49:12:c7:6a:04:96:41:72: 75:04:ca:6b:ef:72:e8:d4:72:85:85:4e:82:d7:83: e0:5c:10:cd:2a:46:12:67:90:5d:61:5a:ed:b0:0e: 18:ae:40:cf:2b:92:29:5f:f1:46:38:70:12:b4:3c: 96:f8:a3:fc:03:11:e8:e9:aa:a5:e5:3d:df:d1:eb: b4:28:f3:25:23:53:77:7f:10:29:16:c2:3c:2c:24: 2c:b8:a8:d1:dd:64:bc:4b:b1:f3:9a:02:3c:3d:b7: 30:a9:cb:10:41:75:98:14:9f:6e:62:ba:85:19:32: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CB:10:44:9F:44:F7:F3:44:49:A6:47:C4:97:E3:9B:50:B8:AC:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d9:03:d0:19:65:9f:eb:43:40:e3:5d:db:c6:c1:62:5e:ed: 1a:45:1e:a5:fd:f2:78:b9:5c:eb:51:01:73:28:13:10:15:9f: 39:f7:a1:b7:4c:80:c2:a2:b5:d4:02:53:67:71:22:33:74:02: bc:24:c9:89:fe:eb:81:94:7e:9a:ae:28:01:0d:a2:5d:31:4b: d7:6c:6b:b5:92:8b:2a:c3:da:25:c8:b6:4f:32:cb:a3:f9:13: 54:bd:50:fe:0c:f8:d0:7b:16:4f:60:1e:47:01:13:ce:64:b7: ad:cf:a1:fe:de:ae:d5:a4:17:c6:39:c3:47:2f:ef:f1:11:df: 86:b1:86:7a:fc:0d:3a:75:a3:10:6a:b9:cf:f2:a8:e1:b9:c0: 99:13:9e:05:4b:94:21:ef:1b:21:75:6b:60:48:4d:98:df:14: 53:13:b1:a9:73:fd:e2:d4:55:f0:00:f6:a1:12:d0:0c:07:0b: b8:c3:45:3f:80:b3:62:57:2f:79:77:11:e9:d3:01:57:e7:93: 68:07:1e:22:d4:59:32:3a:20:80:28:d8:d9:16:77:ef:26:b8: fb:6b:59:4d:50:b7:0a:81:15:80:73:2a:03:30:84:0e:72:23: c4:09:c3:13:19:24:95:c7:26:1c:81:3e:39:aa:a9:99:28:bb: 1d:ca:a3:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/l5gRYfp5qWToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk NzRhMDAzMzYtZDRmZS00YTc5LTgzZGQtZmMxMzJmMDhlMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZxoNhHmxNT3Q+mscV79qLU+VdI/x2+9+PiY yFqKhWnQEUxJC2KdYGZhDmwcBEgS43oZz+/QWsIU1/YeMkHrnBg4e7U0HF7+GM5E GzduyN7cSjMa90p7445EWoKzKayQjgavUcsnS3cdEG8EqR534TDXCwT2feN3q0as dDcDi+xcUzHbBcUx82oNC663SRLHagSWQXJ1BMpr73Lo1HKFhU6C14PgXBDNKkYS Z5BdYVrtsA4YrkDPK5IpX/FGOHAStDyW+KP8AxHo6aql5T3f0eu0KPMlI1N3fxAp FsI8LCQsuKjR3WS8S7HzmgI8PbcwqcsQQXWYFJ9uYrqFGTJZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrLEESfRPfzREmmR8SX45tQuKxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2I5ZjkzNjEtZTNlMC0z YWY1LThlYjUtYzFjZGIyZjY2MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTZA9AZZZ/rQ0DjXdvGwWJe7RpFHqX98ni5XOtRAXMoExAVnzn3obdM gMKitdQCU2dxIjN0ArwkyYn+64GUfpquKAENol0xS9dsa7WSiyrD2iXItk8yy6P5 E1S9UP4M+NB7Fk9gHkcBE85kt63Pof7ertWkF8Y5w0cv7/ER34axhnr8DTp1oxBq uc/yqOG5wJkTngVLlCHvGyF1a2BITZjfFFMTsalz/eLUVfAA9qES0AwHC7jDRT+A s2JXL3l3EenTAVfnk2gHHiLUWTI6IIAo2NkWd+8muPtrWU1QtwqBFYBzKgMwhA5y I8QJwxMZJJXHJhyBPjmqqZkoux3KowI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:48 2025 by rpki-client