$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38eb6d78-9c7d-3fdb-8374-7606a8115975.roa File: 38eb6d78-9c7d-3fdb-8374-7606a8115975.roa (raw, json) Hash identifier: p+H7ILuWhNNlQisthi4gKAGpIhC+Lh7FU3nzXbIRFNQ= Subject key identifier: CA:BD:D4:1E:28:A8:72:D4:CE:CE:20:D5:03:A6:49:FB:52:84:D5:A6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8DCBE5FBA913FA7C6120 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38eb6d78-9c7d-3fdb-8374-7606a8115975.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8d:cb:e5:fb:a9:13:fa:7c:61:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=6dba21c0-fa68-4367-98f1-b66604d32373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:b1:48:94:60:92:c2:de:15:5b:2b:15:0f: 59:65:ca:cd:5a:59:1e:d7:da:81:6b:78:27:f2:a9: 93:3c:89:6e:4c:c6:f6:d0:d5:a8:36:c5:84:dc:39: 4c:b6:92:51:af:2c:6b:e4:26:97:9d:52:57:e8:7a: 8e:38:1b:d7:b0:b7:47:fe:29:26:ac:01:30:23:53: 04:ec:64:43:e3:c3:ba:12:1f:06:0f:52:22:e4:38: 86:78:8f:0b:69:06:ed:fa:d4:f0:5e:28:a1:28:72: 4a:7b:70:4a:a9:99:d9:0d:0d:7a:22:8e:46:82:da: 5d:7b:e3:fa:66:81:86:0d:40:14:01:a3:f0:ab:3d: 96:86:6c:a6:2f:97:c1:69:ef:b5:6e:11:7f:83:dd: c7:3d:e4:4c:72:48:03:9a:eb:5b:cc:0b:e8:eb:dd: d1:56:98:5d:ab:dd:79:dd:6c:7d:dc:dd:5d:fd:00: 64:15:37:9a:87:d8:9a:45:e1:6e:9a:03:47:9e:32: 6d:f9:18:9d:2f:a5:0b:38:2b:d5:37:6a:f8:e7:a4: a3:7c:1e:89:76:5f:35:da:3f:00:b0:6f:f1:c5:d3: 24:80:76:6d:44:8c:01:19:a1:fc:d7:be:f4:aa:75: 3a:2c:d0:34:fb:6c:ea:73:4d:34:6b:e1:97:0e:7d: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BD:D4:1E:28:A8:72:D4:CE:CE:20:D5:03:A6:49:FB:52:84:D5:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38eb6d78-9c7d-3fdb-8374-7606a8115975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e2:3e:17:ba:30:6a:83:79:f3:3f:af:8f:54:ac:92:33:7a: 30:6f:73:71:b6:41:66:de:27:ce:4c:70:44:5b:51:8e:94:62: ca:ec:89:4e:80:ad:b3:25:4b:e1:1e:53:fa:ed:00:e4:cd:c9: 5b:0c:28:c0:c7:a1:f0:ca:0e:a7:e8:67:1c:da:e9:ba:fc:e9: 2a:59:d2:95:53:6d:de:aa:f5:63:da:fb:4e:2d:88:4d:77:c3: 08:2a:45:ef:f9:a9:e7:42:3e:74:b4:7e:a0:d4:6e:de:bd:19: 9c:b8:0e:7a:4f:2f:da:8b:c4:8a:5a:91:57:4d:97:ed:6f:81: ce:a2:bf:ea:60:c4:27:14:6c:86:00:0f:01:9f:64:30:5f:f4: b9:32:aa:06:e1:2a:e7:8f:0f:14:a6:f6:af:56:97:3d:9f:16: 22:2d:34:27:a0:76:c3:37:6e:c7:ae:ef:be:d4:15:ed:dd:fb: 40:b5:c7:d5:13:9f:99:14:7d:5f:ce:99:76:c7:54:dc:31:53: 5e:4a:62:38:e1:19:0b:d3:07:f5:e5:e9:22:ac:63:95:b1:e8: 75:a9:1f:b9:b3:31:69:8b:37:6a:f0:56:c1:51:45:02:0c:f1: 62:b8:be:9e:3d:12:14:25:00:bd:0a:ce:63:ac:41:a7:a3:52: a4:44:f6:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo3L5fupE/p8YSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NmRiYTIxYzAtZmE2OC00MzY3LTk4ZjEtYjY2NjA0ZDMyMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JCxSJRgksLeFVsrFQ9ZZcrNWlke19qBa3gn 8qmTPIluTMb20NWoNsWE3DlMtpJRryxr5CaXnVJX6HqOOBvXsLdH/ikmrAEwI1ME 7GRD48O6Eh8GD1Ii5DiGeI8LaQbt+tTwXiihKHJKe3BKqZnZDQ16Io5Ggtpde+P6 ZoGGDUAUAaPwqz2WhmymL5fBae+1bhF/g93HPeRMckgDmutbzAvo693RVphdq915 3Wx93N1d/QBkFTeah9iaReFumgNHnjJt+RidL6ULOCvVN2r456SjfB6Jdl812j8A sG/xxdMkgHZtRIwBGaH81770qnU6LNA0+2zqc000a+GXDn1jFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq91B4oqHLUzs4g1QOmSftShNWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzhlYjZkNzgtOWM3ZC0z ZmRiLTgzNzQtNzYwNmE4MTE1OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3iPhe6MGqDefM/r49UrJIzejBvc3G2QWbeJ85McERbUY6UYsrsiU6A rbMlS+EeU/rtAOTNyVsMKMDHofDKDqfoZxza6br86SpZ0pVTbd6q9WPa+04tiE13 wwgqRe/5qedCPnS0fqDUbt69GZy4DnpPL9qLxIpakVdNl+1vgc6iv+pgxCcUbIYA DwGfZDBf9LkyqgbhKuePDxSm9q9Wlz2fFiItNCegdsM3bseu777UFe3d+0C1x9UT n5kUfV/OmXbHVNwxU15KYjjhGQvTB/Xl6SKsY5Wx6HWpH7mzMWmLN2rwVsFRRQIM 8WK4vp49EhQlAL0KzmOsQaejUqRE9nk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:24 2025 by rpki-client