$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/162e72f9-4155-30a7-9efc-6388d3377682.roa File: 162e72f9-4155-30a7-9efc-6388d3377682.roa (raw, json) Hash identifier: Wc6KBGji2qOX0Jud+n0+q6pz3NFtmtYnlsru2TwXP4Y= Subject key identifier: D1:37:DA:2E:EB:99:9C:D6:B6:71:4C:AF:DD:B4:C2:5D:AC:46:38:A8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E170483E2FF5263C16EF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/162e72f9-4155-30a7-9efc-6388d3377682.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:70:48:3e:2f:f5:26:3c:16:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=96986d50-9d45-4e54-8844-7907bddd7655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:72:64:d4:f8:dd:6e:c3:3e:d3:cd:30:f4:b3: 30:35:48:d2:71:ac:45:ec:21:c4:b5:c1:e8:39:54: 83:00:8d:57:b5:84:43:5c:71:fa:3d:ef:d6:04:9e: 61:55:f7:40:b4:66:d1:ca:4e:27:65:4a:7d:27:3a: a1:ac:61:0a:65:cb:07:cf:e0:44:ee:d9:53:e6:7c: 42:b7:21:22:48:27:36:d8:5a:5a:f6:1b:90:9e:91: 8e:5d:66:6f:4c:b1:75:f2:2e:35:ab:24:00:a9:26: c3:0c:e3:2c:45:fb:11:e1:41:34:37:96:7d:ec:ca: b1:dc:90:9c:b6:37:29:52:69:d0:32:57:41:da:65: 3f:36:c8:b3:ed:8e:c0:78:34:50:cc:65:80:27:2a: a1:8b:45:2e:4b:a6:d6:4e:e4:07:fb:fe:ea:dd:04: fd:91:f0:27:c9:cb:17:ed:17:01:61:ff:a6:a1:dd: 68:8c:17:c0:a5:4c:6e:0b:30:79:8a:cc:3e:67:02: 84:98:7a:a1:6d:f7:ca:45:02:25:6f:9c:40:84:5e: a6:18:12:55:80:35:6f:92:cf:87:d3:70:b3:09:a5: 6b:5f:32:02:47:14:31:26:81:39:fd:7e:8b:53:60: 31:3c:0a:f8:87:25:d3:dd:e7:42:90:23:25:a1:58: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:37:DA:2E:EB:99:9C:D6:B6:71:4C:AF:DD:B4:C2:5D:AC:46:38:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/162e72f9-4155-30a7-9efc-6388d3377682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f9:1d:50:c3:fe:84:a4:62:be:ac:ed:3e:d8:5c:79:95:f0: d6:f0:aa:e5:4b:96:4e:e7:ee:20:bb:0b:2f:d0:f0:17:3a:f6: e8:85:bb:ac:52:2b:f2:c3:b1:29:6a:3e:c5:46:ee:9b:7b:76: 7c:53:f7:88:06:5a:82:85:18:1e:1e:3a:5d:26:77:83:b8:6f: 23:73:e3:a6:fe:d5:be:81:65:a6:cf:b9:e9:05:06:79:86:fb: 6d:53:80:b5:51:36:6a:63:e8:2a:ff:24:39:24:60:64:83:93: d1:4a:a9:c6:4a:93:fd:97:9f:e6:50:b6:9e:ca:64:fa:2e:1f: b5:4f:70:7c:e5:02:e9:7d:97:6e:20:73:84:51:ed:d5:b7:79: 2f:b5:ec:ca:40:35:7a:81:46:30:d9:c5:2f:3d:40:8d:00:dd: 00:d1:e4:01:6c:fa:b7:6f:a6:1b:28:a0:d4:19:e3:ef:d7:36: 82:97:80:2f:07:2d:89:7d:00:ba:f6:0f:c2:05:6c:9d:32:66: 1d:81:35:b7:a8:a4:fd:3d:9c:1f:32:a4:8c:82:17:a2:80:32: d4:1a:85:f2:93:72:bb:ea:55:45:b6:26:06:9f:fe:5f:68:de: da:ee:1e:96:a1:40:23:13:8f:5a:cd:ad:20:25:f9:cf:0b:a9: dc:9a:4f:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XBIPi/1JjwW7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk OTY5ODZkNTAtOWQ0NS00ZTU0LTg4NDQtNzkwN2JkZGQ3NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3Jk1PjdbsM+080w9LMwNUjScaxF7CHEtcHo OVSDAI1XtYRDXHH6Pe/WBJ5hVfdAtGbRyk4nZUp9JzqhrGEKZcsHz+BE7tlT5nxC tyEiSCc22Fpa9huQnpGOXWZvTLF18i41qyQAqSbDDOMsRfsR4UE0N5Z97Mqx3JCc tjcpUmnQMldB2mU/Nsiz7Y7AeDRQzGWAJyqhi0UuS6bWTuQH+/7q3QT9kfAnycsX 7RcBYf+mod1ojBfApUxuCzB5isw+ZwKEmHqhbffKRQIlb5xAhF6mGBJVgDVvks+H 03CzCaVrXzICRxQxJoE5/X6LU2AxPAr4hyXT3edCkCMloVjaCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE32i7rmZzWtnFMr920wl2sRjioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTYyZTcyZjktNDE1NS0z MGE3LTllZmMtNjM4OGQzMzc3NjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX5HVDD/oSkYr6s7T7YXHmV8NbwquVLlk7n7iC7Cy/Q8Bc69uiFu6xS K/LDsSlqPsVG7pt7dnxT94gGWoKFGB4eOl0md4O4byNz46b+1b6BZabPuekFBnmG +21TgLVRNmpj6Cr/JDkkYGSDk9FKqcZKk/2Xn+ZQtp7KZPouH7VPcHzlAul9l24g c4RR7dW3eS+17MpANXqBRjDZxS89QI0A3QDR5AFs+rdvphsooNQZ4+/XNoKXgC8H LYl9ALr2D8IFbJ0yZh2BNbeopP09nB8ypIyCF6KAMtQahfKTcrvqVUW2Jgaf/l9o 3truHpahQCMTj1rNrSAl+c8LqdyaT1Q= -----END CERTIFICATE-----Generated at Sat Apr 5 10:18:06 2025 by rpki-client