$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa File: 1598ca3d-5035-3b50-aa15-360fada01876.roa (raw, json) Hash identifier: YJaJFkG/OPkKb9WlsSHAL1wG0+QJwVuH5QmdBEveYY8= Subject key identifier: A7:FE:10:29:95:0A:AF:20:CF:D8:0D:9F:C0:AB:39:5B:6B:31:2B:75 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CDA191BC6095B414B840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 172.71.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:cd:a1:91:bc:60:95:b4:14:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=729cec4b-721c-4651-bee3-a0f8cd2c91f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:60:e3:7b:cc:2b:29:c8:89:5f:69:54:39: 1e:a8:3f:d8:95:8c:6a:6c:a5:09:ee:51:97:68:0e: 1e:d5:13:24:7f:58:11:0e:86:81:35:d5:68:35:ed: a7:3e:52:2d:12:6d:9b:f8:a1:5c:a8:78:82:c4:09: 17:9e:86:3a:72:6e:ac:62:1f:da:7f:2e:b8:04:f9: e6:fb:b3:7f:fb:65:27:bb:25:0f:9f:0b:7a:d9:09: 9a:b1:f0:58:1c:00:c2:6a:0f:1b:87:c8:f9:ac:e1: 4b:3b:b7:f2:4c:d9:d3:e7:a9:5b:59:1f:3b:ad:73: 9e:bd:11:5f:b0:16:ff:6c:c4:4c:d6:73:ec:b1:cb: 29:c8:f3:2a:c2:82:63:6c:3c:c2:cd:cc:fb:f5:49: f2:d1:98:8a:09:d1:ec:63:28:35:51:13:bc:ae:f0: 4e:cb:03:a5:90:2d:65:86:9d:e6:e6:eb:ba:67:bd: 46:ed:bf:19:3d:b3:19:58:b1:2b:63:af:94:cc:64: 4e:e2:26:48:a9:74:a7:12:4e:4a:35:ef:0e:2b:0a: 35:45:9f:39:6f:77:94:70:1f:d5:cc:fa:a1:bd:b6: 03:75:2b:fe:12:2d:1c:e3:0f:fb:9c:52:ad:26:d9: 4c:94:7a:79:3b:2c:85:70:6b:93:e5:a0:03:07:aa: 0d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:10:29:95:0A:AF:20:CF:D8:0D:9F:C0:AB:39:5B:6B:31:2B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5a:89:ae:30:33:96:a2:62:fa:36:b5:92:79:31:e6:fc:d6: 2b:23:59:ca:77:33:83:30:09:53:ee:4b:5e:de:1c:e1:d0:08: 21:8f:08:1f:84:65:59:31:72:87:39:da:f5:63:99:01:7c:69: 3b:d3:10:6e:6f:28:31:1f:ef:56:e3:03:27:99:e1:47:d1:81: 69:bd:37:11:97:7a:2f:c0:21:e8:31:c6:6e:52:67:80:2c:d3: c1:8d:c8:3f:da:f0:c7:a3:34:b0:a0:bb:aa:01:3e:dc:12:ca: fd:3d:d8:60:32:89:07:66:95:c1:81:11:50:6d:3a:1c:87:32: a0:cd:07:2a:af:ec:a6:c4:22:a8:9c:00:fb:70:08:00:d1:68: 17:fd:59:bb:a6:47:3b:7f:fd:b7:63:cb:d5:f5:3e:1b:36:3b: 5b:7b:84:c7:40:dc:96:32:a4:80:65:9a:d7:3f:57:51:cb:e5: ec:2b:61:d1:3e:eb:a6:d7:36:d5:6c:34:97:a5:e6:d9:28:f5: f5:4c:f5:22:51:c9:ac:fc:bc:f0:22:3e:8f:df:34:53:a6:6f: 8f:7f:25:16:7b:7e:0b:03:66:43:a3:d3:94:f3:a8:df:9f:be: 3d:a5:a5:ab:89:00:57:76:fe:cb:54:96:42:d9:33:f8:f9:59: 83:e6:2c:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFts2hkbxglbQUuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NzI5Y2VjNGItNzIxYy00NjUxLWJlZTMtYTBmOGNkMmM5MWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2lg43vMKynIiV9pVDkeqD/YlYxqbKUJ7lGX aA4e1RMkf1gRDoaBNdVoNe2nPlItEm2b+KFcqHiCxAkXnoY6cm6sYh/afy64BPnm +7N/+2UnuyUPnwt62QmasfBYHADCag8bh8j5rOFLO7fyTNnT56lbWR87rXOevRFf sBb/bMRM1nPsscspyPMqwoJjbDzCzcz79Uny0ZiKCdHsYyg1URO8rvBOywOlkC1l hp3m5uu6Z71G7b8ZPbMZWLErY6+UzGRO4iZIqXSnEk5KNe8OKwo1RZ85b3eUcB/V zPqhvbYDdSv+Ei0c4w/7nFKtJtlMlHp5OyyFcGuT5aADB6oNDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf+ECmVCq8gz9gNn8CrOVtrMSt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTU5OGNhM2QtNTAzNS0z YjUwLWFhMTUtMzYwZmFkYTAxODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1aia4wM5aiYvo2tZJ5Meb81isjWcp3M4MwCVPuS17eHOHQCCGPCB+E ZVkxcoc52vVjmQF8aTvTEG5vKDEf71bjAyeZ4UfRgWm9NxGXei/AIegxxm5SZ4As 08GNyD/a8MejNLCgu6oBPtwSyv092GAyiQdmlcGBEVBtOhyHMqDNByqv7KbEIqic APtwCADRaBf9WbumRzt//bdjy9X1Phs2O1t7hMdA3JYypIBlmtc/V1HL5ewrYdE+ 66bXNtVsNJel5tko9fVM9SJRyaz8vPAiPo/fNFOmb49/JRZ7fgsDZkOj05TzqN+f vj2lpauJAFd2/stUlkLZM/j5WYPmLLA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:23:08 2025 by rpki-client