$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa File: 9321b008-0f22-3d80-8c12-c151456cd1da.roa (raw, json) Hash identifier: bz4Mm2cyf5DVChUo5GUAd6k7u71JesPIQypPuC3S4+k= Subject key identifier: E3:47:48:0D:FE:FF:04:DE:B0:AF:EC:C9:8E:F2:8D:DA:A7:5C:6E:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C074A1BC84F683B2CF380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:07:4a:1b:c8:4f:68:3b:2c:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=7f95be45-769a-44c8-910b-57c790a0663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fe:4f:57:19:01:fc:3f:5d:06:96:12:7b:5f: 8e:c9:d2:22:f8:26:6c:f8:d9:cb:9f:a1:88:e6:64: fa:ba:e0:fe:25:22:87:11:fb:26:30:4e:ce:17:ff: f2:80:24:41:0a:b6:d0:17:57:46:64:ff:27:1b:31: 67:26:a2:a7:76:66:33:9c:2a:e4:d7:43:17:a5:a5: 44:76:44:f4:5c:ea:36:97:a8:84:a1:23:3f:3e:6a: 37:9c:3a:ca:83:24:de:13:73:b6:cd:5b:b8:8a:fb: a3:21:1c:58:57:38:57:81:de:30:6b:cb:63:3d:f1: 8c:21:65:2b:21:ab:5c:86:e4:0f:f5:a7:22:99:63: fc:b2:a2:82:6e:78:f9:df:db:63:f9:8f:03:b5:af: 6b:c4:55:7f:55:cb:a8:29:a0:06:1c:31:d5:00:0f: 6e:b8:01:1b:b1:40:d6:ca:e8:59:09:eb:78:37:5a: b1:24:2f:fd:ad:c2:eb:48:68:5b:52:fb:7c:65:d3: 34:13:79:ed:8f:3e:f6:19:df:98:b2:ff:5e:74:fb: 60:84:fc:92:a9:c6:d8:66:db:9b:0e:52:8f:c6:ba: ca:3e:0e:47:69:b5:0a:d0:b9:fa:c2:e4:eb:5e:54: f6:85:f8:6a:de:5e:06:d2:e2:6b:85:ab:7b:88:29: 8a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:47:48:0D:FE:FF:04:DE:B0:AF:EC:C9:8E:F2:8D:DA:A7:5C:6E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9321b008-0f22-3d80-8c12-c151456cd1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:14:5e:b0:1a:f8:2b:c1:2e:b3:28:b8:61:d3:db:d7:99:72: 92:24:a9:ea:30:a3:92:45:72:1e:e8:4a:df:64:0b:7d:50:62: 54:49:23:6f:ae:66:c8:d4:a5:79:28:93:f6:0f:1c:d5:52:70: 42:2e:ac:b0:4e:fb:e1:74:ef:dd:50:6b:b5:20:71:8d:ee:e9: ea:ce:33:0c:ce:01:7e:f4:86:4f:fe:58:f0:11:02:f2:f7:4b: 7b:4f:49:19:18:79:66:40:e0:f3:42:1f:8c:c4:8a:82:ef:5d: 9e:b3:b5:79:ac:03:61:c0:b4:02:94:8c:b0:b3:5b:3f:26:45: aa:81:13:5b:d8:7d:19:88:eb:ff:8f:7e:0b:ac:d1:e6:16:5d: 1c:a0:7c:40:c7:c1:29:32:f2:a2:e3:a9:45:1e:96:3d:dc:27: c9:a8:c5:2c:f7:66:23:f0:a7:55:d0:69:36:98:a8:26:eb:be: dd:31:a2:43:53:da:31:b7:d3:ab:b2:78:99:1b:a3:8e:cc:50: f7:a9:0b:1d:9b:1a:f6:ce:75:20:4b:9b:4b:40:a1:ee:b4:e6: 7a:ab:dc:9f:3f:7e:68:b3:30:7d:a4:4c:aa:8f:4b:0e:97:c9: 5b:95:4a:e0:fc:84:e0:47:55:5a:cd:84:33:2c:51:b2:5f:92: c9:eb:00:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAdKG8hPaDss84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk N2Y5NWJlNDUtNzY5YS00NGM4LTkxMGItNTdjNzkwYTA2NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/5PVxkB/D9dBpYSe1+OydIi+CZs+NnLn6GI 5mT6uuD+JSKHEfsmME7OF//ygCRBCrbQF1dGZP8nGzFnJqKndmYznCrk10MXpaVE dkT0XOo2l6iEoSM/Pmo3nDrKgyTeE3O2zVu4ivujIRxYVzhXgd4wa8tjPfGMIWUr IatchuQP9acimWP8sqKCbnj539tj+Y8Dta9rxFV/VcuoKaAGHDHVAA9uuAEbsUDW yuhZCet4N1qxJC/9rcLrSGhbUvt8ZdM0E3ntjz72Gd+Ysv9edPtghPySqcbYZtub DlKPxrrKPg5HabUK0Ln6wuTrXlT2hfhq3l4G0uJrhat7iCmKMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONHSA3+/wTesK/syY7yjdqnXG7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTMyMWIwMDgtMGYyMi0z ZDgwLThjMTItYzE1MTQ1NmNkMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoUXrAa+CvBLrMouGHT29eZcpIkqeowo5JFch7oSt9kC31QYlRJI2+u ZsjUpXkok/YPHNVScEIurLBO++F0791Qa7UgcY3u6erOMwzOAX70hk/+WPARAvL3 S3tPSRkYeWZA4PNCH4zEioLvXZ6ztXmsA2HAtAKUjLCzWz8mRaqBE1vYfRmI6/+P fgus0eYWXRygfEDHwSky8qLjqUUelj3cJ8moxSz3ZiPwp1XQaTaYqCbrvt0xokNT 2jG306uyeJkbo47MUPepCx2bGvbOdSBLm0tAoe605nqr3J8/fmizMH2kTKqPSw6X yVuVSuD8hOBHVVrNhDMsUbJfksnrAIY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:25 2025 by rpki-client