$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa File: dbc3d250-01d9-3b52-8510-66a53acb449e.roa (raw, json) Hash identifier: nRiTuUKeYO13Fd8fNa0FZXiO8wyYPPJ4pwg6MQyjpeg= Subject key identifier: 79:5C:86:11:AD:FE:79:35:65:FE:90:B9:70:83:FF:1B:EC:09:47:F9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BF6B333BC3174C76628C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.70.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f6:b3:33:bc:31:74:c7:66:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=f61723c8-1c8d-453b-af4a-23989d0dc0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:d7:d8:4e:63:b8:8f:36:10:04:88:a0:9c: ec:84:3b:4f:e9:af:68:3e:14:b1:49:a5:68:16:c3: 9c:b7:2f:2b:dd:60:ad:1b:8e:6c:f4:40:8b:a4:b7: 09:7f:49:44:6f:64:69:a9:f0:b2:65:b3:9e:47:73: e1:43:4f:72:06:cb:dd:bd:91:12:f1:96:e8:2f:68: a4:e3:b5:a7:d3:51:50:8b:ec:58:bd:b0:e9:a6:c1: 64:19:88:c9:42:38:16:58:56:4c:b1:e1:06:ff:9d: 20:34:1d:86:c9:76:0a:db:da:54:27:85:08:63:de: e4:ff:1b:47:ec:b2:a7:cb:67:26:f1:e9:3d:32:9d: f4:dd:29:c0:f2:5b:89:a1:b2:dd:d8:81:25:8d:c4: 8f:63:c6:e4:75:0f:9e:3b:ea:92:7b:69:a1:d2:02: 96:13:3f:df:05:87:f0:c5:20:f5:ae:7d:b5:29:54: 0b:c7:a5:23:71:77:52:1a:a3:7a:95:17:ac:64:81: 51:ef:e4:c0:38:25:f8:38:b2:53:a9:87:bf:74:55: 04:9b:a4:a8:ba:7b:c1:9b:00:34:f1:53:f1:e5:8a: 98:22:7c:ac:f0:bf:df:d1:ac:4d:1c:a6:50:da:bd: d6:4e:e0:bd:94:09:88:ea:e9:b9:31:08:bd:9b:8f: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5C:86:11:AD:FE:79:35:65:FE:90:B9:70:83:FF:1B:EC:09:47:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc3d250-01d9-3b52-8510-66a53acb449e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8a:18:3f:f8:01:7f:64:6d:d9:ca:59:55:6a:17:af:10:f9: c9:a5:6f:d0:54:14:91:4d:ec:6e:f3:4f:a7:9e:3d:af:73:b1: 3a:aa:eb:c0:38:a5:86:fa:f3:c9:78:0d:b8:f7:01:d8:0f:73: e5:88:c1:4a:1e:e7:80:e2:9e:96:bc:ea:d4:b7:a1:ff:a6:cb: d3:7d:f7:25:d9:bb:a6:1b:06:d1:cc:aa:d0:ba:2f:5f:d3:2f: 1f:ab:f3:00:b3:6e:df:da:6f:eb:09:75:4c:85:d0:d1:76:d4: 5f:d0:22:63:81:4b:c5:8d:5e:50:2d:4f:c0:1d:6a:08:78:b4: 76:55:54:a9:55:a6:e1:bf:f2:51:60:07:25:01:49:20:c0:65: 4f:96:17:24:8f:77:78:49:3d:e8:17:e3:e9:f8:71:28:c7:df: 88:3a:b5:3c:9e:3c:27:60:cd:45:24:89:af:33:f9:df:9f:5c: 4e:62:a6:0d:06:bc:71:a8:73:db:01:3b:d7:60:02:52:2f:41: 4c:bd:4d:94:85:0c:ab:3d:0f:e6:3e:e0:10:30:97:72:cf:09: 5b:dd:4d:03:37:fb:e3:2b:8d:dd:b6:4e:a0:03:5f:25:6b:10: 72:5d:d5:d7:50:f1:3a:21:0e:eb:49:c6:ff:24:01:80:1e:83: 66:e4:4b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/azM7wxdMdmKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZjYxNzIzYzgtMWM4ZC00NTNiLWFmNGEtMjM5ODlkMGRjMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwLX2E5juI82EASIoJzshDtP6a9oPhSxSaVo FsOcty8r3WCtG45s9ECLpLcJf0lEb2RpqfCyZbOeR3PhQ09yBsvdvZES8ZboL2ik 47Wn01FQi+xYvbDppsFkGYjJQjgWWFZMseEG/50gNB2GyXYK29pUJ4UIY97k/xtH 7LKny2cm8ek9Mp303SnA8luJobLd2IEljcSPY8bkdQ+eO+qSe2mh0gKWEz/fBYfw xSD1rn21KVQLx6UjcXdSGqN6lResZIFR7+TAOCX4OLJTqYe/dFUEm6SounvBmwA0 8VPx5YqYInys8L/f0axNHKZQ2r3WTuC9lAmI6um5MQi9m49kvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlchhGt/nk1Zf6QuXCD/xvsCUf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGJjM2QyNTAtMDFkOS0z YjUyLTg1MTAtNjZhNTNhY2I0NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmKGD/4AX9kbdnKWVVqF68Q+cmlb9BUFJFN7G7zT6eePa9zsTqq68A4 pYb688l4Dbj3AdgPc+WIwUoe54Dinpa86tS3of+my9N99yXZu6YbBtHMqtC6L1/T Lx+r8wCzbt/ab+sJdUyF0NF21F/QImOBS8WNXlAtT8Adagh4tHZVVKlVpuG/8lFg ByUBSSDAZU+WFySPd3hJPegX4+n4cSjH34g6tTyePCdgzUUkia8z+d+fXE5ipg0G vHGoc9sBO9dgAlIvQUy9TZSFDKs9D+Y+4BAwl3LPCVvdTQM3++Mrjd22TqADXyVr EHJd1ddQ8TohDutJxv8kAYAeg2bkS8s= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:34 2025 by rpki-client