$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4703113f-73cd-30db-9904-be9d92a3bb85.roa File: 4703113f-73cd-30db-9904-be9d92a3bb85.roa (raw, json) Hash identifier: CCZqJ5XyKmEaVHQwXKTEkIRudlmFUgmwGYIKNYTGlao= Subject key identifier: AE:FB:0C:5A:2C:03:09:47:CE:D1:61:96:37:32:5E:0B:C1:76:68:A1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E17399B3807CD550DB3A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4703113f-73cd-30db-9904-be9d92a3bb85.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:73:99:b3:80:7c:d5:50:db:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=ab326177-12e7-4cd6-97f2-0c35619f03d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:77:9b:e9:6f:bc:24:c4:30:41:8d:46:d5: 8e:51:8f:23:1d:ce:4c:68:75:3e:b3:56:74:4c:61: 2c:d9:04:a1:bb:8f:7a:f3:20:ae:d8:a5:3b:4d:2f: ec:74:2b:17:59:96:29:49:4a:e4:3d:9b:d9:b7:61: 64:cc:88:a0:10:26:b5:64:90:5e:38:e0:14:30:27: 87:9d:de:f6:c7:ff:89:87:80:ed:65:cd:e1:a8:ff: 2c:cc:10:57:47:98:de:7a:32:97:b5:70:43:7b:00: 6c:34:b2:b9:ed:88:86:2d:7a:35:d0:e5:4b:88:cd: 2d:50:57:dd:d3:f1:3e:47:a4:c4:81:f5:c5:f5:99: 15:e8:c5:96:8e:eb:fb:49:07:26:f3:d2:5d:cb:50: d1:b6:82:e8:f7:8e:40:03:f4:ac:3b:c1:ae:ed:a3: 9b:da:c8:71:c3:1d:6d:c6:27:c4:a6:89:f1:8e:6f: 9f:5e:15:ce:3b:2e:83:0e:bf:2b:b8:c0:82:3c:45: 7e:6f:ee:21:be:02:a5:6d:23:2e:f9:31:67:0a:98: a0:6e:61:41:43:57:1f:36:a9:85:05:11:73:3d:36: ba:88:bb:81:ac:08:c3:8e:ee:f2:31:22:a6:7d:27: 81:19:8b:fd:a0:1f:69:ef:c8:76:2a:c2:4d:4e:e6: 0c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FB:0C:5A:2C:03:09:47:CE:D1:61:96:37:32:5E:0B:C1:76:68:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4703113f-73cd-30db-9904-be9d92a3bb85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:48:2f:00:d1:ba:25:59:78:3d:1a:b0:9e:33:bc:86:99:5a: a3:b4:28:52:3d:62:7d:5e:38:6e:4d:d0:74:43:81:84:2c:2d: 45:21:c8:06:ab:8a:65:83:de:01:a5:fc:9c:25:ae:d1:3c:9f: 7a:84:f8:27:89:59:ed:48:45:08:9b:ae:26:2d:a8:30:40:4c: a9:27:19:e2:9b:72:6c:15:17:3d:47:8f:fc:66:12:4d:43:25: 44:7b:fe:6a:65:31:25:22:6e:ba:dc:12:db:19:f1:2f:cb:c5: 22:f0:6d:8f:3c:25:e9:64:35:4a:49:95:eb:e1:ca:b8:4d:34: 58:db:7a:c6:9a:1c:63:01:f7:d7:72:f4:04:c4:45:0e:df:68: 99:81:86:f8:ec:f1:5e:6a:9e:cd:18:6f:66:97:b1:ea:d3:b1: 9f:94:1b:2f:5c:15:b2:7b:35:b5:4d:c7:76:5d:89:32:77:7f: b3:04:4e:21:c9:34:61:1d:aa:79:9a:49:b3:58:cd:f6:84:3b: 0d:fe:17:e3:c9:87:d2:07:b3:ce:a3:e6:c6:ed:00:bf:19:d5: b0:54:fa:39:a9:ec:6b:7a:39:63:7d:37:ae:86:21:d5:42:4e: 7d:dd:16:fb:a0:7c:18:07:fa:ee:3d:67:a8:70:77:f8:33:63: b5:1c:4a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XOZs4B81VDbOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk YWIzMjYxNzctMTJlNy00Y2Q2LTk3ZjItMGMzNTYxOWYwM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHx3m+lvvCTEMEGNRtWOUY8jHc5MaHU+s1Z0 TGEs2QShu4968yCu2KU7TS/sdCsXWZYpSUrkPZvZt2FkzIigECa1ZJBeOOAUMCeH nd72x/+Jh4DtZc3hqP8szBBXR5jeejKXtXBDewBsNLK57YiGLXo10OVLiM0tUFfd 0/E+R6TEgfXF9ZkV6MWWjuv7SQcm89Jdy1DRtoLo945AA/SsO8Gu7aOb2shxwx1t xifEponxjm+fXhXOOy6DDr8ruMCCPEV+b+4hvgKlbSMu+TFnCpigbmFBQ1cfNqmF BRFzPTa6iLuBrAjDju7yMSKmfSeBGYv9oB9p78h2KsJNTuYMjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK77DFosAwlHztFhljcyXgvBdmihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDcwMzExM2YtNzNjZC0z MGRiLTk5MDQtYmU5ZDkyYTNiYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERILwDRuiVZeD0asJ4zvIaZWqO0KFI9Yn1eOG5N0HRDgYQsLUUhyAar imWD3gGl/JwlrtE8n3qE+CeJWe1IRQibriYtqDBATKknGeKbcmwVFz1Hj/xmEk1D JUR7/mplMSUibrrcEtsZ8S/LxSLwbY88JelkNUpJlevhyrhNNFjbesaaHGMB99dy 9ATERQ7faJmBhvjs8V5qns0Yb2aXserTsZ+UGy9cFbJ7NbVNx3ZdiTJ3f7METiHJ NGEdqnmaSbNYzfaEOw3+F+PJh9IHs86j5sbtAL8Z1bBU+jmp7Gt6OWN9N66GIdVC Tn3dFvugfBgH+u49Z6hwd/gzY7UcSsA= -----END CERTIFICATE-----Generated at Sat Apr 5 04:34:02 2025 by rpki-client