$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22798a64-3920-3fad-af92-e8825aac7592.roa File: 22798a64-3920-3fad-af92-e8825aac7592.roa (raw, json) Hash identifier: My/EeNpAn561fTqtxUcVCAlGvZ6//6I7Htco8QdRCYk= Subject key identifier: 2E:A2:C4:CB:88:B1:AA:21:22:0D:8D:FD:80:58:C5:B8:25:6F:55:00 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E170ED09DB39A2AA646600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22798a64-3920-3fad-af92-e8825aac7592.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:70:ed:09:db:39:a2:aa:64:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=4b80ffb6-b7cc-426e-a237-cee26c76d369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:cc:e9:f5:8d:c6:bf:e8:5a:60:24:5f:9b: 1e:7d:13:51:18:ba:0d:c2:13:2c:3a:44:04:39:81: 39:8f:b6:a2:ea:fd:c7:0f:39:83:50:61:4d:9f:e8: 20:3c:4f:75:71:9a:9a:8a:b6:3d:af:72:f8:a2:7c: 35:75:4c:17:25:cc:70:8a:3b:47:1a:10:9a:ce:42: c8:72:52:4a:59:54:db:37:1f:28:bc:39:89:1c:1c: d8:db:8e:69:cd:b0:d7:25:78:cb:7f:0b:11:03:6c: 10:88:91:7e:e7:fe:e3:22:80:62:d8:34:0c:7d:da: b8:4e:e2:92:7e:21:7e:66:ec:e2:b9:39:10:1e:b5: 27:11:f3:8b:fc:6b:d1:aa:fe:ce:57:d1:92:52:88: 1f:79:57:0a:4b:40:07:8b:a2:2c:68:f5:dd:c2:99: e4:e2:21:a6:c9:e7:c6:ae:19:3a:7e:87:8a:cd:79: c1:62:61:cb:ac:f3:8b:cf:cd:6f:4d:3d:d5:05:61: c3:46:e1:d4:cb:52:73:88:0b:ff:d7:17:3a:37:73: bc:6e:4a:a2:a7:a9:57:eb:c9:9e:14:3b:71:67:08: 9e:5f:74:9e:67:95:e6:38:45:16:53:70:f7:a4:83: ef:bf:1b:9c:53:d1:05:41:96:6c:40:bb:0c:b7:21: d3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A2:C4:CB:88:B1:AA:21:22:0D:8D:FD:80:58:C5:B8:25:6F:55:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22798a64-3920-3fad-af92-e8825aac7592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f9:fb:30:d0:0d:89:28:0b:e4:2d:dc:7d:bc:42:36:71:21: 4e:bc:f5:1c:29:e7:af:05:a8:f7:1d:95:81:6c:b2:bb:d3:1b: 40:ae:31:16:cf:b3:a3:2f:0e:4d:03:16:a4:64:8e:6b:5e:c4: b2:5b:9c:d0:41:fc:ab:dd:1c:d9:b8:84:dc:ac:90:ee:62:a2: 8f:d5:8e:05:d6:9c:17:74:83:ce:1b:fc:c8:60:82:66:68:5f: 09:dd:83:04:73:d7:bd:b6:77:7e:d1:2a:07:93:21:e8:72:42: 0a:22:8c:53:03:03:c3:82:b1:25:4c:b3:39:91:bc:5d:92:41: 7a:1a:24:93:f6:dc:ed:eb:29:31:8b:b8:a2:11:40:9d:c7:23: c3:02:32:eb:8f:48:29:d7:14:c0:bb:46:dc:c5:9e:10:96:13: 6a:5a:86:a2:0d:44:9d:86:7c:44:b9:0f:ca:11:23:ba:aa:94: 39:14:1d:59:cd:a2:d7:bb:dc:f2:9d:50:5e:26:ae:0b:4a:a9: e3:12:25:c2:47:be:9a:c2:c7:df:45:14:ba:36:de:f3:ba:3b: 89:c0:8f:08:d5:99:64:78:12:45:75:d7:eb:da:d4:d9:58:11: 2c:ee:d6:83:dd:18:90:8e:1d:41:3e:e2:bc:e3:85:35:c9:b4: f4:84:f8:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XDtCds5oqpkZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NGI4MGZmYjYtYjdjYy00MjZlLWEyMzctY2VlMjZjNzZkMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+fM6fWNxr/oWmAkX5sefRNRGLoNwhMsOkQE OYE5j7ai6v3HDzmDUGFNn+ggPE91cZqairY9r3L4onw1dUwXJcxwijtHGhCazkLI clJKWVTbNx8ovDmJHBzY245pzbDXJXjLfwsRA2wQiJF+5/7jIoBi2DQMfdq4TuKS fiF+ZuziuTkQHrUnEfOL/GvRqv7OV9GSUogfeVcKS0AHi6IsaPXdwpnk4iGmyefG rhk6foeKzXnBYmHLrPOLz81vTT3VBWHDRuHUy1JziAv/1xc6N3O8bkqip6lX68me FDtxZwieX3SeZ5XmOEUWU3D3pIPvvxucU9EFQZZsQLsMtyHTSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6ixMuIsaohIg2N/YBYxbglb1UAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjI3OThhNjQtMzkyMC0z ZmFkLWFmOTItZTg4MjVhYWM3NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALL5+zDQDYkoC+Qt3H28QjZxIU689Rwp568FqPcdlYFssrvTG0CuMRbP s6MvDk0DFqRkjmtexLJbnNBB/KvdHNm4hNyskO5ioo/VjgXWnBd0g84b/MhggmZo XwndgwRz1722d37RKgeTIehyQgoijFMDA8OCsSVMszmRvF2SQXoaJJP23O3rKTGL uKIRQJ3HI8MCMuuPSCnXFMC7RtzFnhCWE2pahqINRJ2GfES5D8oRI7qqlDkUHVnN ote73PKdUF4mrgtKqeMSJcJHvprCx99FFLo23vO6O4nAjwjVmWR4EkV11+va1NlY ESzu1oPdGJCOHUE+4rzjhTXJtPSE+Ag= -----END CERTIFICATE-----Generated at Sat Apr 5 07:59:38 2025 by rpki-client