$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fabfa6cd-3f39-3394-acc4-42ab7bfe6394.roa File: fabfa6cd-3f39-3394-acc4-42ab7bfe6394.roa (raw, json) Hash identifier: QnwhXmPmiUu4g9FD/nNU0j8r2PfI/hm80BXCptIAzGA= Subject key identifier: 8B:47:2C:7E:6A:C8:FC:69:69:9E:B7:83:1F:C9:69:60:D0:B4:A3:39 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490881935EAF8C3182B6F52380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fabfa6cd-3f39-3394-acc4-42ab7bfe6394.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:93:5e:af:8c:31:82:b6:f5:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=87a6259c-d27d-4cc0-906a-59650efdcb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:cf:d5:28:fb:99:d0:5c:50:17:23:28:5a: 57:59:98:0e:ab:f3:28:db:8d:97:61:8a:5e:7b:ac: ea:dc:24:4c:4b:e9:68:9c:fa:03:15:2c:78:b3:62: de:8f:0c:47:74:e5:82:85:b8:c2:44:cc:c1:97:02: 9e:ca:7b:b2:86:f0:8d:b6:d3:7a:fa:ad:59:d6:ad: 82:2c:44:03:48:fe:43:7f:44:5d:6f:65:69:2f:d2: 1f:a5:02:b8:1d:96:21:74:69:bd:fb:75:fb:72:de: 83:c4:44:d1:16:0c:7d:aa:1a:a3:ff:72:f3:34:6a: 61:ff:19:9c:04:61:96:66:b7:49:e0:4f:d4:8f:b6: 40:91:01:3f:b5:6e:e8:e6:c6:c0:37:0b:e4:dd:3a: e8:02:e9:c6:b8:3c:44:d5:56:e7:fa:2d:f1:c8:f8: 21:d0:2c:19:05:8e:c0:6d:5c:f1:5e:e1:fa:13:c5: 7b:5f:85:1b:94:f6:f7:3a:e8:31:e0:11:99:f2:49: 59:a6:96:a5:45:16:35:fc:1c:20:75:1f:c6:97:a3: 2c:1d:98:bc:83:3d:55:27:c5:7b:f0:3c:1d:80:1e: 80:7e:1b:2b:72:0a:e9:f4:7e:6b:7a:32:5f:6c:6e: 02:17:8c:b3:bb:f6:70:75:4a:0d:17:8e:49:0a:f9: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:47:2C:7E:6A:C8:FC:69:69:9E:B7:83:1F:C9:69:60:D0:B4:A3:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fabfa6cd-3f39-3394-acc4-42ab7bfe6394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:14:1c:8f:e3:e4:6c:fc:85:4d:57:05:9b:fe:e1:d8:61:ea: f4:ae:b2:26:e2:01:89:65:ce:c6:e2:86:48:88:b1:91:60:8a: 65:e5:a2:88:8a:3b:a2:91:b6:cc:5c:13:64:7d:e5:24:bf:29: f4:ea:ce:b9:60:5c:de:98:22:42:22:d0:d7:19:ee:9c:28:df: be:da:3d:f2:33:ae:03:d1:84:b7:4a:39:69:3f:e9:67:d8:27: 48:e3:de:4b:9a:37:5f:85:ae:23:84:68:68:44:f9:ab:36:11: d9:b4:31:db:07:72:f2:a1:e7:67:55:dd:7e:6c:7d:8d:83:6d: f3:5f:f1:13:f5:70:bc:4c:e9:c8:d5:c4:9f:88:78:b8:03:38: c5:ad:c5:1a:15:fd:9d:70:c7:99:cd:8c:93:f0:d2:18:ab:ed: bb:96:6e:13:e3:4a:d0:64:5a:64:c4:3a:d6:a1:5b:31:7b:d5: 71:28:e9:78:54:46:f6:1f:81:bd:b9:1b:98:25:35:ff:4b:7e: 8b:b7:10:2b:17:02:56:03:49:91:6f:8b:fe:1f:88:83:b1:0f: ea:3c:74:db:0e:8f:84:9f:87:8a:2d:e0:80:8e:31:46:b0:36: d2:fd:1d:ad:69:46:86:f3:3a:95:9a:da:f8:52:3d:f4:b3:62: 6a:4b:7d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZNer4wxgrb1I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ODdhNjI1OWMtZDI3ZC00Y2MwLTkwNmEtNTk2NTBlZmRjYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojLP1Sj7mdBcUBcjKFpXWZgOq/Mo242XYYpe e6zq3CRMS+lonPoDFSx4s2LejwxHdOWChbjCRMzBlwKeynuyhvCNttN6+q1Z1q2C LEQDSP5Df0Rdb2VpL9IfpQK4HZYhdGm9+3X7ct6DxETRFgx9qhqj/3LzNGph/xmc BGGWZrdJ4E/Uj7ZAkQE/tW7o5sbANwvk3TroAunGuDxE1Vbn+i3xyPgh0CwZBY7A bVzxXuH6E8V7X4UblPb3Ougx4BGZ8klZppalRRY1/BwgdR/Gl6MsHZi8gz1VJ8V7 8DwdgB6Afhsrcgrp9H5rejJfbG4CF4yzu/ZwdUoNF45JCvk3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItHLH5qyPxpaZ63gx/JaWDQtKM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmFiZmE2Y2QtM2YzOS0z Mzk0LWFjYzQtNDJhYjdiZmU2Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUUHI/j5Gz8hU1XBZv+4dhh6vSusibiAYllzsbihkiIsZFgimXlooiK O6KRtsxcE2R95SS/KfTqzrlgXN6YIkIi0NcZ7pwo377aPfIzrgPRhLdKOWk/6WfY J0jj3kuaN1+FriOEaGhE+as2Edm0MdsHcvKh52dV3X5sfY2DbfNf8RP1cLxM6cjV xJ+IeLgDOMWtxRoV/Z1wx5nNjJPw0hir7buWbhPjStBkWmTEOtahWzF71XEo6XhU RvYfgb25G5glNf9Lfou3ECsXAlYDSZFvi/4fiIOxD+o8dNsOj4Sfh4ot4ICOMUaw NtL9Ha1pRobzOpWa2vhSPfSzYmpLfQo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:27 2025 by rpki-client