$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83e88d8d-d62d-3f9f-bfaa-9095bc205ca3.roa File: 83e88d8d-d62d-3f9f-bfaa-9095bc205ca3.roa (raw, json) Hash identifier: AQkmwC3VGOe49JLSiwwgFBDH2X7rISbmTyzwcnFMJ8w= Subject key identifier: D4:0B:A1:A4:20:D2:21:8E:1C:51:F0:9A:2B:A7:F8:03:C5:2E:EC:CD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818C6EBF5D480D9D4EE600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83e88d8d-d62d-3f9f-bfaa-9095bc205ca3.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.65.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8c:6e:bf:5d:48:0d:9d:4e:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=6cf6d010-9b39-471a-82a2-f2d2076e31ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:8a:67:13:3d:46:56:25:4f:b7:19:e3:69: 28:b9:d5:32:4d:2a:b6:a3:6d:ca:da:9e:f3:6d:2f: 2e:41:5b:c7:1c:21:65:5b:6b:67:b5:4f:31:39:20: a5:41:c5:0c:08:53:26:d9:ad:e5:f1:a6:dd:fa:d5: 85:72:04:e5:11:0c:7d:9a:fa:ab:57:dd:72:ef:b8: e9:7b:2e:11:53:bb:80:1f:d6:fb:2c:65:7d:7e:c4: 08:9e:46:f5:7d:93:83:6f:30:61:4e:37:3e:0a:7e: 4f:49:c3:69:ce:83:85:c9:e7:9a:81:88:82:c8:2e: bb:da:3a:99:60:80:2d:d7:30:3b:53:5d:e3:0c:d4: 95:26:a7:44:af:22:18:e7:09:87:da:70:8e:d6:12: f6:30:c6:99:02:8f:c1:00:82:f9:ae:f2:80:7b:32: 99:e5:7f:d2:46:23:65:6e:83:90:b9:37:4c:bf:fa: 53:88:a7:cd:d9:47:99:8c:a2:7b:fc:06:35:35:b2: 19:d7:ab:42:b8:4e:3c:4b:28:31:b8:cf:12:b2:b1: 64:53:8f:df:ac:82:93:fe:c6:1b:a2:64:fc:88:96: 15:f4:cf:c5:dd:1e:ca:04:93:a8:63:e3:d2:25:83: 99:c0:f4:c7:3f:57:ba:26:1a:0e:84:f3:ef:dd:0d: 24:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0B:A1:A4:20:D2:21:8E:1C:51:F0:9A:2B:A7:F8:03:C5:2E:EC:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83e88d8d-d62d-3f9f-bfaa-9095bc205ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:89:65:a5:cb:09:eb:36:21:43:38:10:ff:13:a1:7e:9b:57: 7b:d4:46:a1:52:e8:d0:b2:89:9f:14:a3:82:af:ac:b5:72:7a: 86:b9:33:6d:9a:1d:d5:4f:34:ba:50:97:75:83:1e:f3:fc:dd: 3f:0b:1f:1a:4c:6d:af:c4:03:d3:22:f4:22:fd:10:e9:2f:0f: 49:12:e2:2d:94:0a:c1:70:c8:ed:24:3a:95:59:27:d9:2b:83: df:ba:9d:40:41:75:15:35:94:dc:37:47:16:d8:d5:6d:a6:2c: cc:83:4b:43:4e:a1:88:e1:1b:df:81:2d:bc:73:c6:8e:ea:b6: 85:38:73:75:04:06:78:eb:28:4c:55:3e:00:9d:ef:5c:0b:c3: 92:8b:21:2e:2d:f6:25:30:8d:f3:fe:37:1f:23:c7:79:b5:da: 3a:7e:c9:51:a3:d3:1f:e2:13:71:f8:b0:f9:b7:5e:c6:e9:ba: be:11:d2:8a:73:03:eb:bb:d3:c2:f4:ff:30:91:36:6f:59:ee: b4:8a:15:28:75:3f:12:a3:aa:78:6e:5a:cc:ad:90:44:98:65: db:99:8d:9c:95:55:41:ed:ec:98:df:f0:ac:65:7a:bc:36:55: 55:76:ed:b5:dd:56:1d:5a:3d:86:36:8b:d6:c2:9e:65:fd:0a: 12:5e:58:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYxuv11IDZ1O5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NmNmNmQwMTAtOWIzOS00NzFhLTgyYTItZjJkMjA3NmUzMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNWKZxM9RlYlT7cZ42koudUyTSq2o23K2p7z bS8uQVvHHCFlW2tntU8xOSClQcUMCFMm2a3l8abd+tWFcgTlEQx9mvqrV91y77jp ey4RU7uAH9b7LGV9fsQInkb1fZODbzBhTjc+Cn5PScNpzoOFyeeagYiCyC672jqZ YIAt1zA7U13jDNSVJqdEryIY5wmH2nCO1hL2MMaZAo/BAIL5rvKAezKZ5X/SRiNl boOQuTdMv/pTiKfN2UeZjKJ7/AY1NbIZ16tCuE48SygxuM8SsrFkU4/frIKT/sYb omT8iJYV9M/F3R7KBJOoY+PSJYOZwPTHP1e6JhoOhPPv3Q0kdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQLoaQg0iGOHFHwmiun+APFLuzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODNlODhkOGQtZDYyZC0z ZjlmLWJmYWEtOTA5NWJjMjA1Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaJZaXLCes2IUM4EP8ToX6bV3vURqFS6NCyiZ8Uo4KvrLVyeoa5M22a HdVPNLpQl3WDHvP83T8LHxpMba/EA9Mi9CL9EOkvD0kS4i2UCsFwyO0kOpVZJ9kr g9+6nUBBdRU1lNw3RxbY1W2mLMyDS0NOoYjhG9+BLbxzxo7qtoU4c3UEBnjrKExV PgCd71wLw5KLIS4t9iUwjfP+Nx8jx3m12jp+yVGj0x/iE3H4sPm3Xsbpur4R0opz A+u708L0/zCRNm9Z7rSKFSh1PxKjqnhuWsytkESYZduZjZyVVUHt7Jjf8Kxlerw2 VVV27bXdVh1aPYY2i9bCnmX9ChJeWHE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:06 2025 by rpki-client