$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2762df42-cf42-34f9-800d-d333a0b9a6f3.roa File: 2762df42-cf42-34f9-800d-d333a0b9a6f3.roa (raw, json) Hash identifier: FZXBuHTiVJTxAG6gMCJsWodSwQVAuhsPytCdIGoZStY= Subject key identifier: 6C:E7:69:43:6A:04:72:D5:7E:E9:1F:D3:7B:6F:28:A2:31:85:1E:8E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCFBE7690583F87903080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2762df42-cf42-34f9-800d-d333a0b9a6f3.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.71.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cf:be:76:90:58:3f:87:90:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=e984a440-7fd9-4a84-96cd-6996f92040a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:9c:dc:ef:1c:bb:30:29:8b:69:b0:ee:46: b1:8d:dd:2d:16:b0:5a:27:b2:5f:ec:d4:0d:e5:a9: 76:52:15:95:d0:fb:87:08:a1:c1:63:62:85:ea:fb: dd:0b:de:f6:67:4f:df:95:c3:23:ed:24:97:3f:f3: 04:3c:7b:ed:40:5a:bd:4f:96:2a:ad:e6:c3:12:87: d0:d7:46:d2:e8:d1:fe:ad:d5:38:cd:89:cf:5a:12: 70:a5:18:f2:93:9e:a3:3f:bb:18:3d:2e:92:f8:cc: 32:08:5e:bb:f8:97:e7:47:73:31:6f:8d:38:d5:e0: 00:93:9e:99:7c:53:41:50:c2:e9:12:c7:74:b4:87: 9a:51:73:14:b6:15:da:a9:b4:ab:a2:bd:b5:f6:39: 15:9b:cb:84:1d:48:40:3e:89:43:a1:f5:70:03:68: b8:01:7a:e0:8a:5e:6f:cb:29:60:27:2f:61:3b:c6: 8f:d9:aa:9c:75:62:36:30:55:20:63:26:12:73:7e: 70:55:e5:bc:27:27:39:45:28:e6:3e:7e:0a:cd:fe: 49:de:4e:60:9f:ea:0d:0d:38:87:16:0d:8d:a1:1e: 3c:3e:cf:bb:86:14:5e:d8:16:df:0d:3c:ff:bd:6d: 73:0e:57:07:cf:87:5a:57:d1:a3:92:75:6b:f3:3a: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E7:69:43:6A:04:72:D5:7E:E9:1F:D3:7B:6F:28:A2:31:85:1E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2762df42-cf42-34f9-800d-d333a0b9a6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0d:65:f9:d4:e6:65:e7:77:a6:ec:53:8c:fa:fe:cf:18:7d: 5d:ee:6a:e2:76:04:97:af:3d:19:24:5f:83:65:a3:38:fd:cc: 92:df:17:3d:71:56:de:68:64:6e:e4:a0:ec:fa:ae:8f:f1:15: 00:03:e8:c8:34:9d:e1:30:e8:1e:f5:fd:a6:ea:39:06:82:f4: 5f:10:9e:d8:bf:fa:37:a6:53:84:40:f2:07:8e:b0:c7:0d:3d: 20:55:90:cd:3c:83:f7:92:6d:08:68:ee:d9:87:a0:ba:ad:9d: 18:57:b6:f8:43:8c:cb:10:b4:60:b8:8d:a9:c9:a5:79:de:42: 9b:ef:e1:32:ec:fa:63:76:d5:45:6d:0a:77:fb:98:42:66:d8: d7:f1:6d:02:8c:3d:37:80:90:83:0c:c8:d7:a1:62:5d:0d:27: 09:b8:47:d5:fb:cd:6e:6c:e1:19:88:66:d0:7b:fa:54:b0:09: 26:9c:63:19:a1:81:61:cb:53:1a:38:dc:40:ab:bb:ef:73:b0: c8:08:84:8f:14:d3:ed:e5:88:7a:08:69:01:06:29:63:e3:1a: 5b:03:71:9e:3f:c8:46:1c:22:d8:61:e3:ab:90:6d:62:1d:14: cf:18:5c:c1:44:27:c9:16:6b:79:12:82:d2:32:6b:1a:bc:25: 9b:dc:82:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78++dpBYP4eQMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTk4NGE0NDAtN2ZkOS00YTg0LTk2Y2QtNjk5NmY5MjA0MGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh6c3O8cuzApi2mw7kaxjd0tFrBaJ7Jf7NQN 5al2UhWV0PuHCKHBY2KF6vvdC972Z0/flcMj7SSXP/MEPHvtQFq9T5YqrebDEofQ 10bS6NH+rdU4zYnPWhJwpRjyk56jP7sYPS6S+MwyCF67+JfnR3Mxb4041eAAk56Z fFNBUMLpEsd0tIeaUXMUthXaqbSror219jkVm8uEHUhAPolDofVwA2i4AXrgil5v yylgJy9hO8aP2aqcdWI2MFUgYyYSc35wVeW8Jyc5RSjmPn4Kzf5J3k5gn+oNDTiH Fg2NoR48Ps+7hhRe2BbfDTz/vW1zDlcHz4daV9GjknVr8zrlbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGznaUNqBHLVfukf03tvKKIxhR6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjc2MmRmNDItY2Y0Mi0z NGY5LTgwMGQtZDMzM2EwYjlhNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIENZfnU5mXnd6bsU4z6/s8YfV3uauJ2BJevPRkkX4Nlozj9zJLfFz1x Vt5oZG7koOz6ro/xFQAD6Mg0neEw6B71/abqOQaC9F8Qnti/+jemU4RA8geOsMcN PSBVkM08g/eSbQho7tmHoLqtnRhXtvhDjMsQtGC4janJpXneQpvv4TLs+mN21UVt Cnf7mEJm2NfxbQKMPTeAkIMMyNehYl0NJwm4R9X7zW5s4RmIZtB7+lSwCSacYxmh gWHLUxo43ECru+9zsMgIhI8U0+3liHoIaQEGKWPjGlsDcZ4/yEYcIthh46uQbWId FM8YXMFEJ8kWa3kSgtIyaxq8JZvcgjk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:46:35 2025 by rpki-client