$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07a1100e-daf4-3414-94dc-e3a2f9e91782.roa File: 07a1100e-daf4-3414-94dc-e3a2f9e91782.roa (raw, json) Hash identifier: e3LrpFeSuDuQfpaHCmFI75hNFBkfGOzC79TXeHS7fNs= Subject key identifier: 9F:1F:2B:9A:C8:D3:1E:51:FF:99:28:34:7D:9D:C7:32:E1:CC:A5:3A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8E0A3D8BFCDA4D522238 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07a1100e-daf4-3414-94dc-e3a2f9e91782.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8e:0a:3d:8b:fc:da:4d:52:22:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=79fcab59-b49d-4881-ba45-91872633c4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:a0:7c:82:5c:e6:d2:a5:68:01:45:41:30: 2a:95:76:4a:e6:00:14:bc:13:51:76:6b:c2:92:2c: e7:3b:94:cf:61:db:0d:1d:3b:9a:5f:59:e7:ee:00: 9e:e3:84:b4:83:67:19:eb:f0:d5:c5:18:ab:a3:60: 85:1b:2e:f3:cb:e9:45:44:aa:7e:d2:09:f1:21:2d: 36:ac:f8:96:8f:e6:d8:ce:ca:00:c0:bd:54:62:ec: 56:b8:9f:66:4b:a6:bd:ba:7c:72:f4:aa:2f:3c:71: 51:83:20:a7:54:92:10:be:06:0c:dd:e4:34:6c:e2: 1f:7b:ac:db:b9:ca:25:1f:a0:a3:43:0f:4f:45:b0: e5:a0:77:4f:ed:6e:05:3a:a9:84:d2:65:cb:71:66: a9:95:1e:10:47:b4:70:a4:44:a4:da:bc:93:2d:d2: 14:0d:df:a5:ab:7a:85:cd:99:94:1f:5a:a2:84:8e: 9a:73:58:45:97:b2:92:15:a4:4e:33:b4:ef:20:1a: b9:97:3f:58:db:5e:55:8e:3b:cc:3e:72:17:88:6a: d5:81:3a:cb:48:ee:96:cf:5e:57:27:da:09:54:82: 17:06:cd:1a:1e:04:5f:55:79:77:f2:bd:58:0c:61: b3:11:e5:a6:be:bd:b7:29:d3:33:b5:5e:b2:a5:a5: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1F:2B:9A:C8:D3:1E:51:FF:99:28:34:7D:9D:C7:32:E1:CC:A5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07a1100e-daf4-3414-94dc-e3a2f9e91782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:1f:20:a7:33:79:e9:1a:27:d8:f4:56:37:c0:70:0f:1a:a2: ac:63:21:37:70:a4:41:78:38:3c:63:33:d3:41:a5:f9:9a:f5: ff:e2:21:47:73:af:a2:40:03:3e:cb:ee:df:af:34:ab:7b:64: 3e:f9:19:31:ce:3f:5f:de:07:3c:7b:3b:08:2c:bd:30:a3:84: 07:8d:a9:36:43:ed:ac:71:39:40:f1:5e:5a:b7:c6:08:a3:14: 79:10:9b:45:31:ef:3a:69:2f:ad:ba:26:f4:dd:4d:5a:3e:a8: 97:e4:9d:90:fc:6b:bf:e8:f2:31:af:8d:24:ae:f5:69:01:dc: dd:62:2c:22:9f:32:7f:2a:e7:db:58:be:4c:63:b8:76:5e:73: 19:65:63:a3:3f:09:97:8d:09:b0:29:8b:d6:5c:c2:12:1f:c7: 3f:6c:8a:e1:06:8a:dc:a7:a1:50:49:59:9a:3c:f5:ad:f8:25: b5:94:6c:e8:90:09:6c:93:e9:75:af:31:15:af:a4:22:e1:c6: a1:83:38:9e:1e:e1:5d:eb:49:5b:30:a1:d7:75:48:22:d1:d4: d5:ea:30:32:83:a4:26:7c:4e:4c:55:ff:ae:0b:00:a7:bc:64: 00:87:7f:01:ea:ce:da:f9:17:7a:20:1c:a8:c5:96:35:ea:5f: 64:44:8e:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo4KPYv82k1SIjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NzlmY2FiNTktYjQ5ZC00ODgxLWJhNDUtOTE4NzI2MzNjNGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunegfIJc5tKlaAFFQTAqlXZK5gAUvBNRdmvC kiznO5TPYdsNHTuaX1nn7gCe44S0g2cZ6/DVxRiro2CFGy7zy+lFRKp+0gnxIS02 rPiWj+bYzsoAwL1UYuxWuJ9mS6a9unxy9KovPHFRgyCnVJIQvgYM3eQ0bOIfe6zb ucolH6CjQw9PRbDloHdP7W4FOqmE0mXLcWaplR4QR7RwpESk2ryTLdIUDd+lq3qF zZmUH1qihI6ac1hFl7KSFaROM7TvIBq5lz9Y215VjjvMPnIXiGrVgTrLSO6Wz15X J9oJVIIXBs0aHgRfVXl38r1YDGGzEeWmvr23KdMztV6ypaWpCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8fK5rI0x5R/5koNH2dxzLhzKU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDdhMTEwMGUtZGFmNC0z NDE0LTk0ZGMtZTNhMmY5ZTkxNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEfIKczeekaJ9j0VjfAcA8aoqxjITdwpEF4ODxjM9NBpfma9f/iIUdz r6JAAz7L7t+vNKt7ZD75GTHOP1/eBzx7OwgsvTCjhAeNqTZD7axxOUDxXlq3xgij FHkQm0Ux7zppL626JvTdTVo+qJfknZD8a7/o8jGvjSSu9WkB3N1iLCKfMn8q59tY vkxjuHZecxllY6M/CZeNCbApi9ZcwhIfxz9siuEGitynoVBJWZo89a34JbWUbOiQ CWyT6XWvMRWvpCLhxqGDOJ4e4V3rSVswodd1SCLR1NXqMDKDpCZ8TkxV/64LAKe8 ZACHfwHqztr5F3ogHKjFljXqX2REjik= -----END CERTIFICATE-----Generated at Fri Jun 6 16:43:00 2025 by rpki-client