$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa File: c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa (raw, json) Hash identifier: tdZLTTSNr8uHsTA/udfkE0GLJ+5oC2xsu2YOyisiBdI= Subject key identifier: A3:A9:FB:56:21:B3:74:17:72:52:ED:D2:57:AF:40:35:D5:A1:F3:60 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69DD5E00FE0FF94D75D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9d:d5:e0:0f:e0:ff:94:d7:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=0a47ce90-b91c-441b-861d-84b8789bbca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:2d:14:84:0d:9e:0d:42:d4:88:fa:9d:70: 4a:fe:55:78:96:6c:bc:28:e0:8d:de:a0:0f:39:15: c8:e5:bb:85:63:76:f6:90:ae:b9:63:e5:89:2d:61: 9d:c1:6a:91:46:72:8d:eb:5e:16:a1:60:7f:51:90: 54:99:59:04:66:6c:30:b0:41:f5:1f:a9:8b:16:31: 3e:ec:87:66:0b:38:d1:41:52:f5:2c:64:82:48:e4: 99:eb:10:ce:bc:ce:89:cc:90:ef:94:a2:bd:3a:22: a8:7f:4f:a9:d2:c8:be:93:e0:d7:cb:41:a6:f6:8b: 91:0a:59:8d:f2:b7:39:b9:03:7f:8c:0b:bd:8a:0a: 86:10:30:1a:61:40:32:03:59:c5:db:3f:e9:94:cb: 98:08:7b:12:e1:95:f1:e0:b1:0a:bf:96:4d:80:06: f7:10:3d:04:2b:07:12:6a:aa:b7:96:07:2c:a4:8b: 69:51:ae:18:58:c1:67:b3:55:c1:7c:44:11:36:8a: cb:46:8b:1f:e9:17:8f:85:9c:f5:f0:7e:ed:09:1d: a2:fc:c4:ff:f2:7d:4c:cd:07:70:c7:c3:c8:f9:5d: be:7e:cc:b8:9f:7d:34:d0:e7:36:8d:e4:0c:fb:a5: 0f:21:6f:e3:3a:ec:d5:89:6f:a4:04:a5:5a:93:a0: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A9:FB:56:21:B3:74:17:72:52:ED:D2:57:AF:40:35:D5:A1:F3:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2a701d9-4fcf-3b78-8149-0216b2fb73ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:4e:b4:85:d2:b0:f9:44:7b:5a:b9:87:1d:ed:9b:97:a4:2c: 0c:2c:df:bf:a9:32:c6:20:9a:5c:fb:92:4d:ad:cd:3d:bd:3f: b9:4c:ef:07:c7:b8:68:45:1a:c0:41:9f:47:2f:37:44:52:26: 94:ed:c2:6f:e5:a3:52:43:7f:1b:70:e6:f5:c5:02:e8:e7:98: db:ff:e1:09:64:dd:36:10:f3:9a:24:7c:1f:d8:14:a5:56:28: 4b:be:36:14:8d:f8:8c:90:ee:c2:f5:1e:af:a2:da:40:d8:d9: b2:ae:61:9b:4f:ba:e5:34:0f:97:5a:d0:4e:8c:00:1f:79:36: 94:76:ec:8d:b8:0e:cd:35:ea:1a:79:02:e0:cd:a0:ae:a8:e9: 26:60:71:87:1f:a7:b9:09:b4:a8:36:6b:25:60:bb:69:17:18: b1:42:72:8d:73:74:48:f9:82:52:12:8f:a4:1c:be:fe:e6:9c: 7d:75:39:2c:29:b8:6b:21:f3:fd:1d:06:e3:cd:c9:98:d1:d3: 5a:d0:8b:98:d1:90:b9:5c:54:1d:70:fd:ec:90:82:ff:5b:db: 8c:d1:47:8c:f4:13:c3:52:46:10:3f:dc:93:66:81:6a:a2:d6: 83:e0:2f:fb:eb:be:0e:58:a1:fc:c0:06:1b:ba:1b:1a:19:62: 55:db:7b:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p3V4A/g/5TXXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MGE0N2NlOTAtYjkxYy00NDFiLTg2MWQtODRiODc4OWJiY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsMtFIQNng1C1Ij6nXBK/lV4lmy8KOCN3qAP ORXI5buFY3b2kK65Y+WJLWGdwWqRRnKN614WoWB/UZBUmVkEZmwwsEH1H6mLFjE+ 7IdmCzjRQVL1LGSCSOSZ6xDOvM6JzJDvlKK9OiKof0+p0si+k+DXy0Gm9ouRClmN 8rc5uQN/jAu9igqGEDAaYUAyA1nF2z/plMuYCHsS4ZXx4LEKv5ZNgAb3ED0EKwcS aqq3lgcspItpUa4YWMFns1XBfEQRNorLRosf6RePhZz18H7tCR2i/MT/8n1MzQdw x8PI+V2+fsy4n3000Oc2jeQM+6UPIW/jOuzViW+kBKVak6BMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOp+1Yhs3QXclLt0levQDXVofNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzJhNzAxZDktNGZjZi0z Yjc4LTgxNDktMDIxNmIyZmI3M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdOtIXSsPlEe1q5hx3tm5ekLAws37+pMsYgmlz7kk2tzT29P7lM7wfH uGhFGsBBn0cvN0RSJpTtwm/lo1JDfxtw5vXFAujnmNv/4Qlk3TYQ85okfB/YFKVW KEu+NhSN+IyQ7sL1Hq+i2kDY2bKuYZtPuuU0D5da0E6MAB95NpR27I24Ds016hp5 AuDNoK6o6SZgcYcfp7kJtKg2ayVgu2kXGLFCco1zdEj5glISj6Qcvv7mnH11OSwp uGsh8/0dBuPNyZjR01rQi5jRkLlcVB1w/eyQgv9b24zRR4z0E8NSRhA/3JNmgWqi 1oPgL/vrvg5YofzABhu6GxoZYlXbe3g= -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:09 2025 by rpki-client