$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b23eff5-5443-3da2-8a61-463d33a56c84.roa File: 1b23eff5-5443-3da2-8a61-463d33a56c84.roa (raw, json) Hash identifier: XipwW3lIozuziYh0f0bXwoB5wfm3yNuwZNSxcHCTfNg= Subject key identifier: 9A:BD:07:91:3C:15:78:AA:D7:E9:DB:05:F6:76:26:47:C0:2B:DB:B8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD0009DE2AC2C9B734840 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b23eff5-5443-3da2-8a61-463d33a56c84.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.71.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d0:00:9d:e2:ac:2c:9b:73:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=b0721163-ee74-49ef-9295-51fe7349fa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:aa:48:ea:cd:47:19:3c:c1:4d:91:65:10:6e: a2:8c:b2:76:32:ff:79:04:c1:b8:72:48:16:52:91: d6:cf:17:b7:8b:c3:9f:2a:65:a2:d5:8e:70:c6:23: 67:28:1b:27:0a:fb:a1:d6:f1:02:93:7d:f4:3a:19: 60:c5:f3:ee:ca:ca:34:46:50:7d:40:72:ae:7e:d0: 7c:aa:58:6c:fa:79:3c:87:be:3d:a1:65:e8:a9:7b: 5a:12:cf:ad:18:aa:0d:77:b1:08:f7:78:c5:ac:eb: e0:f3:d2:d9:b7:71:0b:68:a2:c3:83:47:dc:24:e9: 49:8e:42:a9:80:27:56:7e:41:36:4a:c3:5c:89:d2: 95:c1:a2:73:64:53:54:3e:22:7c:60:43:d0:c9:56: b8:8b:87:55:15:58:f6:c1:4b:60:2a:74:20:8e:ff: bf:d7:e8:bd:bf:f9:67:40:4b:c3:38:fa:bc:32:0d: 40:dd:7d:b4:2a:53:ea:ee:61:78:12:bc:42:cb:e1: 0a:e6:0a:22:d9:0c:ff:56:0c:9b:5d:82:61:9b:ea: e3:f0:45:0c:ef:54:00:bb:a9:fa:2e:92:77:e5:ce: a5:ff:31:33:93:ac:76:19:19:d7:03:cd:d3:b8:25: 72:75:e9:44:1f:0e:62:b5:e5:09:d9:1b:bc:ea:d2: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:07:91:3C:15:78:AA:D7:E9:DB:05:F6:76:26:47:C0:2B:DB:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b23eff5-5443-3da2-8a61-463d33a56c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:12:84:de:eb:e3:b7:e8:62:92:37:1d:d0:bb:e7:c0:92:ed: 2c:d6:0c:97:9c:43:f1:e9:91:1d:da:85:43:e0:19:a0:9a:b0: 19:0c:2e:9c:18:03:1d:58:8b:92:08:9c:fc:48:72:f0:2e:b3: be:02:d8:92:a0:be:be:5a:cd:cc:2a:9a:7d:42:72:3d:5d:e1: 26:98:ba:14:73:18:80:ab:c5:aa:46:53:d9:dc:f8:40:c2:76: e4:7b:39:36:33:fe:70:67:9c:c6:00:8c:50:1a:6f:a6:e5:40: 09:48:21:61:61:bd:60:5e:19:80:e4:68:6b:fa:4f:5e:76:68: 24:92:e0:46:55:28:ad:c0:29:61:11:70:52:21:5a:6e:e5:3a: 42:f1:d9:e3:5a:81:bb:9e:20:0d:0b:8a:0d:54:42:bb:9b:30: 04:91:9a:e1:98:3f:49:d4:4a:00:83:41:76:4e:08:63:ff:1e: ac:9e:60:62:62:ac:84:16:c5:46:a3:3b:c3:19:56:44:07:eb: fb:8b:ef:4f:3a:a5:89:f9:25:b8:93:b0:7f:64:81:1d:92:e2: 1a:0f:c1:bf:68:6d:d0:45:91:36:0c:e7:bd:57:ca:25:c9:ac: ae:9f:02:5c:2b:a4:bb:76:cb:fb:0d:bb:b3:84:26:85:7a:c7: 11:e2:cb:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79AAneKsLJtzSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YjA3MjExNjMtZWU3NC00OWVmLTkyOTUtNTFmZTczNDlmYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqpI6s1HGTzBTZFlEG6ijLJ2Mv95BMG4ckgW UpHWzxe3i8OfKmWi1Y5wxiNnKBsnCvuh1vECk330OhlgxfPuyso0RlB9QHKuftB8 qlhs+nk8h749oWXoqXtaEs+tGKoNd7EI93jFrOvg89LZt3ELaKLDg0fcJOlJjkKp gCdWfkE2SsNcidKVwaJzZFNUPiJ8YEPQyVa4i4dVFVj2wUtgKnQgjv+/1+i9v/ln QEvDOPq8Mg1A3X20KlPq7mF4ErxCy+EK5goi2Qz/VgybXYJhm+rj8EUM71QAu6n6 LpJ35c6l/zEzk6x2GRnXA83TuCVydelEHw5iteUJ2Ru86tKFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq9B5E8FXiq1+nbBfZ2JkfAK9u4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWIyM2VmZjUtNTQ0My0z ZGEyLThhNjEtNDYzZDMzYTU2Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoShN7r47foYpI3HdC758CS7SzWDJecQ/HpkR3ahUPgGaCasBkMLpwY Ax1Yi5IInPxIcvAus74C2JKgvr5azcwqmn1Ccj1d4SaYuhRzGICrxapGU9nc+EDC duR7OTYz/nBnnMYAjFAab6blQAlIIWFhvWBeGYDkaGv6T152aCSS4EZVKK3AKWER cFIhWm7lOkLx2eNagbueIA0Lig1UQrubMASRmuGYP0nUSgCDQXZOCGP/HqyeYGJi rIQWxUajO8MZVkQH6/uL7086pYn5JbiTsH9kgR2S4hoPwb9obdBFkTYM571XyiXJ rK6fAlwrpLt2y/sNu7OEJoV6xxHiy9g= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:43 2025 by rpki-client