$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/441a4b9b-ebe6-35bc-93b4-a1a85475e1bf.roa File: 441a4b9b-ebe6-35bc-93b4-a1a85475e1bf.roa (raw, json) Hash identifier: YV12A6T06QSxlOiYZ7AbipZjF2N4brshpN/Hy1VLaE8= Subject key identifier: 18:E1:09:C3:4D:F3:CC:65:13:2F:21:EE:CC:77:E8:45:AB:24:E8:64 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818189AC218B6DB5E82C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/441a4b9b-ebe6-35bc-93b4-a1a85475e1bf.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:81:89:ac:21:8b:6d:b5:e8:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=c193d931-4749-4ce0-843f-91514cde4cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:94:1f:0c:e7:59:49:1d:22:87:d7:17:10: b0:e3:5f:b5:b2:32:31:47:d5:9d:8f:59:92:b7:19: 33:3c:a6:71:28:2c:5f:ab:02:e8:d7:e6:ce:b5:9d: dc:77:ab:93:63:a5:7b:f7:fd:66:c3:34:ea:d5:8c: d4:24:77:e6:e0:6b:a6:be:41:44:51:2b:3d:8b:d0: 69:79:6b:15:66:fe:00:74:5e:7b:17:97:9e:f7:8e: 4c:30:7f:20:85:97:7e:18:2e:bf:3e:d6:63:8d:e4: ff:e3:80:26:9b:69:f1:b2:1c:ea:2e:02:81:b3:1f: 89:3b:ab:39:82:e3:a6:c4:d1:98:15:8c:9b:76:0e: 89:39:3d:0c:7b:de:d5:e6:0c:7c:00:ef:f2:1a:66: c0:f2:cb:79:92:68:7f:8e:27:ff:e0:07:82:77:c2: 9a:49:e5:eb:c2:69:0d:85:31:cc:d2:5e:19:49:61: 5f:63:b7:33:d8:50:fb:09:43:92:cd:fb:bf:a3:d9: d8:36:cd:5d:b0:78:93:44:43:35:6e:4f:2e:78:6b: 54:aa:fe:89:6e:bf:71:59:f6:2c:1e:9f:be:ce:4c: fb:7f:8d:57:b5:b9:f7:69:79:c4:5e:af:e5:13:f4: 9c:28:85:0e:6e:d9:2e:c5:c6:03:ec:eb:45:53:9f: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E1:09:C3:4D:F3:CC:65:13:2F:21:EE:CC:77:E8:45:AB:24:E8:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/441a4b9b-ebe6-35bc-93b4-a1a85475e1bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:f9:56:be:d7:19:e0:1e:73:ea:4d:37:3b:0e:76:cb:f5:49: 7b:64:05:08:84:b3:d2:7f:10:ab:8b:2e:ac:81:a9:68:e4:a0: 09:e6:09:84:03:68:56:d6:60:6c:c6:16:88:94:ad:17:78:64: 3f:30:40:0a:b8:71:ca:e2:16:3e:f6:c9:71:db:ec:e6:f4:b0: d4:6c:80:f9:b7:78:fb:64:88:5e:59:ad:b9:04:ab:18:aa:c1: 14:69:33:1b:3b:64:3c:17:2c:ca:18:5b:e1:89:1d:10:02:94: 50:3e:24:01:37:88:c2:96:60:c8:78:67:94:11:ad:6f:d3:09: 7e:67:a3:f4:26:9f:62:2f:9d:30:30:c1:10:b8:a2:f8:72:e0: 06:5c:c9:eb:52:d4:41:ac:06:07:b9:6f:2a:65:ab:03:93:58: d8:72:da:98:e8:83:10:23:32:67:20:e3:e3:9b:dd:cb:6b:da: 28:fa:a9:a5:4d:18:15:3c:6b:12:72:78:6f:ef:85:59:ab:97: 40:ff:bf:05:3a:55:b3:78:cc:c6:0d:94:df:cb:c9:03:53:e0: 9f:b2:d7:99:55:08:aa:d6:ae:3a:65:51:bd:32:3b:da:34:40: 25:57:94:03:28:79:25:14:ce:5a:c3:49:45:b5:66:f5:36:cd: e8:a9:f5:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYGJrCGLbbXoLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YzE5M2Q5MzEtNDc0OS00Y2UwLTg0M2YtOTE1MTRjZGU0Y2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKSUHwznWUkdIofXFxCw41+1sjIxR9Wdj1mS txkzPKZxKCxfqwLo1+bOtZ3cd6uTY6V79/1mwzTq1YzUJHfm4GumvkFEUSs9i9Bp eWsVZv4AdF57F5ee945MMH8ghZd+GC6/PtZjjeT/44Amm2nxshzqLgKBsx+JO6s5 guOmxNGYFYybdg6JOT0Me97V5gx8AO/yGmbA8st5kmh/jif/4AeCd8KaSeXrwmkN hTHM0l4ZSWFfY7cz2FD7CUOSzfu/o9nYNs1dsHiTREM1bk8ueGtUqv6Jbr9xWfYs Hp++zkz7f41Xtbn3aXnEXq/lE/ScKIUObtkuxcYD7OtFU5/O7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjhCcNN88xlEy8h7sx36EWrJOhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDQxYTRiOWItZWJlNi0z NWJjLTkzYjQtYTFhODU0NzVlMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKr5Vr7XGeAec+pNNzsOdsv1SXtkBQiEs9J/EKuLLqyBqWjkoAnmCYQD aFbWYGzGFoiUrRd4ZD8wQAq4ccriFj72yXHb7Ob0sNRsgPm3ePtkiF5ZrbkEqxiq wRRpMxs7ZDwXLMoYW+GJHRAClFA+JAE3iMKWYMh4Z5QRrW/TCX5no/Qmn2IvnTAw wRC4ovhy4AZcyetS1EGsBge5byplqwOTWNhy2pjogxAjMmcg4+Ob3ctr2ij6qaVN GBU8axJyeG/vhVmrl0D/vwU6VbN4zMYNlN/LyQNT4J+y15lVCKrWrjplUb0yO9o0 QCVXlAMoeSUUzlrDSUW1ZvU2zeip9Yc= -----END CERTIFICATE-----Generated at Sat May 10 04:49:16 2025 by rpki-client