$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/461bc754-1a16-37b6-9ef1-fd2deac1f11e.roa File: 461bc754-1a16-37b6-9ef1-fd2deac1f11e.roa (raw, json) Hash identifier: qlFQ5+BAp/9UCdx7/FT3P1fkHR+0ZtDJwwWB9YcvZ/Y= Subject key identifier: 71:84:1C:60:20:BD:30:52:4F:A1:20:2A:76:3F:54:5F:2A:28:5E:74 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD9F13D7068B7764A75C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/461bc754-1a16-37b6-9ef1-fd2deac1f11e.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.71.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d9:f1:3d:70:68:b7:76:4a:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=66922260-5f75-4763-aba5-3533460311c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:fd:93:2e:73:ef:db:77:02:08:17:ef:a9: 7f:0b:7f:be:41:4b:33:3d:58:ef:f9:a8:d7:f5:92: e1:07:be:51:6e:0d:26:7a:e7:ae:48:ed:66:e2:f9: a6:35:71:02:0d:82:47:71:30:6f:4e:13:60:33:fe: a2:b1:c3:17:6b:35:27:1a:bc:99:96:73:a9:c2:e3: 95:66:14:06:51:68:f2:50:f5:a7:a2:6d:06:00:4d: d7:4f:14:a8:aa:bc:b6:ad:cf:17:26:6c:b0:9e:4e: 56:a7:53:17:bf:ca:13:fe:dd:23:02:9e:fd:50:ac: f5:4a:9e:03:7b:e6:60:1c:4d:0c:cf:1f:ad:fb:3e: 8d:d8:e9:09:d7:27:f2:85:4e:01:b7:72:9f:eb:3a: b6:66:ca:71:96:73:35:71:53:32:40:dc:d2:24:b8: 3e:b5:27:5d:72:b7:e4:33:6a:99:6a:57:11:3c:c4: e8:32:8a:b3:d3:9a:7a:c6:d0:db:87:6f:3b:4f:7f: 27:04:12:f9:15:07:96:e3:a2:73:28:3b:d2:a5:3a: 2e:84:6d:e7:90:bf:ab:3a:a4:98:6f:da:84:30:2b: b3:0f:69:7a:6f:6f:4e:99:f6:d9:e3:b6:49:f5:8b: 32:08:db:d9:80:77:9b:80:11:92:3d:33:5a:c1:67: e8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:84:1C:60:20:BD:30:52:4F:A1:20:2A:76:3F:54:5F:2A:28:5E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/461bc754-1a16-37b6-9ef1-fd2deac1f11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:21:e4:06:69:78:43:d3:89:be:da:9d:d8:d4:1c:33:33:cf: ee:10:bc:b2:56:67:23:48:c6:f2:17:87:7a:c0:96:f7:d7:ac: 8d:70:26:a7:ef:e4:40:21:a8:93:ee:cd:88:2e:2b:75:e5:f2: df:c8:4a:03:5f:50:d5:f0:c9:63:f1:72:54:e4:5f:2b:38:95: 60:d5:0b:1f:c4:89:36:59:8b:51:13:af:53:a4:a5:57:fb:e7: 05:4f:96:3c:cf:f0:5e:69:2b:0a:9b:05:05:85:fa:f6:0c:b3: 96:18:05:23:4e:5c:f9:93:4b:df:5e:f8:21:5b:b1:83:44:66: a1:60:c8:93:f7:45:71:6a:cf:d8:65:31:31:2a:1f:3e:f1:a2: 23:cf:8e:54:45:75:de:40:a9:e4:da:46:23:ac:7d:05:66:c6: fb:8c:5b:cf:7b:3f:7d:3d:c5:cc:de:fc:62:44:8e:e5:10:b5: dc:02:a8:99:e6:9a:88:bf:c4:fa:9a:d7:34:c9:6e:8a:85:f6: 64:ae:7c:65:fd:a7:3a:d2:ad:83:cb:47:cf:1b:ac:d7:03:04: 46:51:ce:f6:d3:ae:16:20:bc:8d:59:80:11:69:53:94:48:35: d5:4e:c9:a6:11:c3:6f:ed:a1:3c:ee:65:b9:39:0f:22:bf:6f: 18:48:6c:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79nxPXBot3ZKdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NjY5MjIyNjAtNWY3NS00NzYzLWFiYTUtMzUzMzQ2MDMxMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyj9ky5z79t3AggX76l/C3++QUszPVjv+ajX 9ZLhB75Rbg0meueuSO1m4vmmNXECDYJHcTBvThNgM/6iscMXazUnGryZlnOpwuOV ZhQGUWjyUPWnom0GAE3XTxSoqry2rc8XJmywnk5Wp1MXv8oT/t0jAp79UKz1Sp4D e+ZgHE0Mzx+t+z6N2OkJ1yfyhU4Bt3Kf6zq2ZspxlnM1cVMyQNzSJLg+tSddcrfk M2qZalcRPMToMoqz05p6xtDbh287T38nBBL5FQeW46JzKDvSpTouhG3nkL+rOqSY b9qEMCuzD2l6b29OmfbZ47ZJ9YsyCNvZgHebgBGSPTNawWfouQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGEHGAgvTBST6EgKnY/VF8qKF50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDYxYmM3NTQtMWExNi0z N2I2LTllZjEtZmQyZGVhYzFmMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAh5AZpeEPTib7andjUHDMzz+4QvLJWZyNIxvIXh3rAlvfXrI1wJqfv 5EAhqJPuzYguK3Xl8t/ISgNfUNXwyWPxclTkXys4lWDVCx/EiTZZi1ETr1OkpVf7 5wVPljzP8F5pKwqbBQWF+vYMs5YYBSNOXPmTS99e+CFbsYNEZqFgyJP3RXFqz9hl MTEqHz7xoiPPjlRFdd5AqeTaRiOsfQVmxvuMW897P309xcze/GJEjuUQtdwCqJnm moi/xPqa1zTJboqF9mSufGX9pzrSrYPLR88brNcDBEZRzvbTrhYgvI1ZgBFpU5RI NdVOyaYRw2/toTzuZbk5DyK/bxhIbDw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:06 2025 by rpki-client