$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d96165-2b1c-38bd-95f0-8c06ac45d072.roa File: 42d96165-2b1c-38bd-95f0-8c06ac45d072.roa (raw, json) Hash identifier: 1lowKB9C68IBXfSfGPS2Xhq6Sp5doPhQmFCxU3c1uz0= Subject key identifier: 4E:89:D4:B3:0C:35:3E:CE:0B:76:91:FA:22:A6:09:DC:49:FC:54:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8D1DE3549227691CDE10 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d96165-2b1c-38bd-95f0-8c06ac45d072.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8d:1d:e3:54:92:27:69:1c:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=17d549ae-235e-46bd-aad9-dc867e02b517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f8:8c:b1:32:57:3e:99:94:c2:ac:0a:98:8b: 42:78:c9:15:e1:a6:b6:a8:b1:e8:e1:e5:d7:f3:d9: 38:8d:d0:0d:8d:62:d5:32:dc:a8:e4:11:1e:c4:7f: 6d:c3:78:1c:5b:67:08:65:a6:90:bd:77:6b:b5:86: 73:7f:9d:3c:1a:64:ef:b9:ed:af:d0:0a:36:72:3e: 5e:2e:10:bd:de:a0:6b:17:9a:4a:d3:86:e9:28:2a: c9:63:68:9e:e3:7d:d4:97:38:7c:2a:4a:39:3b:69: 82:7d:7f:e1:87:5f:28:bb:fd:f6:52:75:21:ba:71: ed:bd:23:2f:3a:43:48:8f:9d:99:1a:52:ae:fe:37: f0:1e:e0:0b:51:e1:2c:6d:ee:b8:fd:6b:d9:ce:06: 31:26:5e:b1:5d:f1:f9:e2:d9:e2:93:4d:cf:b7:36: 1f:3e:8e:72:59:50:0d:be:68:44:9e:12:01:f2:2f: e8:40:2e:3d:9b:67:e1:39:17:fb:f8:d6:99:d3:95: be:25:10:8f:11:be:6f:1d:9a:8e:38:5f:08:ed:31: 86:c7:1a:06:6a:41:57:23:f5:16:58:b0:87:26:c6: 2a:e8:95:0c:e4:f7:a8:69:f2:9a:9b:ea:d2:be:95: b9:8a:15:d0:69:82:14:21:37:3c:88:07:3e:4a:5c: 4b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:89:D4:B3:0C:35:3E:CE:0B:76:91:FA:22:A6:09:DC:49:FC:54:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d96165-2b1c-38bd-95f0-8c06ac45d072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:82:e7:7e:94:ab:63:69:3d:2b:00:45:03:fe:a3:31:30:69: 4f:75:e2:19:ec:89:be:c7:77:6d:38:0d:5a:38:33:83:ee:aa: da:52:71:19:80:b7:60:05:01:31:f1:16:1a:17:19:4f:92:a0: 67:06:89:38:b6:f5:06:08:17:86:b2:50:d1:67:2f:2d:a6:1e: 71:5d:d1:0a:26:94:61:d3:84:cc:10:ab:7c:ba:c3:5e:8c:0b: 2a:ef:60:19:29:df:7f:ff:ad:35:6f:d2:7c:9b:95:a2:23:71: cf:d7:74:4b:56:4e:44:b2:a3:c2:32:73:ef:8e:90:b1:63:d9: 74:33:f7:88:10:2e:a8:e8:19:55:d8:d7:63:a2:44:96:39:20: 1a:02:c4:60:f1:2f:9c:e1:e1:3d:c6:84:69:c3:32:9f:35:bf: a0:7d:ae:32:b9:b1:42:5e:df:c3:f9:f6:1a:0b:40:f3:ed:3f: ac:06:85:f1:d1:26:d6:a5:29:33:9a:c8:d6:25:38:35:46:b5: 36:f0:fb:01:29:10:0c:40:94:ad:bd:b1:ce:ab:43:cd:25:11: 7f:22:9d:e2:36:4a:af:e3:87:7a:b7:a8:e0:9d:a3:ca:dc:e9: 76:19:91:c2:d7:e3:45:b1:62:6f:12:f7:fd:2d:f6:04:c9:f8: 74:85:cf:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo0d41SSJ2kc3hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MTdkNTQ5YWUtMjM1ZS00NmJkLWFhZDktZGM4NjdlMDJiNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfiMsTJXPpmUwqwKmItCeMkV4aa2qLHo4eXX 89k4jdANjWLVMtyo5BEexH9tw3gcW2cIZaaQvXdrtYZzf508GmTvue2v0Ao2cj5e LhC93qBrF5pK04bpKCrJY2ie433Ulzh8Kko5O2mCfX/hh18ou/32UnUhunHtvSMv OkNIj52ZGlKu/jfwHuALUeEsbe64/WvZzgYxJl6xXfH54tnik03PtzYfPo5yWVAN vmhEnhIB8i/oQC49m2fhORf7+NaZ05W+JRCPEb5vHZqOOF8I7TGGxxoGakFXI/UW WLCHJsYq6JUM5PeoafKam+rSvpW5ihXQaYIUITc8iAc+SlxLawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6J1LMMNT7OC3aR+iKmCdxJ/FTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDJkOTYxNjUtMmIxYy0z OGJkLTk1ZjAtOGMwNmFjNDVkMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2C536Uq2NpPSsARQP+ozEwaU914hnsib7Hd204DVo4M4PuqtpScRmA t2AFATHxFhoXGU+SoGcGiTi29QYIF4ayUNFnLy2mHnFd0QomlGHThMwQq3y6w16M CyrvYBkp33//rTVv0nyblaIjcc/XdEtWTkSyo8Iyc++OkLFj2XQz94gQLqjoGVXY 12OiRJY5IBoCxGDxL5zh4T3GhGnDMp81v6B9rjK5sUJe38P59hoLQPPtP6wGhfHR JtalKTOayNYlODVGtTbw+wEpEAxAlK29sc6rQ80lEX8ineI2Sq/jh3q3qOCdo8rc 6XYZkcLX40WxYm8S9/0t9gTJ+HSFzwo= -----END CERTIFICATE-----Generated at Fri Jun 6 16:48:38 2025 by rpki-client