$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2d564fc-a0a7-3ee7-9e62-a0136ce9110f.roa File: d2d564fc-a0a7-3ee7-9e62-a0136ce9110f.roa (raw, json) Hash identifier: oKj6qJR1ISY6COn+Cv+Jh3cnhRlKMgYQ+bpGJYYd+jI= Subject key identifier: 15:4E:BC:90:8B:47:D3:5B:29:86:16:49:F4:42:8D:F9:58:1C:3D:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C11DBBF60B8E773A6A600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2d564fc-a0a7-3ee7-9e62-a0136ce9110f.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:11:db:bf:60:b8:e7:73:a6:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=37183218-fcd0-4255-91b2-41cc68cbf09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:08:d2:bc:66:a1:d3:1f:99:a3:cc:a9:da: 40:a1:4b:06:5f:54:b5:16:30:a6:e2:c9:8d:eb:5c: f7:d9:67:46:2f:ce:c8:3e:20:fb:c0:d6:b7:f0:40: 26:46:9b:f1:9b:d3:3b:cf:ef:b5:ea:bf:06:ce:b1: 1f:81:c6:46:b0:31:0d:40:91:2f:41:6b:ae:47:07: b6:d7:5c:bc:2d:b5:59:9d:bc:17:53:89:93:f8:fd: a2:eb:d1:04:8a:26:a3:15:70:6a:35:02:ff:ce:59: 78:63:08:37:15:9c:e6:84:fa:0e:12:e7:89:86:ad: ea:8b:57:25:f1:bf:6a:09:20:04:05:dc:ee:cb:ca: a8:1f:59:39:6d:52:ab:f8:e8:fb:99:98:f1:4e:46: e3:03:42:71:a3:50:18:8b:c6:11:3a:e8:38:ec:05: a7:63:de:21:df:e5:df:77:23:ed:32:df:4e:3d:63: d3:30:01:87:1a:1b:0b:6c:e0:f6:95:d6:d6:5e:9a: 01:b2:47:72:80:ef:4b:cf:4a:74:ff:18:66:81:5e: de:9f:d9:46:65:af:64:b0:c0:3c:04:c5:c4:0b:b5: ca:39:3a:ea:20:9d:34:06:79:a9:94:a2:17:a5:9e: e5:a4:6a:70:db:d3:3b:9b:8f:01:cd:82:6a:c9:25: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4E:BC:90:8B:47:D3:5B:29:86:16:49:F4:42:8D:F9:58:1C:3D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2d564fc-a0a7-3ee7-9e62-a0136ce9110f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e5:d6:1f:93:bb:0b:21:ef:93:15:87:03:8d:7e:1c:cc:88: aa:47:34:48:c7:9d:79:22:91:7b:7c:67:e1:62:78:e5:9f:ae: 5f:5d:56:03:a2:d0:5b:e2:1c:bd:8c:11:a4:d0:cc:42:98:2a: 24:df:c4:9f:67:de:1b:ae:c3:d4:2f:b8:92:54:62:5b:69:e1: 66:2c:e7:ba:37:89:3e:ea:f7:3f:ac:b7:c7:bc:ae:64:95:24: ba:50:f6:7c:e0:30:41:b1:a2:3f:e4:13:d3:8b:e3:57:80:5c: 59:0e:05:d4:17:b0:d8:ee:9f:96:7c:46:e9:e5:05:0e:da:21: a5:ce:22:a7:34:b4:2e:4f:8b:63:77:80:0e:e4:b2:9d:a9:84: cd:de:6b:40:d0:ca:44:a0:8f:84:d2:1d:88:b9:ab:84:4a:e3: e2:ab:29:f3:6e:00:25:31:f7:2e:28:c9:10:9d:6f:4d:da:43: 05:07:ca:36:c3:33:ef:56:3b:5a:e3:b9:a4:f2:46:0f:c9:fe: 3f:66:3b:18:5b:a3:9d:04:8d:4e:5b:6f:24:90:f8:93:fe:1d: 7a:04:36:d8:12:c1:58:85:a5:09:cd:86:1a:59:07:c0:91:fe: 69:5e:26:8a:33:86:ff:35:76:dc:25:e3:6a:39:0d:53:68:a9: 07:ea:8b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBHbv2C453OmpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MzcxODMyMTgtZmNkMC00MjU1LTkxYjItNDFjYzY4Y2JmMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9kI0rxmodMfmaPMqdpAoUsGX1S1FjCm4smN 61z32WdGL87IPiD7wNa38EAmRpvxm9M7z++16r8GzrEfgcZGsDENQJEvQWuuRwe2 11y8LbVZnbwXU4mT+P2i69EEiiajFXBqNQL/zll4Ywg3FZzmhPoOEueJhq3qi1cl 8b9qCSAEBdzuy8qoH1k5bVKr+Oj7mZjxTkbjA0Jxo1AYi8YROug47AWnY94h3+Xf dyPtMt9OPWPTMAGHGhsLbOD2ldbWXpoBskdygO9Lz0p0/xhmgV7en9lGZa9ksMA8 BMXEC7XKOTrqIJ00BnmplKIXpZ7lpGpw29M7m48BzYJqySUEOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVOvJCLR9NbKYYWSfRCjflYHD0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDJkNTY0ZmMtYTBhNy0z ZWU3LTllNjItYTAxMzZjZTkxMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfl1h+Tuwsh75MVhwONfhzMiKpHNEjHnXkikXt8Z+FieOWfrl9dVgOi 0FviHL2MEaTQzEKYKiTfxJ9n3huuw9QvuJJUYltp4WYs57o3iT7q9z+st8e8rmSV JLpQ9nzgMEGxoj/kE9OL41eAXFkOBdQXsNjun5Z8RunlBQ7aIaXOIqc0tC5Pi2N3 gA7ksp2phM3ea0DQykSgj4TSHYi5q4RK4+KrKfNuACUx9y4oyRCdb03aQwUHyjbD M+9WO1rjuaTyRg/J/j9mOxhbo50EjU5bbySQ+JP+HXoENtgSwViFpQnNhhpZB8CR /mleJoozhv81dtwl42o5DVNoqQfqi8k= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:46 2025 by rpki-client