$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa File: 3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa (raw, json) Hash identifier: w9TPxmILTiVceqylJAUjuOC51eSPdqhBtAsZBYGBTOo= Subject key identifier: 09:CB:77:EF:1E:C6:BC:B8:9D:52:DA:26:B1:B6:4A:27:22:A9:06:96 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8CFDEFD4ED3F73337A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8c:fd:ef:d4:ed:3f:73:33:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=176839b4-f4c2-44d4-890e-77df8e974026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9f:9d:74:99:f9:30:e9:fd:a4:a2:10:e6:bf: cd:ca:c2:ee:2a:61:4b:69:41:5e:1e:76:ef:86:e2: 36:8b:e1:71:dd:d8:05:70:6a:8e:e8:44:d5:c5:53: 73:e2:df:5b:e9:d1:0f:f6:9c:63:e9:7d:b5:34:b3: ed:47:b5:07:f8:ea:10:e0:6d:44:f4:c0:cd:02:51: 5d:b9:d8:d7:ae:a3:a2:04:18:a9:e0:0b:11:66:8c: 77:ae:3c:ca:9a:5d:60:13:9e:7a:57:74:53:50:8f: 23:2e:c5:62:82:55:f8:8e:c9:4c:5c:7d:f0:f7:c5: 85:60:34:c5:ba:bc:38:a0:ef:9d:cc:2a:8f:e2:07: be:53:cc:57:99:36:bb:ab:e8:bd:8a:66:76:49:a0: ec:d3:09:f6:f9:07:01:b0:83:b7:b5:04:04:44:f0: b2:05:eb:41:52:20:98:47:b1:7c:e6:b9:d4:9d:78: d5:7d:bc:8c:cd:53:10:cb:3b:02:33:cd:37:21:39: 8b:e9:60:93:a5:56:fd:c0:ed:3a:b3:82:92:f2:53: 03:a9:d0:bd:89:b3:43:56:6e:1e:0b:5d:56:87:7b: e0:c1:3d:d7:c8:9a:c5:d2:33:5f:45:c3:f1:a8:60: 31:d0:0e:f3:97:f7:32:e5:14:21:0c:c9:31:33:cd: 99:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CB:77:EF:1E:C6:BC:B8:9D:52:DA:26:B1:B6:4A:27:22:A9:06:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:2e:7e:15:e2:90:37:b2:1a:87:4e:49:c5:9c:cb:b3:da:d4: 7c:13:44:b3:88:c2:f2:65:36:20:b2:b7:5b:e9:45:fe:1c:91: 60:bd:d6:c2:44:65:10:f2:47:e7:13:ee:f9:bd:71:e3:9a:3b: 90:fb:f5:ff:24:13:9b:87:2b:e0:40:b8:ec:07:7d:f5:ee:f8: 09:1f:37:fa:09:48:b4:b6:53:e2:7b:93:06:11:c9:28:1b:f5: 9e:fd:7a:ca:94:97:54:19:a6:a6:78:31:a7:87:ae:21:2c:2b: 97:0a:36:8e:97:dd:72:2f:ee:d1:87:49:26:0e:ca:42:59:10: 6f:95:ab:21:77:52:a9:a4:9a:8e:f3:a8:eb:18:45:3b:26:ed: be:e5:49:06:55:ab:41:f7:99:82:16:63:d4:b2:3f:3e:28:58: 73:71:ec:0e:11:f9:d6:db:05:b5:c3:6b:37:e2:af:0e:60:3a: 0e:fe:b7:2d:ae:64:7b:17:00:ce:29:d4:5a:a0:de:5d:42:90: 44:a4:2d:f1:ac:9b:81:ab:25:45:29:35:57:a1:13:1c:05:81: 38:4c:c3:a7:16:62:38:c7:01:51:d1:bf:8d:3e:ea:16:ef:75: 20:8b:21:42:13:d4:0a:75:69:20:ed:0a:5b:f2:e0:d8:6d:b7: fd:28:de:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoz979TtP3MzeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MTc2ODM5YjQtZjRjMi00NGQ0LTg5MGUtNzdkZjhlOTc0MDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5+ddJn5MOn9pKIQ5r/NysLuKmFLaUFeHnbv huI2i+Fx3dgFcGqO6ETVxVNz4t9b6dEP9pxj6X21NLPtR7UH+OoQ4G1E9MDNAlFd udjXrqOiBBip4AsRZox3rjzKml1gE556V3RTUI8jLsViglX4jslMXH3w98WFYDTF urw4oO+dzCqP4ge+U8xXmTa7q+i9imZ2SaDs0wn2+QcBsIO3tQQERPCyBetBUiCY R7F85rnUnXjVfbyMzVMQyzsCM803ITmL6WCTpVb9wO06s4KS8lMDqdC9ibNDVm4e C11Wh3vgwT3XyJrF0jNfRcPxqGAx0A7zl/cy5RQhDMkxM82ZMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnLd+8exry4nVLaJrG2SiciqQaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2NmYjQzMjctYzFhZi0z OGVmLWE3YmQtM2FiMjU0MzYzY2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUufhXikDeyGodOScWcy7Pa1HwTRLOIwvJlNiCyt1vpRf4ckWC91sJE ZRDyR+cT7vm9ceOaO5D79f8kE5uHK+BAuOwHffXu+AkfN/oJSLS2U+J7kwYRySgb 9Z79esqUl1QZpqZ4MaeHriEsK5cKNo6X3XIv7tGHSSYOykJZEG+VqyF3Uqmkmo7z qOsYRTsm7b7lSQZVq0H3mYIWY9SyPz4oWHNx7A4R+dbbBbXDazfirw5gOg7+ty2u ZHsXAM4p1Fqg3l1CkESkLfGsm4GrJUUpNVehExwFgThMw6cWYjjHAVHRv40+6hbv dSCLIUIT1Ap1aSDtClvy4Nhtt/0o3p8= -----END CERTIFICATE-----Generated at Sat Jun 7 12:22:32 2025 by rpki-client