$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa File: f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa (raw, json) Hash identifier: CH9rdzwerWjY+YGjejIlIYiCIB9XTcPxmTl4P6PS9B8= Subject key identifier: 5A:BE:28:91:32:58:A2:E6:78:58:3C:01:7D:11:E3:42:82:AD:96:32 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088192DC976534CC9C2C0980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 172.68.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:92:dc:97:65:34:cc:9c:2c:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=8f661d99-28de-4693-9c18-95ad43005046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:74:39:de:76:33:21:d7:e8:29:29:aa:a9:31: 8b:d6:83:5e:c7:ed:a4:40:d7:90:71:be:54:eb:f1: 19:ab:77:8b:c4:b4:e8:00:90:a8:f6:90:a4:4e:9d: 4d:27:d5:ce:42:22:fa:82:9b:b5:15:25:91:63:97: 8e:02:43:c9:18:5f:d5:32:a4:30:7c:60:4b:ec:bd: 3c:56:98:c1:98:f7:97:4f:35:8e:b8:59:e1:1f:a8: 26:65:c9:5e:1c:4f:df:9e:74:d5:48:47:10:8a:54: a0:b9:81:62:42:1a:94:b3:96:f0:b3:15:4c:71:c4: 64:9f:3a:5e:5f:aa:a6:75:d6:82:be:c4:82:c1:bd: 39:7e:d1:0d:04:9f:27:5a:c2:65:b2:89:70:3e:7d: bb:25:1b:03:5b:61:23:3d:46:c0:d4:7d:3a:d5:a2: 91:4c:8c:05:a2:08:e3:c4:16:c8:56:60:ab:2c:c8: c3:60:59:20:c1:7f:b5:0d:19:8e:19:77:4e:04:b1: 06:50:38:d6:90:2a:31:d2:fe:3b:43:33:ba:1a:f9: 84:4c:e7:38:3d:81:45:8d:7b:07:65:cc:b2:3a:7a: 5d:19:b1:9d:89:06:8d:90:50:63:cc:67:ee:12:32: d4:c3:eb:91:3d:38:d1:e5:25:cb:7f:8f:ca:ee:c1: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BE:28:91:32:58:A2:E6:78:58:3C:01:7D:11:E3:42:82:AD:96:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4fa7a41-9b07-313d-948b-1f8984fb2e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:78:87:d8:8d:87:34:8d:66:9b:9e:d0:37:31:b7:e5:fb:05: b0:81:18:0b:1c:bd:c2:72:c9:46:20:09:1c:d0:89:fa:99:b4: d7:81:a1:ab:a6:cc:4b:14:34:6b:29:4e:b8:94:13:d0:fe:02: e5:04:5d:3c:68:ff:9d:30:52:cd:e5:a6:3f:13:bf:09:24:2e: 78:bd:db:57:80:41:3c:da:e2:ca:55:98:38:4c:ac:4e:9d:c6: 82:f5:0b:4c:4c:9f:b3:f3:fe:0f:af:4d:42:35:0f:f5:02:bd: c4:ac:a1:d8:bd:bc:e5:6d:5c:b0:55:91:ac:94:78:cb:11:7f: d0:4f:f6:6d:dd:b4:62:63:24:18:e2:3b:93:ce:5f:e6:99:df: 4b:03:6c:5f:68:b7:cc:fe:ab:49:a7:ce:a4:30:f3:23:c6:fa: a2:cc:53:be:1c:24:c1:f6:62:af:c3:64:cd:32:e8:15:20:70: 66:ca:65:ec:41:9b:4f:ed:94:cb:81:b8:6f:71:80:c1:bf:75: 4a:48:4a:47:59:30:da:00:34:80:18:c0:65:73:64:8e:23:47: 05:5a:cd:8b:75:8a:07:3c:2d:6e:40:73:a4:fd:a1:72:b6:64: 15:18:74:b0:78:b2:30:4b:12:2b:85:de:f9:f3:d1:14:7e:7d: 3c:45:71:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgZLcl2U0zJwsCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OGY2NjFkOTktMjhkZS00NjkzLTljMTgtOTVhZDQzMDA1MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXQ53nYzIdfoKSmqqTGL1oNex+2kQNeQcb5U 6/EZq3eLxLToAJCo9pCkTp1NJ9XOQiL6gpu1FSWRY5eOAkPJGF/VMqQwfGBL7L08 VpjBmPeXTzWOuFnhH6gmZcleHE/fnnTVSEcQilSguYFiQhqUs5bwsxVMccRknzpe X6qmddaCvsSCwb05ftENBJ8nWsJlsolwPn27JRsDW2EjPUbA1H061aKRTIwFogjj xBbIVmCrLMjDYFkgwX+1DRmOGXdOBLEGUDjWkCox0v47QzO6GvmETOc4PYFFjXsH ZcyyOnpdGbGdiQaNkFBjzGfuEjLUw+uRPTjR5SXLf4/K7sH3vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq+KJEyWKLmeFg8AX0R40KCrZYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjRmYTdhNDEtOWIwNy0z MTNkLTk0OGItMWY4OTg0ZmIyZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArERNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx4h9iNhzSNZpue0Dcxt+X7BbCBGAscvcJyyUYgCRzQifqZtNeBoaum zEsUNGspTriUE9D+AuUEXTxo/50wUs3lpj8TvwkkLni921eAQTza4spVmDhMrE6d xoL1C0xMn7Pz/g+vTUI1D/UCvcSsodi9vOVtXLBVkayUeMsRf9BP9m3dtGJjJBji O5POX+aZ30sDbF9ot8z+q0mnzqQw8yPG+qLMU74cJMH2Yq/DZM0y6BUgcGbKZexB m0/tlMuBuG9xgMG/dUpISkdZMNoANIAYwGVzZI4jRwVazYt1igc8LW5Ac6T9oXK2 ZBUYdLB4sjBLEiuF3vnz0RR+fTxFcS8= -----END CERTIFICATE-----Generated at Thu May 8 10:27:19 2025 by rpki-client