$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25cfe413-fd5c-30f5-896a-b6f401efa2d6.roa File: 25cfe413-fd5c-30f5-896a-b6f401efa2d6.roa (raw, json) Hash identifier: JOnuahH0JldiU9FP0BjUDH/GNoeuvD6tj7cn4ixUKI4= Subject key identifier: E3:AF:E9:94:FA:62:42:D9:A0:C5:5C:B3:72:78:AD:8F:EF:AC:27:4D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA8D536B92A6E7B7AFD980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25cfe413-fd5c-30f5-896a-b6f401efa2d6.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.71.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:8d:53:6b:92:a6:e7:b7:af:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=7f375f72-6351-4e8a-97fd-de8c8e24e514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:8c:e3:d2:03:7a:10:61:d8:a4:1d:2e:bb: 20:25:c5:51:e9:f7:0e:62:ff:ee:9c:53:17:a3:c9: 8e:a8:e9:e8:d1:4e:f3:a3:f6:33:ca:38:89:c4:be: c7:62:1d:5b:b8:7b:c1:04:96:0a:d0:06:84:36:00: ee:07:05:d6:63:0a:bd:b9:c2:03:d2:b2:f8:af:5f: 60:e8:71:e9:16:20:84:49:de:1f:2d:81:81:5b:82: 16:2c:3f:ae:dd:3c:5c:7e:0b:1f:86:3e:65:7d:20: c3:52:06:49:d7:0d:90:76:9c:fe:a7:d6:da:5e:ae: 0e:ca:c6:68:be:e1:5b:03:1c:d1:89:c7:4c:53:6b: 21:67:df:b4:ff:ac:72:cf:85:32:0c:45:85:70:0c: 2d:96:c8:05:ed:7c:5b:8f:30:34:33:80:e1:95:04: 5b:27:74:55:02:f6:34:a5:57:20:e7:50:98:9a:e9: f9:e3:b8:13:40:a1:a6:8f:7f:2b:92:14:ca:80:68: 29:68:f8:b7:d8:b1:30:8c:8d:d5:16:a2:24:49:db: cc:83:69:e7:d6:5a:e3:82:cc:f5:65:76:78:cc:38: 48:4f:70:f2:a2:08:fe:cb:62:07:98:3b:d8:26:54: 25:d9:ac:02:49:da:9b:d6:74:2e:bf:24:97:9b:c8: 33:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:E9:94:FA:62:42:D9:A0:C5:5C:B3:72:78:AD:8F:EF:AC:27:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25cfe413-fd5c-30f5-896a-b6f401efa2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b3:ae:a8:a8:c8:d1:ab:a0:4e:a5:37:ad:c7:06:a7:c6:88: 85:ce:c6:27:6f:51:38:14:fb:49:4d:d4:98:8e:4b:1d:30:c1: ac:32:1e:75:0a:54:3f:fc:5c:61:55:25:60:b9:a7:90:17:5e: 8e:6a:76:25:3c:e1:05:61:12:00:21:55:e8:96:7a:b0:fc:63: 22:f7:b1:79:c9:b8:51:6a:66:c2:fb:32:22:eb:57:76:4f:3a: 5a:d0:5d:ed:64:c2:2d:02:85:f2:da:b2:ad:88:09:af:44:60: 35:4b:d9:02:45:55:fc:1e:3e:5e:b4:7c:66:b8:42:5b:66:b2: 17:5a:e2:8a:4f:52:4b:14:29:38:5f:0e:29:23:cb:1b:3f:d0: 12:23:5d:2a:97:aa:20:4e:14:7a:39:48:aa:e4:bc:ce:84:00: fd:14:93:14:c6:d1:0d:c4:1c:a2:67:b7:8e:9a:72:5b:eb:9e: 0f:c8:d6:8e:c8:cc:b7:69:54:e7:8d:48:3d:dc:e8:4a:ed:54: 6a:44:1c:e3:87:61:93:b6:77:32:b6:47:84:16:5c:1b:67:33: a1:95:02:14:21:e5:b5:d7:79:44:24:5c:f3:d9:76:ff:69:3e: 0c:c2:d7:9b:a0:c5:43:c3:9b:9e:05:e1:ef:2b:e5:e1:08:53: 2f:10:05:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuo1Ta5Km57ev2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk N2YzNzVmNzItNjM1MS00ZThhLTk3ZmQtZGU4YzhlMjRlNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVuM49IDehBh2KQdLrsgJcVR6fcOYv/unFMX o8mOqOno0U7zo/YzyjiJxL7HYh1buHvBBJYK0AaENgDuBwXWYwq9ucID0rL4r19g 6HHpFiCESd4fLYGBW4IWLD+u3Txcfgsfhj5lfSDDUgZJ1w2Qdpz+p9baXq4OysZo vuFbAxzRicdMU2shZ9+0/6xyz4UyDEWFcAwtlsgF7XxbjzA0M4DhlQRbJ3RVAvY0 pVcg51CYmun547gTQKGmj38rkhTKgGgpaPi32LEwjI3VFqIkSdvMg2nn1lrjgsz1 ZXZ4zDhIT3Dyogj+y2IHmDvYJlQl2awCSdqb1nQuvySXm8gzNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOv6ZT6YkLZoMVcs3J4rY/vrCdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVjZmU0MTMtZmQ1Yy0z MGY1LTg5NmEtYjZmNDAxZWZhMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABizrqioyNGroE6lN63HBqfGiIXOxidvUTgU+0lN1JiOSx0wwawyHnUK VD/8XGFVJWC5p5AXXo5qdiU84QVhEgAhVeiWerD8YyL3sXnJuFFqZsL7MiLrV3ZP OlrQXe1kwi0ChfLasq2ICa9EYDVL2QJFVfwePl60fGa4Qltmshda4opPUksUKThf Dikjyxs/0BIjXSqXqiBOFHo5SKrkvM6EAP0UkxTG0Q3EHKJnt46aclvrng/I1o7I zLdpVOeNSD3c6ErtVGpEHOOHYZO2dzK2R4QWXBtnM6GVAhQh5bXXeUQkXPPZdv9p PgzC15ugxUPDm54F4e8r5eEIUy8QBdU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:02 2025 by rpki-client