$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93387d12-85b4-3d2f-81d4-c73e2a03360b.roa File: 93387d12-85b4-3d2f-81d4-c73e2a03360b.roa (raw, json) Hash identifier: 7el/da2suzZeO+WLC55af/A7SOq7A2aoXzxTZW6VOnI= Subject key identifier: E4:50:82:9C:4D:C9:82:DC:8C:1B:8E:66:5D:7E:09:82:D5:C9:2B:8A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C0A0D76987E0B88ADF280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93387d12-85b4-3d2f-81d4-c73e2a03360b.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.69.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:0a:0d:76:98:7e:0b:88:ad:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=463fa392-50dc-4e4f-b50e-17843b3d3fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:1c:c3:a4:5a:a0:38:6c:7b:c5:37:4b:76: 11:10:fa:b1:8c:d7:fd:bd:cc:dc:79:1a:19:c6:9e: b2:fa:56:7f:55:8e:8d:18:33:1a:ea:d1:8b:15:67: ef:11:cf:33:0d:62:47:1e:03:a2:3a:4f:03:1c:11: 72:e9:e2:03:13:c5:59:a2:37:2e:9c:06:82:78:58: 8d:24:68:ef:01:ac:81:d2:8d:b1:23:6e:17:58:2d: 64:64:ef:ab:ad:44:2b:a6:14:9e:b5:b6:7d:fc:bf: 1f:cd:01:63:64:63:51:3c:46:10:7e:98:a5:8d:55: 3b:07:d5:94:69:84:01:29:53:91:30:74:e7:70:fc: dc:b4:3b:13:6d:13:14:96:3b:3d:d4:5f:77:83:ff: 34:2f:f6:1f:d2:47:23:b7:06:cd:10:81:2d:24:a7: c2:a1:96:2c:66:ca:82:71:68:80:31:b3:9c:ff:ed: 24:a3:a1:5d:32:97:d5:69:73:fe:04:cf:d7:d4:a5: 0e:16:b6:50:a5:c6:97:f8:eb:b9:58:0e:b1:ae:30: 99:51:c1:83:c3:ea:07:41:ee:86:75:ef:47:da:2a: a9:cf:b2:da:54:04:0f:a1:96:aa:94:e4:7c:c5:f1: e6:dd:b3:ba:20:f4:1c:3d:3d:e7:e9:f8:a3:d9:e2: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:50:82:9C:4D:C9:82:DC:8C:1B:8E:66:5D:7E:09:82:D5:C9:2B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93387d12-85b4-3d2f-81d4-c73e2a03360b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2a:76:d0:c7:0e:b5:9d:a4:82:ce:70:28:a6:5e:cc:03:17: ff:f6:bd:58:39:b3:74:f4:83:dc:a1:69:ff:94:d8:16:4b:fd: 13:44:f1:21:fe:ba:f9:c5:04:94:cc:70:70:58:65:b9:15:2b: 01:5c:bd:b4:c5:1b:b3:e0:c2:65:88:dd:19:57:a6:19:f4:45: 5d:52:73:02:8c:b4:58:28:3b:f7:70:af:d2:ca:ac:7c:81:1f: 71:5b:71:85:31:ee:b7:b1:02:b6:b7:ce:05:8d:c3:42:46:b2: be:6b:50:7e:5a:bf:1c:b0:30:f1:81:c0:ec:2b:71:2c:16:cc: 1d:aa:fd:51:51:c9:2f:c3:ef:ce:68:b5:9c:46:87:90:ed:ad: 0c:58:30:91:67:4c:bc:ba:aa:48:f0:48:c6:fe:f2:ec:df:66: 6f:fc:a9:e4:84:82:cf:44:8b:70:5f:94:de:f4:8e:f7:e2:a3: e2:35:b8:dc:bc:43:8a:5e:c1:59:65:ad:5f:ed:06:c0:15:d7: 30:03:12:d0:70:d1:f2:eb:cc:eb:01:bb:70:67:1c:6d:1d:f1: d4:ba:68:58:13:ac:18:52:a7:b7:6b:52:5c:35:22:7c:3b:f3: c4:de:0d:e9:31:03:26:b2:5a:1a:c2:df:e7:d5:45:d2:66:d3: 14:47:5f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAoNdph+C4it8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NDYzZmEzOTItNTBkYy00ZTRmLWI1MGUtMTc4NDNiM2QzZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuAcw6RaoDhse8U3S3YREPqxjNf9vczceRoZ xp6y+lZ/VY6NGDMa6tGLFWfvEc8zDWJHHgOiOk8DHBFy6eIDE8VZojcunAaCeFiN JGjvAayB0o2xI24XWC1kZO+rrUQrphSetbZ9/L8fzQFjZGNRPEYQfpiljVU7B9WU aYQBKVORMHTncPzctDsTbRMUljs91F93g/80L/Yf0kcjtwbNEIEtJKfCoZYsZsqC cWiAMbOc/+0ko6FdMpfVaXP+BM/X1KUOFrZQpcaX+Ou5WA6xrjCZUcGDw+oHQe6G de9H2iqpz7LaVAQPoZaqlOR8xfHm3bO6IPQcPT3n6fij2eJg8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORQgpxNyYLcjBuOZl1+CYLVySuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTMzODdkMTItODViNC0z ZDJmLTgxZDQtYzczZTJhMDMzNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0qdtDHDrWdpILOcCimXswDF//2vVg5s3T0g9yhaf+U2BZL/RNE8SH+ uvnFBJTMcHBYZbkVKwFcvbTFG7PgwmWI3RlXphn0RV1ScwKMtFgoO/dwr9LKrHyB H3FbcYUx7rexAra3zgWNw0JGsr5rUH5avxywMPGBwOwrcSwWzB2q/VFRyS/D785o tZxGh5DtrQxYMJFnTLy6qkjwSMb+8uzfZm/8qeSEgs9Ei3BflN70jvfio+I1uNy8 Q4pewVllrV/tBsAV1zADEtBw0fLrzOsBu3BnHG0d8dS6aFgTrBhSp7drUlw1Inw7 88TeDekxAyayWhrC3+fVRdJm0xRHX+k= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:49 2025 by rpki-client