$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/347cefd8-abf6-304b-963a-681e4fde0e15.roa File: 347cefd8-abf6-304b-963a-681e4fde0e15.roa (raw, json) Hash identifier: pY58hXj084Ifca50EJfXfw/ZdmTUX+7G0ggi7TiJkyY= Subject key identifier: D9:9C:5D:CA:65:84:AB:92:82:1F:91:D2:D8:22:E5:73:89:B1:8B:19 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E176B34F56B824F0CFC9E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/347cefd8-abf6-304b-963a-681e4fde0e15.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:76:b3:4f:56:b8:24:f0:cf:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=9c9001dc-3c8b-4adf-bc7e-4d86078de3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:24:4e:1a:40:b5:3e:bc:63:d4:91:72:87:56: 12:bb:ad:d7:f0:54:73:f9:2f:da:4a:2f:6e:cf:ae: 32:44:4c:30:7a:e3:95:da:88:0c:54:c0:88:44:25: 69:95:ab:a1:7a:f1:22:51:97:55:2b:87:ff:7c:f7: 89:db:59:4a:d9:fd:ea:2d:42:b8:0e:b1:5d:5e:09: b7:79:83:30:f2:6d:0e:12:24:0d:4c:f5:e5:41:9d: aa:da:83:e4:44:bd:c5:38:03:0e:7b:38:94:98:45: 14:51:ec:ab:f3:b7:96:11:1f:aa:8a:ac:9d:d4:0a: 42:cd:1b:6a:9d:ca:91:d1:29:99:79:91:46:7c:f9: 94:b7:84:39:d0:e9:35:c9:9b:ab:3b:5e:5e:06:89: f1:a2:a0:07:04:82:e6:f1:e2:3b:94:76:d6:2a:07: 36:b5:de:eb:8d:42:b8:d3:fd:d9:b1:a4:38:04:ee: 3e:97:6d:13:53:c2:39:aa:9d:35:76:63:41:89:04: 10:4f:ea:1c:77:ec:7e:a4:b8:9d:8e:0a:82:e5:cd: c0:25:12:9c:55:05:cd:e2:1a:59:72:ee:6a:cb:b1: b3:a5:06:27:de:eb:91:46:cf:92:9d:9d:4b:f5:74: e7:29:61:e4:4a:a9:7c:65:37:89:49:fc:fa:be:4e: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9C:5D:CA:65:84:AB:92:82:1F:91:D2:D8:22:E5:73:89:B1:8B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/347cefd8-abf6-304b-963a-681e4fde0e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b0:e5:6b:b1:5c:61:6a:f3:94:04:57:a7:11:93:5d:20:5b: 5e:e7:1a:4e:f1:7f:04:77:4d:94:91:51:0b:9e:3d:5d:87:92: f9:b6:30:8c:ad:88:94:38:f4:ad:0e:7f:b9:c5:a1:25:4c:af: 3c:e7:cb:d0:68:d8:7c:65:e2:cc:09:f4:15:70:a7:df:41:a0: 9f:9a:ed:cd:f1:c2:4b:2a:ae:4d:15:f9:76:84:2d:26:be:b6: 2a:00:56:6e:57:b3:f2:7f:60:16:0b:68:f6:a4:59:1b:9a:4a: ab:6d:cb:e3:2a:5e:39:29:ba:5c:b5:38:04:1f:81:67:79:cc: bd:52:99:f1:1a:03:9d:2d:de:4e:d8:e7:d6:c0:4c:4b:9a:fa: cd:b1:14:c6:e8:90:75:3d:3c:c1:ec:38:f5:22:d5:6a:83:c6: d2:f0:a2:81:b0:3f:49:5a:0a:fb:7f:d7:c6:97:2d:e9:f5:9c: f9:60:9f:fa:dd:aa:11:de:12:7d:1f:eb:26:95:d7:da:76:55: fc:86:e2:56:0d:b1:66:30:e6:09:13:a8:78:36:52:77:7b:35: fb:f7:2d:b7:00:48:fa:dd:ff:ac:ff:97:43:3a:bc:19:e1:6f: b4:06:c8:b8:09:fa:47:0b:40:ab:0b:8c:1c:4f:b7:c9:15:ee: 8f:ec:1c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XazT1a4JPDPyeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk OWM5MDAxZGMtM2M4Yi00YWRmLWJjN2UtNGQ4NjA3OGRlM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SROGkC1Prxj1JFyh1YSu63X8FRz+S/aSi9u z64yREwweuOV2ogMVMCIRCVplauhevEiUZdVK4f/fPeJ21lK2f3qLUK4DrFdXgm3 eYMw8m0OEiQNTPXlQZ2q2oPkRL3FOAMOeziUmEUUUeyr87eWER+qiqyd1ApCzRtq ncqR0SmZeZFGfPmUt4Q50Ok1yZurO15eBonxoqAHBILm8eI7lHbWKgc2td7rjUK4 0/3ZsaQ4BO4+l20TU8I5qp01dmNBiQQQT+ocd+x+pLidjgqC5c3AJRKcVQXN4hpZ cu5qy7GzpQYn3uuRRs+SnZ1L9XTnKWHkSql8ZTeJSfz6vk571wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmcXcplhKuSgh+R0tgi5XOJsYsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzQ3Y2VmZDgtYWJmNi0z MDRiLTk2M2EtNjgxZTRmZGUwZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSw5WuxXGFq85QEV6cRk10gW17nGk7xfwR3TZSRUQuePV2Hkvm2MIyt iJQ49K0Of7nFoSVMrzzny9Bo2Hxl4swJ9BVwp99BoJ+a7c3xwksqrk0V+XaELSa+ tioAVm5Xs/J/YBYLaPakWRuaSqtty+MqXjkpuly1OAQfgWd5zL1SmfEaA50t3k7Y 59bATEua+s2xFMbokHU9PMHsOPUi1WqDxtLwooGwP0laCvt/18aXLen1nPlgn/rd qhHeEn0f6yaV19p2VfyG4lYNsWYw5gkTqHg2Und7Nfv3LbcASPrd/6z/l0M6vBnh b7QGyLgJ+kcLQKsLjBxPt8kV7o/sHII= -----END CERTIFICATE-----Generated at Wed Apr 9 12:53:40 2025 by rpki-client