$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9098bda0-9e5c-3679-81a4-6aaee1d0a663.roa File: 9098bda0-9e5c-3679-81a4-6aaee1d0a663.roa (raw, json) Hash identifier: YIYFe37mJ1ByXly5nQrmP46KH8dBR78sizYPchgAzKw= Subject key identifier: D5:A3:2C:2C:88:2F:10:9B:7D:00:B9:62:64:3B:78:4A:DE:E8:40:33 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BFC0186168849A2337C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9098bda0-9e5c-3679-81a4-6aaee1d0a663.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 172.64.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bf:c0:18:61:68:84:9a:23:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=28f9ad98-ed78-4788-862f-68bf229b0f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:26:55:26:97:3b:d2:4a:a7:c3:6c:98:16: 43:07:c7:ef:c9:20:f5:26:e9:44:b0:13:cd:18:0a: 1b:55:7c:46:f5:5a:79:66:d0:f1:9a:e2:e5:c2:f8: 32:91:65:2a:d1:9c:3c:55:db:61:1e:3f:f1:36:a5: 04:90:a0:d5:ab:39:cc:5b:e6:2a:6e:d4:e8:ca:74: 6a:9b:d0:1d:04:d8:7d:5e:fe:34:4e:1c:e7:b4:3e: 0b:ef:24:ff:b3:92:49:3a:ec:bb:8f:04:88:47:79: f2:3e:7b:f8:62:64:91:c5:00:a3:24:8c:2a:a1:b3: e6:52:0c:e9:bb:99:02:a0:8f:48:49:4e:f1:8d:5c: b6:81:4c:a2:cd:2b:d0:f8:80:1b:ce:26:52:e4:66: 23:7d:5f:fd:3d:0e:a7:37:4a:74:c1:c7:b7:3f:1d: bf:0e:76:79:42:7c:a8:87:f8:72:aa:91:70:fa:36: 7a:57:e6:33:be:fb:ba:83:32:75:4d:a5:fe:53:6a: 0a:0d:d4:6f:e3:38:66:9d:e1:27:7f:33:57:12:08: 5a:ae:a4:2c:db:c4:a9:12:f7:12:0b:f2:ed:2c:22: 7d:8e:a4:19:06:84:bc:ba:ee:12:84:e1:39:70:a3: a2:84:c0:04:e3:9d:1e:64:67:9d:fe:3d:8f:06:8b: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A3:2C:2C:88:2F:10:9B:7D:00:B9:62:64:3B:78:4A:DE:E8:40:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9098bda0-9e5c-3679-81a4-6aaee1d0a663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:28:18:94:28:79:22:55:9f:53:b7:9a:a5:d2:b7:6a:7c:c0: 68:08:73:db:a5:5a:0e:dc:91:ec:ac:3d:05:fc:05:16:09:11: b4:09:47:42:f2:2c:b2:ee:df:43:11:9e:0d:32:00:e6:8c:27: e2:46:ca:84:d4:77:6f:da:b5:ec:56:43:90:c2:85:12:f7:b4: e9:17:c2:6a:99:e8:79:02:84:ef:36:e8:79:ae:29:97:25:1e: 62:c2:e4:34:3f:c8:7c:93:3b:07:2c:f3:dd:67:ef:10:1b:9e: a1:48:06:82:81:e0:b3:2d:10:cd:c8:e2:17:b1:a9:f9:8f:66: 7d:65:26:97:5e:20:5b:57:a1:21:8b:59:dc:5e:17:c0:7c:ba: 5b:17:b7:ab:8b:77:42:32:09:cd:c1:dc:f4:45:e7:07:a0:2f: b2:81:0b:be:1c:2c:0b:78:3e:62:eb:c4:5b:fd:8c:4c:2a:ba: 6d:a9:ef:b1:ec:c7:2e:8e:df:a4:c9:2a:34:9e:4f:72:cc:db: 1f:3c:63:ce:cf:ea:41:c1:c5:10:c8:57:b8:c2:92:d5:4a:5c: 09:fc:dc:95:0d:b7:de:36:00:54:b6:fd:bf:1a:e0:40:48:3a: 8a:cc:2b:aa:15:5f:73:c6:44:9d:00:0b:9f:6b:d2:b9:93:c0: 5d:7c:fd:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtr/AGGFohJojN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MjhmOWFkOTgtZWQ3OC00Nzg4LTg2MmYtNjhiZjIyOWIwZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWMmVSaXO9JKp8NsmBZDB8fvySD1JulEsBPN GAobVXxG9Vp5ZtDxmuLlwvgykWUq0Zw8VdthHj/xNqUEkKDVqznMW+YqbtToynRq m9AdBNh9Xv40ThzntD4L7yT/s5JJOuy7jwSIR3nyPnv4YmSRxQCjJIwqobPmUgzp u5kCoI9ISU7xjVy2gUyizSvQ+IAbziZS5GYjfV/9PQ6nN0p0wce3Px2/DnZ5Qnyo h/hyqpFw+jZ6V+Yzvvu6gzJ1TaX+U2oKDdRv4zhmneEnfzNXEgharqQs28SpEvcS C/LtLCJ9jqQZBoS8uu4ShOE5cKOihMAE450eZGed/j2PBov2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWjLCyILxCbfQC5YmQ7eEre6EAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTA5OGJkYTAtOWU1Yy0z Njc5LTgxYTQtNmFhZWUxZDBhNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQoGJQoeSJVn1O3mqXSt2p8wGgIc9ulWg7ckeysPQX8BRYJEbQJR0Ly LLLu30MRng0yAOaMJ+JGyoTUd2/atexWQ5DChRL3tOkXwmqZ6HkChO826HmuKZcl HmLC5DQ/yHyTOwcs891n7xAbnqFIBoKB4LMtEM3I4hexqfmPZn1lJpdeIFtXoSGL WdxeF8B8ulsXt6uLd0IyCc3B3PRF5wegL7KBC74cLAt4PmLrxFv9jEwqum2p77Hs xy6O36TJKjSeT3LM2x88Y87P6kHBxRDIV7jCktVKXAn83JUNt942AFS2/b8a4EBI OorMK6oVX3PGRJ0AC59r0rmTwF18/S4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:19:06 2025 by rpki-client