$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa File: 9881220c-9ede-3293-a734-f3010f86829e.roa (raw, json) Hash identifier: wmf/ysFiyt6+A+tSIzqFmj4mw7H9KjfbHRjfysoXCuU= Subject key identifier: 71:44:B4:07:CF:15:C6:DD:65:55:7F:16:D0:0C:DF:86:C3:C5:B1:03 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088193D67F646B88A057FF80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:93:d6:7f:64:6b:88:a0:57:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=2adde80a-cfc0-494b-af7c-7bf5288da048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:5e:55:4a:0a:81:05:87:10:af:71:af:48: 70:84:2b:5d:98:62:09:73:91:26:ad:eb:2f:1d:1b: 7f:5f:2e:6a:41:ef:56:0b:8f:b3:1e:a4:9e:f3:d1: 42:43:28:a3:93:f6:51:61:ce:29:72:4f:bc:66:bc: 4b:39:d3:ab:b1:ae:39:3c:21:31:9e:5e:8f:0d:40: a3:7f:9b:61:a6:ab:bd:c2:3b:65:f7:5c:57:00:39: 89:8f:22:30:da:f3:c3:cf:f5:39:36:75:0b:6f:d9: 74:af:67:41:a7:11:a4:07:c3:7a:1c:2a:49:86:1e: 86:d1:a4:6b:dd:c1:c3:c7:37:87:d2:e1:4c:2a:91: 7f:99:f7:65:5f:98:60:44:a1:5a:58:d9:50:c8:a0: 2b:56:99:b6:5b:64:ae:78:ce:d2:33:69:37:c2:8e: 2f:bb:5f:f2:9f:74:e5:22:a3:38:53:7f:6a:09:16: 1a:90:c3:c9:27:41:8c:cf:45:06:a2:eb:5b:1f:3c: 0a:c6:ef:42:e8:f5:05:c5:6f:7c:d2:a1:79:cc:d3: 26:08:14:eb:6f:ec:1c:f8:ef:1c:0b:5c:a6:90:7c: 12:6a:ca:27:5f:8e:94:47:71:a0:b7:20:86:6f:26: 38:2e:dd:6a:9f:42:8c:f7:f1:78:dc:e6:b2:28:1d: 75:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:44:B4:07:CF:15:C6:DD:65:55:7F:16:D0:0C:DF:86:C3:C5:B1:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9881220c-9ede-3293-a734-f3010f86829e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c9:7b:cd:80:72:68:7f:1a:96:f4:f8:8c:71:63:e7:8f:9c: ef:0b:57:cf:da:47:fb:4e:6b:82:c5:24:0e:f7:fd:b1:a1:55: a3:4a:d7:40:0a:b8:4b:ca:e0:db:90:6a:2f:4b:8e:f8:3a:14: c4:78:4b:d0:2b:6d:e5:3a:1a:e2:cb:3e:be:29:10:b8:f1:d3: d5:20:1e:ed:72:c8:28:70:29:c2:cf:62:30:2f:b3:8b:74:f7: a8:dd:11:ac:99:f5:a6:e2:a3:f8:e5:d7:b6:8b:61:46:72:3a: 4d:2a:66:98:1e:72:aa:51:1b:bc:90:e5:d8:f5:93:4c:c0:2c: 66:db:00:49:81:15:48:02:c0:db:c9:39:6c:0e:98:1f:bb:4c: 8c:1a:32:a6:38:76:a6:a2:82:21:09:5b:8b:e4:ca:53:19:ea: 09:3f:61:e5:b2:53:68:3f:11:19:0d:a0:77:c9:35:7d:b3:df: 44:35:75:98:46:06:a0:eb:56:35:94:57:61:54:37:99:33:7a: 19:2f:4a:84:13:79:0f:4f:4e:f5:2c:57:94:c1:eb:fa:84:5e: a0:50:15:a6:e5:ed:d2:2d:e0:97:28:d5:33:b0:9f:4d:3c:6e: 44:62:4e:20:98:8c:af:14:25:a6:89:4c:93:9a:b2:8d:86:88: d8:62:6d:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZPWf2RriKBX/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MmFkZGU4MGEtY2ZjMC00OTRiLWFmN2MtN2JmNTI4OGRhMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAJeVUoKgQWHEK9xr0hwhCtdmGIJc5Emresv HRt/Xy5qQe9WC4+zHqSe89FCQyijk/ZRYc4pck+8ZrxLOdOrsa45PCExnl6PDUCj f5thpqu9wjtl91xXADmJjyIw2vPDz/U5NnULb9l0r2dBpxGkB8N6HCpJhh6G0aRr 3cHDxzeH0uFMKpF/mfdlX5hgRKFaWNlQyKArVpm2W2SueM7SM2k3wo4vu1/yn3Tl IqM4U39qCRYakMPJJ0GMz0UGoutbHzwKxu9C6PUFxW980qF5zNMmCBTrb+wc+O8c C1ymkHwSasonX46UR3GgtyCGbyY4Lt1qn0KM9/F43OayKB11AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFEtAfPFcbdZVV/FtAM34bDxbEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg4MTIyMGMtOWVkZS0z MjkzLWE3MzQtZjMwMTBmODY4MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbJe82Acmh/Gpb0+IxxY+ePnO8LV8/aR/tOa4LFJA73/bGhVaNK10AK uEvK4NuQai9Ljvg6FMR4S9ArbeU6GuLLPr4pELjx09UgHu1yyChwKcLPYjAvs4t0 96jdEayZ9abio/jl17aLYUZyOk0qZpgecqpRG7yQ5dj1k0zALGbbAEmBFUgCwNvJ OWwOmB+7TIwaMqY4dqaigiEJW4vkylMZ6gk/YeWyU2g/ERkNoHfJNX2z30Q1dZhG BqDrVjWUV2FUN5kzehkvSoQTeQ9PTvUsV5TB6/qEXqBQFabl7dIt4Jco1TOwn008 bkRiTiCYjK8UJaaJTJOaso2GiNhibRc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:52 2025 by rpki-client