$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28d12d25-0cad-361f-8f0f-356a2eeca825.roa File: 28d12d25-0cad-361f-8f0f-356a2eeca825.roa (raw, json) Hash identifier: K6NlDeYW+hBmUZJBwVyqsUMo1Lc8kV1zzzBMUUQ6GIk= Subject key identifier: A8:F8:B3:BE:A8:46:1D:D8:9D:D6:CC:97:73:E7:FE:DB:03:12:BD:BA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD87BC1C41CF7BC0B3780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28d12d25-0cad-361f-8f0f-356a2eeca825.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.71.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d8:7b:c1:c4:1c:f7:bc:0b:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=e7ae1870-75dc-4be6-b31e-7e86e9a38323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:e0:9a:dc:04:e4:95:af:95:13:35:d8:e5: 51:d9:fc:d7:e1:1b:48:fc:57:40:66:2f:a6:4f:0a: e0:81:2e:f6:8a:01:26:51:d3:c3:05:92:d4:60:b8: a8:b9:9d:47:25:00:db:19:87:2b:af:3f:96:b7:c7: 6b:d3:69:c6:b8:73:1f:8d:8c:5a:a6:99:48:48:31: e0:21:61:63:68:30:cc:e7:53:87:15:35:60:98:50: 28:37:4d:3f:6a:b4:c4:59:79:a0:08:6d:7d:f7:47: f9:9c:30:67:e9:01:b2:ef:92:bb:77:c8:a3:51:cc: 0a:13:fa:d6:be:68:c9:5c:d3:41:f5:5b:41:c8:05: 2b:3b:f2:c5:c6:0f:b8:89:ab:80:78:4d:55:56:45: 8a:3b:37:94:b7:d0:53:4c:f9:50:ff:a5:cb:d7:bc: 49:26:dc:c4:db:09:1a:08:97:b6:5e:61:ad:e8:83: 28:71:ea:81:67:1d:21:69:39:de:28:b9:f7:70:1f: 2d:39:b7:67:6d:02:3b:69:00:b0:78:32:4e:cd:7f: d5:c1:1f:8b:5f:eb:67:5c:3b:6c:fa:56:12:62:25: 0e:66:ec:5d:83:78:94:76:a8:c8:ee:4b:dc:5f:5b: 77:c8:e8:41:fa:23:92:a4:08:24:5d:27:84:f0:9f: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F8:B3:BE:A8:46:1D:D8:9D:D6:CC:97:73:E7:FE:DB:03:12:BD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28d12d25-0cad-361f-8f0f-356a2eeca825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0b:ca:f6:f5:27:84:74:ed:09:2c:34:e6:a5:e3:5e:39:af: 54:82:52:ed:a4:26:b1:e2:2c:a7:95:ef:3b:7c:58:f4:bd:02: 62:41:c5:99:4f:4f:7a:11:3e:6b:06:b6:3e:6e:bc:af:69:47: c2:23:6b:27:7e:ef:a6:fe:73:c4:52:28:ec:d9:ca:08:a3:c4: 4d:dd:9f:25:7e:66:f4:e9:64:64:42:20:0d:b8:66:38:4b:81: 9b:c6:f3:8a:8e:0c:dd:fb:7e:35:3d:6b:be:44:0e:53:27:f6: 29:73:c4:a7:ed:1c:25:f0:c8:d4:cc:ee:c4:bc:b7:57:b8:58: bd:3a:af:42:6a:c9:dd:a1:86:56:9e:56:7b:22:e9:2f:95:b1: 86:9f:d1:66:d7:95:50:2a:ae:76:ba:98:50:c6:d7:42:13:a0: e3:f0:df:93:7b:d2:b1:6f:d7:a7:71:d6:8f:cf:48:fe:51:d4: c5:da:38:e0:fb:80:b8:9a:0f:64:aa:27:f2:74:42:ac:49:29: fa:9e:ed:ed:7f:10:29:a1:4b:2f:49:e8:49:a9:1a:a7:0b:ea: f8:5a:c6:af:97:05:73:9a:f5:94:0a:ea:84:2f:04:f1:6d:18: 24:bf:64:87:41:9d:02:a6:2a:f9:99:94:a7:8d:7c:3e:b9:be: 4b:fd:6d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79h7wcQc97wLN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTdhZTE4NzAtNzVkYy00YmU2LWIzMWUtN2U4NmU5YTM4MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCvgmtwE5JWvlRM12OVR2fzX4RtI/FdAZi+m TwrggS72igEmUdPDBZLUYLiouZ1HJQDbGYcrrz+Wt8dr02nGuHMfjYxapplISDHg IWFjaDDM51OHFTVgmFAoN00/arTEWXmgCG1990f5nDBn6QGy75K7d8ijUcwKE/rW vmjJXNNB9VtByAUrO/LFxg+4iauAeE1VVkWKOzeUt9BTTPlQ/6XL17xJJtzE2wka CJe2XmGt6IMoceqBZx0haTneKLn3cB8tObdnbQI7aQCweDJOzX/VwR+LX+tnXDts +lYSYiUOZuxdg3iUdqjI7kvcX1t3yOhB+iOSpAgkXSeE8J/LRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj4s76oRh3YndbMl3Pn/tsDEr26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjhkMTJkMjUtMGNhZC0z NjFmLThmMGYtMzU2YTJlZWNhODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4Lyvb1J4R07QksNOal4145r1SCUu2kJrHiLKeV7zt8WPS9AmJBxZlP T3oRPmsGtj5uvK9pR8Ijayd+76b+c8RSKOzZygijxE3dnyV+ZvTpZGRCIA24ZjhL gZvG84qODN37fjU9a75EDlMn9ilzxKftHCXwyNTM7sS8t1e4WL06r0Jqyd2hhlae Vnsi6S+VsYaf0WbXlVAqrna6mFDG10IToOPw35N70rFv16dx1o/PSP5R1MXaOOD7 gLiaD2SqJ/J0QqxJKfqe7e1/ECmhSy9J6EmpGqcL6vhaxq+XBXOa9ZQK6oQvBPFt GCS/ZIdBnQKmKvmZlKeNfD65vkv9bSM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:22 2025 by rpki-client