$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd9ba23e-776a-3a49-90e6-b56a58f11076.roa File: bd9ba23e-776a-3a49-90e6-b56a58f11076.roa (raw, json) Hash identifier: nMWnzqCzCDmTXx5kvJpteSDAVO/itWN//fC2fxb7L9I= Subject key identifier: 0F:90:E0:C2:63:D9:99:42:E3:C5:8B:17:24:E5:5C:07:B9:2F:C9:7F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088190A025FED550EA1DC380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd9ba23e-776a-3a49-90e6-b56a58f11076.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:90:a0:25:fe:d5:50:ea:1d:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=ae326271-9eea-4d68-9020-3782c83afb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:71:b1:22:6f:09:9e:eb:8c:63:94:9e:7c: 0a:78:d6:aa:db:83:2b:c0:0b:33:fb:1e:b6:2f:3c: 12:92:dc:d0:fc:3e:53:82:be:ca:2c:9a:41:12:db: c0:15:24:67:4f:75:57:2a:c5:e8:a6:b7:54:d7:d4: ca:96:9c:1e:18:eb:24:0d:5d:4c:a6:2d:c0:70:06: 75:3f:ab:37:5a:78:a9:35:12:20:db:93:cb:34:2f: a3:54:27:40:ea:36:21:3a:9e:79:f1:d9:3a:7b:bc: 87:8b:aa:a5:f1:41:e1:3c:4c:78:60:a6:b2:4b:54: c3:91:9f:d4:6c:3c:4b:f8:9e:16:00:48:88:3b:88: 35:d0:75:86:05:97:41:79:0a:4d:d4:6f:be:6b:2e: 3a:fe:67:ad:56:23:42:90:e9:2b:0f:0d:e9:21:1c: 69:52:ed:91:8e:f7:b1:c4:d5:3d:ba:0c:e9:5b:09: 7c:ae:07:86:51:c6:f6:1d:e7:18:e2:dc:2e:97:90: 29:43:47:a7:d5:b8:94:ee:b4:d5:08:af:28:2c:a7: fa:cd:ce:a8:b3:6d:c4:80:5a:80:55:9f:08:c1:06: 2f:82:1b:dd:94:1c:6d:6e:2b:7d:0d:3e:f3:d2:8b: 00:cf:62:4b:84:a1:cf:d4:d5:51:7f:48:89:89:d7: 8e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:90:E0:C2:63:D9:99:42:E3:C5:8B:17:24:E5:5C:07:B9:2F:C9:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd9ba23e-776a-3a49-90e6-b56a58f11076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3f:d0:61:d6:31:f5:9d:f8:32:a1:9c:a5:8e:f8:61:af:22: 34:e9:bc:09:c9:45:0c:a4:3d:3e:72:8b:a9:28:74:a2:42:4b: 99:1e:de:ee:46:b0:3f:a2:7c:07:32:c0:d8:9a:ba:02:cd:21: c0:e1:b5:f8:bc:7f:d1:34:0a:85:a2:20:d5:88:0b:e3:5e:f6: c5:af:e5:2c:fc:eb:ea:7f:3d:5e:23:7a:45:a8:f6:26:bb:26: d8:e4:03:5a:67:44:76:72:92:87:4e:de:6c:75:1b:44:7f:87: 3d:98:84:00:db:30:2a:8e:fc:b1:e4:e7:fe:dc:eb:00:45:a6: c5:ce:2c:0a:ae:6a:8e:d4:db:7d:cc:92:e8:d2:93:eb:9b:fe: f8:cf:cb:e2:ee:a3:a2:7c:04:ef:ec:4b:10:81:bf:21:c0:d1: ac:9c:45:53:74:00:d3:63:b4:f4:b8:8d:48:53:aa:d0:ba:6d: 02:39:61:ef:39:d3:55:e0:13:4c:1b:9a:4c:fa:dc:88:e9:34: 6f:73:9e:32:63:46:9e:7c:91:5d:73:e9:98:62:5d:7f:5e:98: fd:2d:84:5c:16:43:4d:05:eb:af:19:aa:6b:26:f7:fd:23:06: d3:74:af:63:a3:c5:4c:09:9b:e6:97:fd:1f:89:b0:7e:e4:d2: a8:8c:57:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZCgJf7VUOodw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YWUzMjYyNzEtOWVlYS00ZDY4LTkwMjAtMzc4MmM4M2FmYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV5xsSJvCZ7rjGOUnnwKeNaq24MrwAsz+x62 LzwSktzQ/D5Tgr7KLJpBEtvAFSRnT3VXKsXoprdU19TKlpweGOskDV1Mpi3AcAZ1 P6s3WnipNRIg25PLNC+jVCdA6jYhOp558dk6e7yHi6ql8UHhPEx4YKayS1TDkZ/U bDxL+J4WAEiIO4g10HWGBZdBeQpN1G++ay46/metViNCkOkrDw3pIRxpUu2Rjvex xNU9ugzpWwl8rgeGUcb2HecY4twul5ApQ0en1biU7rTVCK8oLKf6zc6os23EgFqA VZ8IwQYvghvdlBxtbit9DT7z0osAz2JLhKHP1NVRf0iJideOXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+Q4MJj2ZlC48WLFyTlXAe5L8l/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmQ5YmEyM2UtNzc2YS0z YTQ5LTkwZTYtYjU2YTU4ZjExMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE/0GHWMfWd+DKhnKWO+GGvIjTpvAnJRQykPT5yi6kodKJCS5ke3u5G sD+ifAcywNiaugLNIcDhtfi8f9E0CoWiINWIC+Ne9sWv5Sz86+p/PV4jekWo9ia7 JtjkA1pnRHZykodO3mx1G0R/hz2YhADbMCqO/LHk5/7c6wBFpsXOLAquao7U233M kujSk+ub/vjPy+Luo6J8BO/sSxCBvyHA0aycRVN0ANNjtPS4jUhTqtC6bQI5Ye85 01XgE0wbmkz63IjpNG9znjJjRp58kV1z6ZhiXX9emP0thFwWQ00F668Zqmsm9/0j BtN0r2OjxUwJm+aX/R+JsH7k0qiMV8s= -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:05 2025 by rpki-client