$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b80ac2f-b4e1-3b8f-946a-b3efc57b01ed.roa File: 9b80ac2f-b4e1-3b8f-946a-b3efc57b01ed.roa (raw, json) Hash identifier: F/vQdrFYOBWX9Z9G0sUVxu/xITfN6dTxVfjVrQMQ1eY= Subject key identifier: 2E:4C:87:9A:A9:D0:E8:34:6C:61:FE:91:80:4B:CE:E4:C6:18:4D:6F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69C2A2290A97A136B03FA Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b80ac2f-b4e1-3b8f-946a-b3efc57b01ed.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9c:2a:22:90:a9:7a:13:6b:03:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=22d02bf4-5f33-4836-8227-57a520df7e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:04:d4:39:9f:62:2f:35:5b:99:7b:f5:87:0c: fc:c8:88:2a:51:bf:62:88:a5:04:cf:46:b9:08:e5: 1e:40:e8:f9:84:73:18:98:a4:15:d3:af:74:2a:f1: 79:93:6c:0a:83:f9:9e:92:91:35:cd:a4:50:04:77: 17:51:9e:84:67:15:55:52:2f:58:00:7e:14:53:a0: da:f6:6d:f2:09:ec:34:f1:ec:23:24:f3:17:9a:70: c2:b9:a6:f7:5a:52:c8:9d:77:9d:cb:a2:35:a5:4e: 6e:6f:de:5e:eb:d5:d1:7e:5b:4f:45:18:28:df:cc: d0:0e:23:04:57:a4:7b:68:9b:28:8b:20:25:c7:72: 94:06:f1:6a:ad:e5:30:08:2a:f1:d4:b4:2d:2d:6a: 99:ad:22:62:1d:8b:66:db:24:12:f5:4b:54:5c:3d: 08:a9:4e:de:68:e1:18:6c:cb:c4:f5:53:a4:6c:e5: 94:06:bc:55:14:e0:e7:1e:5a:3e:5f:ad:ab:13:c1: bb:61:59:02:0b:20:29:47:d7:2b:4e:95:ab:7f:b4: ba:53:84:9a:a1:96:6a:2c:f3:74:8d:c7:7b:d8:ea: d0:33:0d:ab:6e:1e:8d:54:29:c2:ff:92:3b:15:e4: 6c:fc:ea:03:72:28:49:e3:c0:22:82:e5:d6:60:db: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4C:87:9A:A9:D0:E8:34:6C:61:FE:91:80:4B:CE:E4:C6:18:4D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b80ac2f-b4e1-3b8f-946a-b3efc57b01ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:65:d3:dd:c4:32:61:69:e9:56:db:27:a1:0b:ff:cb:c9:8a: 64:d9:19:14:96:0e:22:5d:37:50:6e:a0:ed:6a:26:34:2d:90: ca:72:e9:6f:0e:8f:ef:a5:53:3f:97:ac:ad:69:d3:ee:69:f5: df:05:74:37:41:44:87:84:4a:9d:99:61:8f:ec:cd:e6:55:e4: 6e:3c:7f:81:38:f4:10:fe:1c:9b:7d:d9:a0:79:40:7f:54:87: 42:fd:52:a5:b2:f7:67:38:e3:0a:8f:12:dd:81:ca:66:a0:62: 11:f5:53:ef:a2:2b:55:0e:c8:da:a1:ec:98:8e:dd:d2:aa:82: 9f:20:0f:f6:00:a9:81:b7:ca:4b:cc:73:d1:92:fa:02:87:33: ee:be:50:82:39:b7:07:08:c2:43:81:b8:86:94:ba:f8:29:68: bd:71:1a:c4:44:4b:61:bf:d4:d5:dc:e4:03:99:1a:d8:95:6a: f5:88:96:7d:e4:1b:41:c3:d5:cc:95:b4:a5:fc:f7:c4:a3:03: 3d:1a:1d:d6:b5:0e:bf:43:30:43:49:62:c5:42:27:f6:7f:16: b3:84:fe:19:50:49:47:e8:25:ec:b1:36:12:f9:ce:77:43:f3: 87:1d:6c:91:88:3d:75:ff:63:93:7d:80:ee:36:99:b9:d4:42: d9:d2:e1:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pwqIpCpehNrA/owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MjJkMDJiZjQtNWYzMy00ODM2LTgyMjctNTdhNTIwZGY3ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQTUOZ9iLzVbmXv1hwz8yIgqUb9iiKUEz0a5 COUeQOj5hHMYmKQV0690KvF5k2wKg/mekpE1zaRQBHcXUZ6EZxVVUi9YAH4UU6Da 9m3yCew08ewjJPMXmnDCuab3WlLInXedy6I1pU5ub95e69XRfltPRRgo38zQDiME V6R7aJsoiyAlx3KUBvFqreUwCCrx1LQtLWqZrSJiHYtm2yQS9UtUXD0IqU7eaOEY bMvE9VOkbOWUBrxVFODnHlo+X62rE8G7YVkCCyApR9crTpWrf7S6U4SaoZZqLPN0 jcd72OrQMw2rbh6NVCnC/5I7FeRs/OoDcihJ48AiguXWYNtbjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5Mh5qp0Og0bGH+kYBLzuTGGE1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI4MGFjMmYtYjRlMS0z YjhmLTk0NmEtYjNlZmM1N2IwMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdl093EMmFp6VbbJ6EL/8vJimTZGRSWDiJdN1BuoO1qJjQtkMpy6W8O j++lUz+XrK1p0+5p9d8FdDdBRIeESp2ZYY/szeZV5G48f4E49BD+HJt92aB5QH9U h0L9UqWy92c44wqPEt2BymagYhH1U++iK1UOyNqh7JiO3dKqgp8gD/YAqYG3ykvM c9GS+gKHM+6+UII5twcIwkOBuIaUuvgpaL1xGsRES2G/1NXc5AOZGtiVavWIln3k G0HD1cyVtKX898SjAz0aHda1Dr9DMENJYsVCJ/Z/FrOE/hlQSUfoJeyxNhL5zndD 84cdbJGIPXX/Y5N9gO42mbnUQtnS4Yg= -----END CERTIFICATE-----Generated at Sun Apr 27 13:00:25 2025 by rpki-client