$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/207912d2-8fe5-335a-b7c7-7a2f2f97bca8.roa File: 207912d2-8fe5-335a-b7c7-7a2f2f97bca8.roa (raw, json) Hash identifier: Jjo5IjF9jOdVJ+wmGpbcuYnAY/S53/59L9rg5W+MArA= Subject key identifier: 63:CF:11:3F:F0:AC:06:48:82:5C:DA:FC:B8:EB:51:31:C0:6E:57:33 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B5BEC99AF226E01FF83E480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/207912d2-8fe5-335a-b7c7-7a2f2f97bca8.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.71.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:5b:ec:99:af:22:6e:01:ff:83:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=a15401fb-30a2-4f65-8e73-5fd8fc499451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6c:f6:be:29:79:6c:71:96:47:7c:d0:ff:ba: d6:da:b4:c2:25:a4:f9:98:a6:ad:29:16:4d:4e:ee: 4f:d8:47:62:3d:c4:e5:d9:13:3c:bb:b4:6d:2c:7e: dc:07:ea:f4:89:38:36:7b:d5:35:2d:3e:c1:d6:c8: 92:6b:e0:4f:85:bb:b8:ff:d4:61:00:f9:6b:50:05: 47:30:3c:67:6a:5f:0f:5a:d7:2d:af:34:67:5b:10: 99:70:77:c3:04:e7:1d:da:d5:e2:79:6a:bc:72:54: c9:13:d9:11:88:78:cd:18:e0:ac:38:7c:d8:2b:8f: 35:82:dd:09:fd:ba:22:e5:ec:2f:1f:1a:b6:c3:58: 22:89:cc:35:55:4d:8f:bb:aa:ba:04:47:d4:d8:7b: f0:e0:2b:a0:37:8a:ec:04:50:c7:6d:2d:3b:15:03: be:fa:b1:af:18:d7:69:24:a0:d3:8a:65:62:a8:d9: f9:b6:17:cd:4e:0f:65:19:98:29:9d:91:70:1a:73: 8d:08:d6:e0:b9:67:a2:2b:5b:5d:56:ae:2d:df:69: 6d:8d:6c:e4:f7:95:b9:0d:c3:70:aa:71:bc:d5:ed: 7e:a5:6c:1c:6b:90:e6:a1:95:e4:bd:c0:73:6b:23: 0d:51:8a:35:48:6c:9e:0f:5e:97:b3:50:5b:b7:17: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CF:11:3F:F0:AC:06:48:82:5C:DA:FC:B8:EB:51:31:C0:6E:57:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/207912d2-8fe5-335a-b7c7-7a2f2f97bca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:35:99:92:f6:bb:b5:be:55:2d:8d:12:c8:54:8a:f9:1a:cc: e9:f9:9a:13:12:a2:f6:96:da:ac:ab:ba:5d:c5:2a:e5:9e:6f: b8:0a:a5:33:20:fb:0a:c1:01:d1:d1:6f:aa:65:00:67:b2:f1: b8:0e:93:48:9f:cf:f3:1f:96:cb:02:7f:24:d6:05:30:d5:9b: 64:06:ee:7b:67:f4:84:2f:93:3f:8d:09:8d:3b:29:c1:fe:97: 3a:6b:3b:4f:a7:59:80:da:bb:3d:a6:fd:47:09:75:6d:70:c6: 5f:7e:1e:04:50:6c:fe:45:84:38:7c:37:0e:16:a2:ef:9d:c0: bc:44:01:16:1a:bc:b5:ff:01:39:ac:69:71:3d:fa:52:0f:04: 45:1c:41:c4:88:4e:00:8a:cb:47:5d:12:c3:81:2a:70:e5:ed: 0c:c2:88:85:13:b6:fc:83:71:55:76:f8:10:99:17:3e:63:a6: 18:b5:56:f4:c7:de:e6:5f:ac:33:84:d5:51:e4:33:c4:92:14: d5:7f:7d:aa:86:d6:b8:88:0c:40:57:5d:61:58:38:e0:9f:aa: c4:f3:3d:3a:df:19:e3:dc:b7:7d:8d:09:9a:e7:83:4b:6b:45: b6:4b:0b:79:ba:d0:92:fb:b1:fe:3d:ae:7f:34:7c:34:3a:0c: 9a:57:5b:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7W+yZryJuAf+D5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk YTE1NDAxZmItMzBhMi00ZjY1LThlNzMtNWZkOGZjNDk5NDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2z2vil5bHGWR3zQ/7rW2rTCJaT5mKatKRZN Tu5P2EdiPcTl2RM8u7RtLH7cB+r0iTg2e9U1LT7B1siSa+BPhbu4/9RhAPlrUAVH MDxnal8PWtctrzRnWxCZcHfDBOcd2tXieWq8clTJE9kRiHjNGOCsOHzYK481gt0J /boi5ewvHxq2w1giicw1VU2Pu6q6BEfU2Hvw4CugN4rsBFDHbS07FQO++rGvGNdp JKDTimViqNn5thfNTg9lGZgpnZFwGnONCNbguWeiK1tdVq4t32ltjWzk95W5DcNw qnG81e1+pWwca5DmoZXkvcBzayMNUYo1SGyeD16Xs1BbtxcgLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPPET/wrAZIglza/LjrUTHAblczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjA3OTEyZDItOGZlNS0z MzVhLWI3YzctN2EyZjJmOTdiY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ1mZL2u7W+VS2NEshUivkazOn5mhMSovaW2qyrul3FKuWeb7gKpTMg +wrBAdHRb6plAGey8bgOk0ifz/MflssCfyTWBTDVm2QG7ntn9IQvkz+NCY07KcH+ lzprO0+nWYDauz2m/UcJdW1wxl9+HgRQbP5FhDh8Nw4Wou+dwLxEARYavLX/ATms aXE9+lIPBEUcQcSITgCKy0ddEsOBKnDl7QzCiIUTtvyDcVV2+BCZFz5jphi1VvTH 3uZfrDOE1VHkM8SSFNV/faqG1riIDEBXXWFYOOCfqsTzPTrfGePct32NCZrng0tr RbZLC3m60JL7sf49rn80fDQ6DJpXWwk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:19 2025 by rpki-client