$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa File: ffefb04b-439d-329a-b0a7-11b8923ec659.roa (raw, json) Hash identifier: s8Hqhk4SHHvri3v1/sKrpXmwshrdzqy/lcI6rAaxybA= Subject key identifier: AE:1A:8B:37:3E:D9:84:E4:C8:75:55:7D:9E:2E:3A:81:EA:69:61:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490881936C39B395F829EFB080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:93:6c:39:b3:95:f8:29:ef:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=65f5181b-cd2c-42d1-8bf2-bd19b32ec00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:35:42:02:fe:4d:1e:d6:58:f6:99:ee:10:dc: 20:03:d2:d4:d5:50:6c:6a:b1:58:75:8b:7e:b6:25: bb:10:f1:ec:46:a9:2c:de:ad:12:e1:a2:ae:ab:ac: 93:b7:79:1a:5c:45:e2:f5:15:19:5a:3c:cd:e3:2a: 60:84:bc:6c:95:5a:f5:dd:bc:f9:73:51:44:21:0d: 1e:67:2f:dc:98:b1:84:8e:1e:ac:fa:51:3b:98:e0: 1c:40:ec:4e:db:7e:da:38:8a:98:92:4e:ab:1f:19: b6:a8:01:e1:c1:bc:75:69:4d:a9:f7:f4:34:03:b7: 72:b7:a5:3c:a9:41:08:cb:31:aa:a8:d2:c8:e9:d6: 70:61:08:0b:fe:21:51:63:82:75:e3:35:9c:01:67: 96:ae:3a:bc:78:bb:ed:17:73:e6:c3:b1:ca:18:3d: 22:0f:64:95:30:e5:f3:e3:84:bf:e2:72:b4:11:eb: 90:01:cd:22:48:5e:93:21:17:dd:8e:76:5b:a3:c9: 11:63:9a:e9:9a:f3:97:fd:bb:f6:44:20:d8:78:91: b2:2a:3b:1d:26:a7:ac:81:9b:cb:c0:59:0d:85:4e: fd:91:e2:40:cd:2b:df:55:ed:8f:ab:26:37:6b:98: 30:c6:28:ac:51:43:40:72:e7:57:1a:09:e8:58:18: 44:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1A:8B:37:3E:D9:84:E4:C8:75:55:7D:9E:2E:3A:81:EA:69:61:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffefb04b-439d-329a-b0a7-11b8923ec659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:7a:7a:c7:24:00:57:54:cb:42:3f:46:8a:44:84:12:65:90: f6:79:8d:76:9b:6c:32:f3:df:ea:1d:96:be:c9:ec:2a:b9:ed: ff:d9:a4:22:75:90:7c:c1:e3:10:e8:b0:93:2b:48:09:bd:b3: 7a:95:57:ce:ab:05:6c:0e:4e:ac:1f:ed:8c:a9:a7:4e:a4:01: ca:e4:08:7d:27:02:36:f6:d1:de:05:69:ac:76:7b:7c:e0:3f: 57:1f:07:84:56:a3:3c:89:f4:cc:a3:69:52:f2:2c:bf:2f:cc: 50:95:11:9e:70:67:fa:0a:68:31:5c:75:65:ef:ad:61:71:d0: 23:4b:39:d8:b1:3f:cd:f3:4d:48:73:34:23:77:6c:88:24:cb: 3c:57:56:3b:7f:c1:58:6c:6a:94:c6:61:33:8e:14:af:21:28: 99:f6:94:9a:ba:91:76:f0:1b:b4:48:0b:5a:e6:d4:bc:ab:dc: 1b:3e:28:f7:31:67:d4:d8:9f:f8:7c:26:53:24:de:b5:ad:b4: 3b:9d:49:2d:ab:89:23:4b:f0:c6:a5:83:b4:88:c1:c6:01:a7: 80:57:4f:fd:de:70:2e:f5:38:10:6b:ad:28:e7:d6:aa:5b:2c: 20:7b:a6:04:44:0b:1e:77:9e:8b:a0:d6:0c:9a:e4:60:02:49: 88:06:ee:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZNsObOV+CnvsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NjVmNTE4MWItY2QyYy00MmQxLThiZjItYmQxOWIzMmVjMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jVCAv5NHtZY9pnuENwgA9LU1VBsarFYdYt+ tiW7EPHsRqks3q0S4aKuq6yTt3kaXEXi9RUZWjzN4ypghLxslVr13bz5c1FEIQ0e Zy/cmLGEjh6s+lE7mOAcQOxO237aOIqYkk6rHxm2qAHhwbx1aU2p9/Q0A7dyt6U8 qUEIyzGqqNLI6dZwYQgL/iFRY4J14zWcAWeWrjq8eLvtF3Pmw7HKGD0iD2SVMOXz 44S/4nK0EeuQAc0iSF6TIRfdjnZbo8kRY5rpmvOX/bv2RCDYeJGyKjsdJqesgZvL wFkNhU79keJAzSvfVe2PqyY3a5gwxiisUUNAcudXGgnoWBhEGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4aizc+2YTkyHVVfZ4uOoHqaWH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmZlZmIwNGItNDM5ZC0z MjlhLWIwYTctMTFiODkyM2VjNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKd6esckAFdUy0I/RopEhBJlkPZ5jXabbDLz3+odlr7J7Cq57f/ZpCJ1 kHzB4xDosJMrSAm9s3qVV86rBWwOTqwf7Yypp06kAcrkCH0nAjb20d4Faax2e3zg P1cfB4RWozyJ9MyjaVLyLL8vzFCVEZ5wZ/oKaDFcdWXvrWFx0CNLOdixP83zTUhz NCN3bIgkyzxXVjt/wVhsapTGYTOOFK8hKJn2lJq6kXbwG7RIC1rm1Lyr3Bs+KPcx Z9TYn/h8JlMk3rWttDudSS2riSNL8Malg7SIwcYBp4BXT/3ecC71OBBrrSjn1qpb LCB7pgRECx53noug1gya5GACSYgG7oA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:33 2025 by rpki-client