$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa File: 2896349d-d866-3aca-a14c-16a1b5220e33.roa (raw, json) Hash identifier: oVCGfkLWP2a33xgxNY2mJK+y6CCEEHs9evLwUuwHzh4= Subject key identifier: 68:35:EA:F7:4C:97:9A:19:34:30:89:E5:33:D2:D4:B7:99:A5:7F:53 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818C43F1DC92ED74D7EA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.65.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8c:43:f1:dc:92:ed:74:d7:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=1cad880f-ca7f-4b47-a8aa-891f7c224302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:a7:70:06:d5:d9:c7:b4:fe:e4:43:3f:e1: a7:9d:aa:12:f6:c5:5d:c3:96:83:2d:4f:13:a7:60: c3:b2:4b:ee:1b:aa:07:d7:41:91:14:af:59:4b:f1: ec:16:5e:b9:f4:65:20:ac:89:dc:c6:fb:a8:5e:74: 4d:2a:77:5d:55:f6:c8:9d:b1:1a:62:41:52:a5:63: 25:8f:86:4d:1a:9a:b9:f1:82:14:b3:a9:3c:6d:8a: 39:f6:43:fb:45:e5:b2:76:7a:ab:a6:71:bb:a1:ba: 3f:1a:4b:17:92:be:5c:2e:4b:bf:bb:3f:63:59:f6: bb:34:81:73:24:15:2f:c5:39:e5:ea:ea:8a:cc:02: a2:48:51:0c:90:b9:ec:04:42:6e:5b:43:9a:ab:fa: f1:a0:b3:4a:48:26:89:68:a3:09:a3:f5:85:23:22: 35:38:86:4c:3f:f6:f3:41:64:e0:d6:b3:6a:4b:fc: 0d:7c:11:74:d1:5b:3b:b2:11:73:79:0d:92:9a:52: 2a:b3:e5:b8:9c:3f:e4:5b:16:dd:86:17:32:bd:15: 28:70:11:00:a6:a2:60:dd:9c:2f:aa:4b:66:d6:cc: 21:50:4d:7a:f4:68:4f:7a:ea:2c:3b:cf:b9:a3:75: df:19:42:8a:c4:d4:31:02:f8:9b:33:b4:de:bf:bd: 5e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:35:EA:F7:4C:97:9A:19:34:30:89:E5:33:D2:D4:B7:99:A5:7F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2896349d-d866-3aca-a14c-16a1b5220e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.65.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3b:c5:03:11:87:24:e0:c5:fc:12:b8:39:90:bc:43:2d:9a: da:93:9f:4d:28:69:2c:de:31:0f:84:3f:14:70:2d:98:38:f1: 76:79:65:25:2f:f2:a9:b6:2f:f6:1c:1b:9a:d2:90:f2:ff:d7: c4:1f:3c:13:59:95:26:f5:f9:2b:94:c1:fb:4a:d6:32:2d:2d: 53:65:30:dd:14:4f:08:e3:00:76:e9:55:58:e6:a3:a3:05:6a: 5a:b0:6e:b2:4d:af:6e:2e:0c:4d:a1:4b:f6:ad:8f:e1:5f:68: 2a:a1:54:e6:af:25:9a:f7:be:8c:f6:28:ac:0e:6b:76:8d:a2: 05:60:62:34:fd:59:b8:4b:d3:7f:e5:91:e2:88:d9:02:68:c0: 8f:0c:f0:1b:49:ac:1b:c4:7b:ce:5c:b7:dd:b7:3d:cc:5a:34: 4f:87:bf:ff:77:1a:66:9c:f0:31:d0:1c:36:46:d2:63:fc:b2: 3b:00:f5:ce:3f:84:9f:06:8c:23:c3:75:14:f5:c7:5e:f6:83: a3:23:60:f6:9b:61:60:fe:1c:b9:b0:8e:23:77:dc:02:89:ec: b4:c8:e7:ff:fa:81:48:f6:83:07:62:ff:b8:11:9d:eb:9d:e4: c1:aa:69:87:19:98:15:4d:02:7d:18:04:55:61:7a:3e:c2:47: 01:11:54:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYxD8dyS7XTX6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MWNhZDg4MGYtY2E3Zi00YjQ3LWE4YWEtODkxZjdjMjI0MzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppWncAbV2ce0/uRDP+GnnaoS9sVdw5aDLU8T p2DDskvuG6oH10GRFK9ZS/HsFl659GUgrIncxvuoXnRNKnddVfbInbEaYkFSpWMl j4ZNGpq58YIUs6k8bYo59kP7ReWydnqrpnG7obo/GksXkr5cLku/uz9jWfa7NIFz JBUvxTnl6uqKzAKiSFEMkLnsBEJuW0Oaq/rxoLNKSCaJaKMJo/WFIyI1OIZMP/bz QWTg1rNqS/wNfBF00Vs7shFzeQ2SmlIqs+W4nD/kWxbdhhcyvRUocBEApqJg3Zwv qktm1swhUE169GhPeuosO8+5o3XfGUKKxNQxAvibM7Tev71eyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg16vdMl5oZNDCJ5TPS1LeZpX9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjg5NjM0OWQtZDg2Ni0z YWNhLWExNGMtMTZhMWI1MjIwZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErEEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc7xQMRhyTgxfwSuDmQvEMtmtqTn00oaSzeMQ+EPxRwLZg48XZ5ZSUv 8qm2L/YcG5rSkPL/18QfPBNZlSb1+SuUwftK1jItLVNlMN0UTwjjAHbpVVjmo6MF alqwbrJNr24uDE2hS/atj+FfaCqhVOavJZr3voz2KKwOa3aNogVgYjT9WbhL03/l keKI2QJowI8M8BtJrBvEe85ct923PcxaNE+Hv/93Gmac8DHQHDZG0mP8sjsA9c4/ hJ8GjCPDdRT1x172g6MjYPabYWD+HLmwjiN33AKJ7LTI5//6gUj2gwdi/7gRneud 5MGqaYcZmBVNAn0YBFVhej7CRwERVM0= -----END CERTIFICATE-----Generated at Thu May 8 14:55:10 2025 by rpki-client