$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9232d032-ba80-3c84-89c2-81cb7f4cca2e.roa File: 9232d032-ba80-3c84-89c2-81cb7f4cca2e.roa (raw, json) Hash identifier: ZYzJMr5qciNzYIQGVDZdpFL5rRVkCgVmMSgBavlBWhY= Subject key identifier: EE:58:5D:24:55:4D:5C:EA:71:96:B6:6F:CA:B5:31:85:08:EF:98:E5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C175B03ED097BFCD0FA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9232d032-ba80-3c84-89c2-81cb7f4cca2e.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:17:5b:03:ed:09:7b:fc:d0:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=d16ded1e-3b9c-48c7-b134-39e7e4685856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6d:4b:02:cb:93:ed:38:22:b1:6f:3c:a8:3d: 95:7d:bd:af:56:1a:ab:5a:45:ed:e0:90:ab:a6:b8: 36:b6:40:2a:a2:b2:56:9f:81:98:c4:aa:8c:1f:95: 1e:cb:1d:2c:53:ff:66:bf:2d:a1:76:75:b1:3b:17: cd:26:b0:bf:9a:10:bf:d8:05:56:6d:15:8b:49:f1: 9a:68:b0:10:8f:b1:be:21:1f:b3:8f:a8:45:f4:57: 50:b4:56:4d:f3:38:e0:9c:da:3d:e5:2c:fd:01:a4: a5:1c:82:6b:c0:dd:87:81:d4:ec:4f:77:17:91:07: 64:e6:6d:ce:3c:db:61:8b:58:a3:e3:e9:65:29:d4: 6a:28:09:4d:bd:8f:75:8c:8d:0d:ae:55:a1:73:bd: 34:b1:2a:50:7f:38:52:25:25:ac:0c:e2:27:d9:ee: f8:d6:77:b8:76:2e:fd:da:33:ca:f4:78:8c:da:e7: 23:be:7c:84:c6:90:9d:b4:ea:82:d4:47:73:56:fb: f5:09:8e:8c:07:0a:c1:e0:31:ce:72:54:6b:a8:8e: ea:7b:38:60:04:6d:bb:24:d2:40:3e:7a:e7:fa:40: f3:9b:98:18:b7:fb:e7:9a:e4:71:00:f8:3f:e2:81: ff:8b:c2:60:b7:46:d1:2e:e0:82:c8:f3:6e:31:78: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:58:5D:24:55:4D:5C:EA:71:96:B6:6F:CA:B5:31:85:08:EF:98:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9232d032-ba80-3c84-89c2-81cb7f4cca2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ea:cf:2e:3a:a6:04:ea:74:a4:b8:87:ee:4b:48:c9:d7:86: 76:6b:94:04:ac:a2:06:10:31:55:0e:59:39:cd:c0:7c:e9:5e: 23:5b:fe:52:49:ff:f2:31:1f:83:d1:cb:a3:ff:6f:8c:a8:69: 4c:b6:d4:3a:28:b1:46:d0:80:0c:16:9c:43:91:70:94:59:70: 46:fa:0a:ed:b7:d8:fc:b5:a0:9b:68:9a:4b:61:04:79:f7:a6: ec:46:6d:81:a4:92:78:2d:8f:ff:76:5a:50:84:50:49:02:87: ad:ec:fe:fc:32:ce:c5:d6:80:ff:84:0f:1b:43:48:b0:e8:4c: b5:bf:fa:11:bc:0e:34:cd:ef:16:c9:7b:11:9a:61:14:8b:c2: f2:1b:a0:4d:41:85:5b:87:d4:0d:39:dc:52:7d:db:57:1e:44: 3c:f0:00:c4:4e:7f:6a:1d:0f:5a:bb:5b:9f:8c:54:6c:fe:56: b3:22:ce:ee:f7:8a:b6:cf:2d:a2:5f:33:21:fe:cc:26:13:e9: c5:84:71:28:6d:73:16:c0:70:39:34:11:cf:7e:38:2c:01:bc: 19:f3:0a:c1:fc:99:7d:e7:64:5b:19:38:13:49:55:4a:03:76: 5b:80:e5:d1:12:8c:0c:6c:b4:a6:ea:0e:89:9b:23:ba:e0:1e: 0d:62:6a:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBdbA+0Je/zQ+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZDE2ZGVkMWUtM2I5Yy00OGM3LWIxMzQtMzllN2U0Njg1ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG1LAsuT7TgisW88qD2Vfb2vVhqrWkXt4JCr prg2tkAqorJWn4GYxKqMH5Ueyx0sU/9mvy2hdnWxOxfNJrC/mhC/2AVWbRWLSfGa aLAQj7G+IR+zj6hF9FdQtFZN8zjgnNo95Sz9AaSlHIJrwN2HgdTsT3cXkQdk5m3O PNthi1ij4+llKdRqKAlNvY91jI0NrlWhc700sSpQfzhSJSWsDOIn2e741ne4di79 2jPK9HiM2ucjvnyExpCdtOqC1EdzVvv1CY6MBwrB4DHOclRrqI7qezhgBG27JNJA Pnrn+kDzm5gYt/vnmuRxAPg/4oH/i8Jgt0bRLuCCyPNuMXgbbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5YXSRVTVzqcZa2b8q1MYUI75jlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTIzMmQwMzItYmE4MC0z Yzg0LTg5YzItODFjYjdmNGNjYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvqzy46pgTqdKS4h+5LSMnXhnZrlASsogYQMVUOWTnNwHzpXiNb/lJJ //IxH4PRy6P/b4yoaUy21DoosUbQgAwWnEORcJRZcEb6Cu232Py1oJtomkthBHn3 puxGbYGkkngtj/92WlCEUEkCh63s/vwyzsXWgP+EDxtDSLDoTLW/+hG8DjTN7xbJ exGaYRSLwvIboE1BhVuH1A053FJ921ceRDzwAMROf2odD1q7W5+MVGz+VrMizu73 irbPLaJfMyH+zCYT6cWEcShtcxbAcDk0Ec9+OCwBvBnzCsH8mX3nZFsZOBNJVUoD dluA5dESjAxstKbqDombI7rgHg1iai8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:35 2025 by rpki-client