$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa File: f1de7960-1381-3f30-9985-24f97a3b12e2.roa (raw, json) Hash identifier: o7n0n3snLh/ZPpFNq/hCJJdn2fevY6Xg3dStGD2AZpI= Subject key identifier: 32:CC:B1:12:31:1F:6C:35:F8:BE:53:4B:75:79:F5:11:42:02:2E:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584909E69D3A47CE7EF2C1C33820 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.68.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9d:3a:47:ce:7e:f2:c1:c3:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=b3de4419-0801-49e4-9761-5d0f66c0a210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:b0:c0:7e:56:0b:35:a4:a6:e0:c5:67:63: af:45:c7:30:9c:2f:4d:e6:e0:e0:ac:29:be:06:4e: b6:71:c2:90:78:7f:28:66:09:0d:04:31:d6:c6:d2: a4:e5:cf:95:9b:a0:bd:93:6d:4b:e5:cd:d0:e7:4b: a9:d0:41:62:8e:43:5f:c7:c8:75:e4:b8:08:c5:6c: a9:b2:8a:3f:0e:fa:ea:3e:2e:e0:05:97:ab:db:a3: fc:9c:5b:de:39:e3:9e:cd:61:65:d9:77:85:c9:36: 22:ce:70:81:0b:fc:99:ae:6f:e6:15:75:c2:1b:79: 9c:46:62:67:d7:8e:92:8b:4a:cf:78:b0:b0:04:a6: 3f:60:78:7d:c7:6e:bf:9d:93:b2:5f:09:f7:2c:07: a8:43:31:41:bb:33:ce:5b:38:f1:ae:8d:5e:f1:38: 36:7d:18:40:c3:b4:8c:1f:75:18:59:4f:1c:b8:86: 69:8f:fb:9d:60:a6:ed:f9:27:ca:41:aa:76:75:60: 60:1c:b4:21:b8:2a:33:a6:9f:9c:30:20:38:35:fd: 45:64:51:4a:c9:45:b3:df:68:64:52:e0:b1:7d:6a: f9:1d:de:70:26:4d:87:c6:6b:c7:92:58:05:f7:c1: 9a:a0:4f:50:17:49:ef:87:a9:bb:7d:52:a3:d6:47: ac:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CC:B1:12:31:1F:6C:35:F8:BE:53:4B:75:79:F5:11:42:02:2E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1de7960-1381-3f30-9985-24f97a3b12e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7a:08:c4:ef:f7:00:fd:d8:16:65:5a:6a:1b:05:f9:bd:4e: f3:10:7b:0f:75:9d:56:49:79:49:09:5a:07:34:70:d2:e5:6a: 73:a1:b0:99:48:92:7a:2d:b6:77:46:08:31:fc:16:25:b3:55: c1:dd:4c:20:8b:5f:ad:19:7e:18:cd:04:6e:28:7e:cb:4c:5a: d7:9c:9e:e5:cd:8c:52:41:8d:ad:54:8c:73:28:67:c8:fe:a9: da:b5:ba:33:43:76:f0:b0:f7:33:14:59:f8:15:93:ba:95:3b: 1c:b2:7b:4d:10:86:f5:76:28:d1:b8:e0:05:78:22:cb:de:d7: c0:bf:d0:a4:20:da:04:7b:44:0a:72:e3:f5:c2:36:c8:c3:44: dc:1e:fe:c9:b8:5e:d4:05:5b:ff:e1:24:87:07:f4:70:9a:91: 34:37:32:81:5d:9d:58:a1:9d:71:49:51:da:11:79:63:58:bb: f1:34:33:7f:ad:0f:b2:92:54:c3:57:15:55:5d:e0:0e:02:3c: 67:d0:6f:a7:2f:ad:9c:d1:c5:b8:6f:ac:80:d7:3b:df:5c:3f: 0a:29:23:d5:dc:d0:5f:24:6e:cf:2a:ce:95:8a:cb:7f:19:40: 93:35:c5:0c:54:a6:47:20:d4:37:8e:21:30:a4:29:34:1a:07: 7e:a0:e0:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5p06R85+8sHDOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk YjNkZTQ0MTktMDgwMS00OWU0LTk3NjEtNWQwZjY2YzBhMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3CwwH5WCzWkpuDFZ2OvRccwnC9N5uDgrCm+ Bk62ccKQeH8oZgkNBDHWxtKk5c+Vm6C9k21L5c3Q50up0EFijkNfx8h15LgIxWyp soo/DvrqPi7gBZer26P8nFveOeOezWFl2XeFyTYiznCBC/yZrm/mFXXCG3mcRmJn 146Si0rPeLCwBKY/YHh9x26/nZOyXwn3LAeoQzFBuzPOWzjxro1e8Tg2fRhAw7SM H3UYWU8cuIZpj/udYKbt+SfKQap2dWBgHLQhuCozpp+cMCA4Nf1FZFFKyUWz32hk UuCxfWr5Hd5wJk2HxmvHklgF98GaoE9QF0nvh6m7fVKj1kesIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLMsRIxH2w1+L5TS3V59RFCAi5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjFkZTc5NjAtMTM4MS0z ZjMwLTk5ODUtMjRmOTdhM2IxMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArESkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF6CMTv9wD92BZlWmobBfm9TvMQew91nVZJeUkJWgc0cNLlanOhsJlI knottndGCDH8FiWzVcHdTCCLX60ZfhjNBG4ofstMWtecnuXNjFJBja1UjHMoZ8j+ qdq1ujNDdvCw9zMUWfgVk7qVOxyye00QhvV2KNG44AV4Isve18C/0KQg2gR7RApy 4/XCNsjDRNwe/sm4XtQFW//hJIcH9HCakTQ3MoFdnVihnXFJUdoReWNYu/E0M3+t D7KSVMNXFVVd4A4CPGfQb6cvrZzRxbhvrIDXO99cPwopI9Xc0F8kbs8qzpWKy38Z QJM1xQxUpkcg1DeOITCkKTQaB36g4Bo= -----END CERTIFICATE-----Generated at Sat Apr 26 22:17:15 2025 by rpki-client