$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa File: bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa (raw, json) Hash identifier: npQl67gj37bEoZzYM/ld1DHjvgCZKlwIQUo+MtjSYIM= Subject key identifier: 3A:08:2A:81:62:85:1B:D5:37:FE:31:85:2F:3B:A7:03:06:1E:93:EB Certificate issuer: /CN=aac421ae-305b-4a29-aacc-176ba3fca213 Certificate serial: 010D0C9F4328584902EC0A7234E20E5C2C7ACD60 Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16509 IP address blocks: 168.100.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:0a:72:34:e2:0e:5c:2c:7a:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=08746bcf-0472-4bf8-b181-c7322affec4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8d:94:e8:6f:3f:e7:b7:e2:c7:a0:ae:8e:98: 9a:9e:70:2e:93:42:ea:c9:d3:a1:a3:5c:f5:95:8d: fa:f3:0b:88:7b:ae:de:18:15:c0:a5:8a:49:dc:45: 04:a5:aa:c2:22:e6:8c:cc:d4:fd:79:ec:27:3e:59: 64:71:84:eb:51:bc:50:7e:64:f6:8e:81:4a:8a:c9: 5e:18:d0:f0:95:02:ba:e1:09:1f:7f:eb:bd:8a:0d: a3:7c:e4:7e:8b:cd:8d:c3:c2:90:95:54:92:32:11: af:9b:a5:c2:fb:e7:11:c6:6a:a3:43:6c:e4:a1:64: 8e:a3:37:cd:2b:d3:7a:2c:d4:e6:57:d7:14:3d:c2: 85:95:1d:80:bd:cf:df:5b:59:91:e8:3f:90:df:77: 2d:a2:eb:4f:b3:c0:ed:ca:f0:6b:1a:41:2e:5a:bf: 91:9e:69:90:88:49:46:8c:45:2d:4a:5d:ae:79:82: 61:f9:7e:64:24:65:ec:c3:a4:94:d8:ee:4a:b8:77: f1:0f:25:06:3b:4a:b8:6b:62:a6:87:64:bb:85:8f: 80:16:23:b1:09:be:19:86:f4:17:99:af:ab:d7:af: 7e:9f:04:17:72:14:87:65:c9:fc:ae:dc:e0:72:9d: 7a:8b:ab:89:de:2f:de:46:6a:7a:48:db:be:4b:4d: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:08:2A:81:62:85:1B:D5:37:FE:31:85:2F:3B:A7:03:06:1E:93:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl X509v3 Authority Key Identifier: keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer sbgp-ipAddrBlock: critical IPv4: 168.100.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d3:58:db:3f:16:db:63:a2:a4:68:5a:91:02:8d:5c:36:05: 1c:96:cb:a5:38:32:5e:18:d6:e1:c8:00:20:9b:49:cb:eb:42: 23:d2:66:a0:2e:8b:3c:bd:ef:2f:e3:6c:ba:a5:f6:c0:c2:25: e3:d5:92:2f:c3:da:26:ec:e9:b5:af:dd:e5:90:8a:32:00:dc: 13:65:24:fb:8d:fa:77:3d:21:e2:68:b2:41:e0:bd:6d:f3:70: 22:7f:35:b7:40:22:a1:fc:e8:21:46:43:ee:e3:2a:7c:1f:5e: fa:a1:ff:71:00:99:fa:ae:58:bf:c6:03:93:f2:6f:f6:50:e6: 01:09:d4:14:26:a9:02:6d:11:d4:e0:b5:43:df:4a:43:d6:fb: 04:cd:bb:9b:8a:a9:61:cd:a7:10:22:14:53:8f:b8:ba:0b:04: 7f:97:d1:36:b3:d5:df:2f:58:da:a2:c3:c1:36:1b:b1:2d:c1: 19:ce:26:06:7f:4d:e3:32:ad:e3:e6:19:e3:d2:d7:8a:76:bf: 73:0b:dd:94:ee:7e:47:b7:f9:da:63:0f:d6:9a:d9:a4:83:be: ba:ea:a9:10:4d:ae:c9:ac:43:58:fc:52:bd:7f:62:4a:b6:30: 93:07:b8:17:ab:71:f0:63:9f:1d:92:9b:b9:bd:1c:97:bd:f2: 83:09:6a:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7ApyNOIOXCx6zWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh MjEzMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MDg3NDZiY2YtMDQ3Mi00YmY4LWIxODEtYzczMjJhZmZlYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI2U6G8/57fix6CujpiannAuk0LqydOho1z1 lY368wuIe67eGBXApYpJ3EUEparCIuaMzNT9eewnPllkcYTrUbxQfmT2joFKisle GNDwlQK64Qkff+u9ig2jfOR+i82Nw8KQlVSSMhGvm6XC++cRxmqjQ2zkoWSOozfN K9N6LNTmV9cUPcKFlR2Avc/fW1mR6D+Q33ctoutPs8DtyvBrGkEuWr+RnmmQiElG jEUtSl2ueYJh+X5kJGXsw6SU2O5KuHfxDyUGO0q4a2Kmh2S7hY+AFiOxCb4ZhvQX ma+r169+nwQXchSHZcn8rtzgcp16i6uJ3i/eRmp6SNu+S01BNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoIKoFihRvVN/4xhS87pwMGHpPrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0 MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvYmVjOGEyYzYtYzg3NC0z YjdjLTgwZmEtMDIzMzEyYTJjM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi YTNmY2EyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzTWNs/FttjoqRoWpECjVw2BRyWy6U4Ml4Y1uHIACCbScvrQiPSZqAu izy97y/jbLql9sDCJePVki/D2ibs6bWv3eWQijIA3BNlJPuN+nc9IeJoskHgvW3z cCJ/NbdAIqH86CFGQ+7jKnwfXvqh/3EAmfquWL/GA5Pyb/ZQ5gEJ1BQmqQJtEdTg tUPfSkPW+wTNu5uKqWHNpxAiFFOPuLoLBH+X0Taz1d8vWNqiw8E2G7EtwRnOJgZ/ TeMyrePmGePS14p2v3ML3ZTufke3+dpjD9aa2aSDvrrqqRBNrsmsQ1j8Ur1/Ykq2 MJMHuBercfBjnx2Sm7m9HJe98oMJamU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:49 2025 by rpki-client