$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2762df42-cf42-34f9-800d-d333a0b9a6f3.roa File: 2762df42-cf42-34f9-800d-d333a0b9a6f3.roa (raw, json) Hash identifier: ICqs/IaVK60H30B8s7FL2o7JuY2C9k8IAFCb1Nl4ROo= Subject key identifier: DA:E0:66:40:15:F3:39:8D:1C:A0:29:56:EC:88:5D:36:5F:A6:C4:ED Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CEE307E0507352E4CC80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2762df42-cf42-34f9-800d-d333a0b9a6f3.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 172.71.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:ce:e3:07:e0:50:73:52:e4:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=0e8b69f4-8932-4ee5-8100-b7f434337627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:f3:26:35:9f:9f:71:39:76:0e:2d:ce:e9: be:af:65:ba:17:17:ce:e6:cc:37:00:ee:fd:7e:a8: 77:82:fe:67:3e:74:d0:3a:e3:c7:9e:ec:64:02:82: 24:07:4b:0f:a4:b0:5c:a3:88:64:45:85:33:29:89: f3:0c:61:96:94:8c:f4:67:96:3f:54:a7:1c:05:5a: da:8d:22:1b:c2:c6:cd:5a:1d:17:d8:c6:1d:fa:a9: ac:ee:e9:3f:c6:8d:82:5a:62:3d:ee:ac:95:6f:ce: 45:56:fe:00:a3:79:30:c9:f5:4b:b9:33:a4:2f:3d: 64:9f:37:5e:7c:d1:71:a1:3e:67:11:d8:6e:8f:3f: e5:e5:bc:d7:2d:35:2f:55:a3:f6:7e:b2:43:6f:e1: 73:ad:f9:97:67:9c:e3:c6:20:0b:f6:c0:ef:7a:ee: 3e:2a:86:06:c9:d1:bb:c2:b9:ab:0b:6c:b6:1a:3b: e0:61:5c:e3:85:fe:d2:32:4f:32:fb:99:3a:1b:7d: b3:b4:5e:a4:13:ef:6c:85:20:7c:ef:81:18:e7:15: 47:a1:f9:bc:83:43:51:d0:ba:34:64:02:41:80:8d: d7:35:f1:c3:14:f6:a4:83:3b:27:e8:32:fa:f7:58: 66:de:89:fa:41:67:74:19:d0:66:62:51:08:0a:06: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E0:66:40:15:F3:39:8D:1C:A0:29:56:EC:88:5D:36:5F:A6:C4:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2762df42-cf42-34f9-800d-d333a0b9a6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e1:81:a4:bf:c7:9b:e9:7d:7c:c9:14:71:72:2b:f9:e8:1c: a8:2a:ca:ef:74:82:be:ee:6b:ac:e1:e4:f0:4f:7c:cb:84:88: 47:e1:fe:a6:ff:36:80:06:18:84:2e:92:fc:20:9c:fe:c3:2d: 4a:cd:43:7e:a7:da:84:b4:54:1f:ec:1f:4a:48:11:7b:c6:5f: 1a:9d:bc:40:d2:88:f7:45:d0:93:d0:25:9e:6e:32:f1:a0:8a: 10:28:cb:2b:5e:79:a2:29:f9:bf:9e:0f:45:e5:3d:77:25:8c: 6a:ce:97:1b:c5:05:d8:d2:f3:02:51:94:e9:b1:55:db:24:e0: 7f:1b:26:63:e3:a5:3a:f2:58:af:fe:57:50:57:0b:89:ce:30: 9f:cf:16:df:cf:33:1b:4d:58:f0:89:40:ba:23:23:77:6e:a0: e4:c9:77:24:92:49:ef:20:4f:e8:ae:47:1a:b1:81:06:f5:f7: 61:23:e9:24:68:00:79:8c:28:b4:e4:46:d5:e8:41:19:32:d4: ff:d2:73:35:68:38:c3:a0:e7:22:d8:0f:bb:06:4a:53:20:88: b0:5a:77:1c:c3:d5:14:e5:5d:3f:6c:d9:5d:b2:6a:61:da:92: 04:3a:e6:71:3e:d5:93:55:d5:cb:08:71:32:47:c6:c9:8f:2f: ec:7d:84:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFts7jB+BQc1LkzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MGU4YjY5ZjQtODkzMi00ZWU1LTgxMDAtYjdmNDM0MzM3NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrHzJjWfn3E5dg4tzum+r2W6FxfO5sw3AO79 fqh3gv5nPnTQOuPHnuxkAoIkB0sPpLBco4hkRYUzKYnzDGGWlIz0Z5Y/VKccBVra jSIbwsbNWh0X2MYd+qms7uk/xo2CWmI97qyVb85FVv4Ao3kwyfVLuTOkLz1knzde fNFxoT5nEdhujz/l5bzXLTUvVaP2frJDb+FzrfmXZ5zjxiAL9sDveu4+KoYGydG7 wrmrC2y2GjvgYVzjhf7SMk8y+5k6G32ztF6kE+9shSB874EY5xVHofm8g0NR0Lo0 ZAJBgI3XNfHDFPakgzsn6DL691hm3on6QWd0GdBmYlEICgYv/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrgZkAV8zmNHKApVuyIXTZfpsTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjc2MmRmNDItY2Y0Mi0z NGY5LTgwMGQtZDMzM2EwYjlhNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXhgaS/x5vpfXzJFHFyK/noHKgqyu90gr7ua6zh5PBPfMuEiEfh/qb/ NoAGGIQukvwgnP7DLUrNQ36n2oS0VB/sH0pIEXvGXxqdvEDSiPdF0JPQJZ5uMvGg ihAoyyteeaIp+b+eD0XlPXcljGrOlxvFBdjS8wJRlOmxVdsk4H8bJmPjpTryWK/+ V1BXC4nOMJ/PFt/PMxtNWPCJQLojI3duoOTJdySSSe8gT+iuRxqxgQb192Ej6SRo AHmMKLTkRtXoQRky1P/SczVoOMOg5yLYD7sGSlMgiLBadxzD1RTlXT9s2V2yamHa kgQ65nE+1ZNV1csIcTJHxsmPL+x9hCc= -----END CERTIFICATE-----Generated at Sat Apr 5 09:57:31 2025 by rpki-client