$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da62c422-da26-3214-ac5c-94122420dfd7.roa File: da62c422-da26-3214-ac5c-94122420dfd7.roa (raw, json) Hash identifier: 1z1nE0gqOS8dsOjzXUCbhi5YwkfbqeC5XeYDAiJdKyw= Subject key identifier: E4:48:BC:B1:0E:A2:DB:88:8B:C4:43:26:ED:2C:7B:D5:05:6D:F7:ED Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490B4C0CB32C0E5B6FA698E000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da62c422-da26-3214-ac5c-94122420dfd7.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.69.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:0c:b3:2c:0e:5b:6f:a6:98:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=e01145b5-dee9-4356-b799-d324c5603253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e0:00:01:24:07:2d:9c:c7:a9:83:eb:2c:18: 92:61:6c:fb:a4:58:85:89:62:3e:4a:72:0d:a7:df: a8:0a:89:f5:85:ef:6f:96:4c:05:50:7a:8b:b9:dd: 37:c7:30:1a:3d:ea:e9:f2:88:41:95:81:01:84:dd: 5c:8e:2e:dd:66:13:70:51:7a:17:fa:94:15:8d:b9: 53:22:26:19:b0:7e:82:b2:42:27:26:16:73:1d:82: 1c:28:42:d1:51:e3:dd:8d:21:01:7a:5d:3d:72:6f: 65:ee:88:63:8e:51:ef:1f:6b:6f:3f:99:fd:9b:14: 41:8f:4a:a7:16:d9:fa:73:26:f1:ba:1d:9f:5a:a7: 28:96:59:b4:e1:ae:c4:6b:e8:45:46:4b:34:3c:74: aa:f7:35:34:2a:75:59:09:72:8f:ca:44:1b:7b:09: 83:b8:7a:ff:0d:b6:10:91:b9:74:a1:1f:79:57:21: 89:22:28:b9:62:f5:b3:b4:3d:99:58:37:9b:94:0d: b6:52:d9:73:b5:d4:bb:b8:f1:ab:0a:85:3c:0e:e1: 0b:53:d7:8f:99:30:b2:d1:e7:0e:3e:a7:a0:f5:cb: 22:30:80:e5:d0:5b:01:39:81:ea:79:3c:44:63:92: 42:82:f9:64:67:4a:c0:a9:70:25:11:48:ed:96:3a: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:48:BC:B1:0E:A2:DB:88:8B:C4:43:26:ED:2C:7B:D5:05:6D:F7:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/da62c422-da26-3214-ac5c-94122420dfd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.69.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ed:51:4b:04:75:4c:79:57:98:15:5b:03:77:fa:93:af:45: e5:7c:d7:f3:2e:0c:89:b0:31:c1:67:b4:1b:0b:ff:22:ca:f8: 49:e6:60:f2:f8:83:98:8e:fb:49:05:49:00:06:af:7b:de:67: 7b:5c:5b:d6:8a:fd:84:eb:72:df:f6:13:a9:12:78:53:52:00: 8b:fc:d6:92:81:2e:0c:ba:45:97:14:fe:8b:0c:af:50:6c:95: 77:58:d7:be:3f:d5:8d:92:46:f1:65:4a:77:90:eb:7b:79:9d: 48:a4:bd:e4:62:06:04:4d:84:1e:85:aa:30:36:6d:48:2c:4d: 75:2f:bb:9e:cf:fd:fc:c6:69:05:4b:f6:b4:25:6d:49:3c:e6: 6d:de:72:4e:e6:9f:00:13:b6:b7:f6:1b:27:e7:83:e1:2e:58: a4:d5:90:b6:0b:28:f8:cb:dd:bf:9e:9c:ec:b3:1b:cb:27:91: e7:8c:80:82:37:dd:2f:de:c1:6c:bb:eb:cd:42:25:14:1f:04: bf:fa:49:22:9d:12:84:51:7f:8f:1e:e4:ee:fe:44:4a:cf:d9: 84:59:51:3c:92:52:2b:ec:20:f5:5a:33:9b:65:4f:e7:b5:73: d0:60:ca:f9:68:44:04:d9:37:f6:c0:17:14:f5:37:cc:7a:19: b3:2b:d9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTAyzLA5bb6aY4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZTAxMTQ1YjUtZGVlOS00MzU2LWI3OTktZDMyNGM1NjAzMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OAAASQHLZzHqYPrLBiSYWz7pFiFiWI+SnIN p9+oCon1he9vlkwFUHqLud03xzAaPerp8ohBlYEBhN1cji7dZhNwUXoX+pQVjblT IiYZsH6CskInJhZzHYIcKELRUePdjSEBel09cm9l7ohjjlHvH2tvP5n9mxRBj0qn Ftn6cybxuh2fWqcollm04a7Ea+hFRks0PHSq9zU0KnVZCXKPykQbewmDuHr/DbYQ kbl0oR95VyGJIii5YvWztD2ZWDeblA22UtlztdS7uPGrCoU8DuELU9ePmTCy0ecO Pqeg9csiMIDl0FsBOYHqeTxEY5JCgvlkZ0rAqXAlEUjtljq1ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORIvLEOotuIi8RDJu0se9UFbfftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGE2MmM0MjItZGEyNi0z MjE0LWFjNWMtOTQxMjI0MjBkZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvtUUsEdUx5V5gVWwN3+pOvReV81/MuDImwMcFntBsL/yLK+EnmYPL4 g5iO+0kFSQAGr3veZ3tcW9aK/YTrct/2E6kSeFNSAIv81pKBLgy6RZcU/osMr1Bs lXdY174/1Y2SRvFlSneQ63t5nUikveRiBgRNhB6FqjA2bUgsTXUvu57P/fzGaQVL 9rQlbUk85m3eck7mnwATtrf2Gyfng+EuWKTVkLYLKPjL3b+enOyzG8snkeeMgII3 3S/ewWy7681CJRQfBL/6SSKdEoRRf48e5O7+RErP2YRZUTySUivsIPVaM5tlT+e1 c9BgyvloRATZN/bAFxT1N8x6GbMr2fI= -----END CERTIFICATE-----Generated at Mon May 12 18:58:53 2025 by rpki-client