$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa File: 4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa (raw, json) Hash identifier: dyQ7dsnBOlr2MAd2hY8YP0JxEClW1n6++jIhgFbim+I= Subject key identifier: 14:D4:EE:6F:D9:6D:16:4C:2C:0B:31:88:C9:85:B1:F6:2E:DA:2B:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E654FDFF330AAF00D0C92280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:fd:ff:33:0a:af:00:d0:c9:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=a4b187f3-b530-46ba-93fc-44f11b4097d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b9:aa:dd:53:4f:5e:2d:04:38:81:76:d9:cf: 62:b4:f9:04:43:c5:b4:f2:6f:24:a1:71:c7:a8:3f: 04:3d:6b:ee:26:c6:44:cf:2e:b4:45:45:34:35:53: 8c:69:36:54:43:e5:ce:c9:03:8e:3e:88:15:43:f8: 3b:b4:73:a7:80:f5:78:3e:84:ee:02:bb:4d:e6:20: 4b:a0:c9:a3:a4:e4:59:67:1b:5a:37:de:64:76:90: 42:b5:f5:39:89:ad:9b:93:01:f3:79:5c:26:1d:4d: 32:40:f3:34:eb:25:9e:33:49:0a:00:94:1d:30:47: 3f:88:62:c1:6a:17:7d:31:b4:90:02:2b:38:40:d0: 05:47:bf:6b:80:db:35:3a:b0:f9:8a:88:9b:df:9a: 90:b1:1d:7f:e3:54:71:af:da:fe:9e:e0:c9:ba:b6: ce:4c:7b:5d:8c:7e:2a:58:31:fc:b1:8a:72:ea:b5: 33:7f:b7:88:43:bb:fd:1f:5a:17:23:c4:51:bd:ca: a7:6f:72:27:33:d2:07:1c:d7:60:38:e4:c4:78:e3: b4:18:8c:a8:3f:09:13:3f:59:80:0c:27:79:2c:72: ae:de:11:4b:29:2c:8e:b5:ea:95:07:99:b7:66:d6: 5e:c1:c6:0a:5d:1f:37:58:f7:bc:e9:b5:50:4d:f7: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:EE:6F:D9:6D:16:4C:2C:0B:31:88:C9:85:B1:F6:2E:DA:2B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:9d:d5:cf:0d:c2:d5:57:56:3e:89:78:87:5c:bf:f8:cd:38: c1:86:8c:37:ed:fb:38:c9:f5:5c:4f:c7:f5:87:f6:2a:a1:cd: 9a:72:e7:d8:e3:dd:38:b7:d1:fb:74:cd:3b:a6:aa:b3:5d:cf: eb:02:7e:c3:9b:59:54:28:ef:46:d6:ac:15:ac:42:f7:a5:59: c7:1d:c0:67:0f:aa:4c:3a:3e:6c:dc:2e:9a:10:1f:b3:e6:59: 12:cf:86:dd:4d:21:68:08:6c:09:6d:75:2a:58:78:c9:f2:8a: b4:81:98:2b:03:e7:d8:1a:b4:dd:d4:53:c6:78:27:e4:7e:05: 1a:0c:03:42:3f:db:5d:43:e8:f9:49:bb:9e:a2:0d:5b:ca:97: 1b:d8:20:c1:dd:9a:45:1f:c2:c1:46:b6:1e:d2:81:25:a1:dc: b3:f1:38:bf:6f:4f:b8:53:aa:13:a5:c6:3a:79:aa:e6:7b:a9: 2c:6c:2c:31:72:91:ca:2f:9e:c9:27:97:a0:c2:a1:68:e2:45: 08:f5:5c:94:15:0f:4d:98:1a:92:e4:3c:b4:52:20:3f:38:e5: ba:b3:72:cc:66:a2:43:f3:97:90:12:12:12:70:98:b9:7c:11: ce:8f:99:41:f5:32:01:16:87:e0:81:b9:45:ae:97:47:cb:34: 6b:bf:c6:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVP3/MwqvANDJIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk YTRiMTg3ZjMtYjUzMC00NmJhLTkzZmMtNDRmMTFiNDA5N2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrmq3VNPXi0EOIF22c9itPkEQ8W08m8koXHH qD8EPWvuJsZEzy60RUU0NVOMaTZUQ+XOyQOOPogVQ/g7tHOngPV4PoTuArtN5iBL oMmjpORZZxtaN95kdpBCtfU5ia2bkwHzeVwmHU0yQPM06yWeM0kKAJQdMEc/iGLB ahd9MbSQAis4QNAFR79rgNs1OrD5ioib35qQsR1/41Rxr9r+nuDJurbOTHtdjH4q WDH8sYpy6rUzf7eIQ7v9H1oXI8RRvcqnb3InM9IHHNdgOOTEeOO0GIyoPwkTP1mA DCd5LHKu3hFLKSyOteqVB5m3ZtZewcYKXR83WPe86bVQTfeEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTU7m/ZbRZMLAsxiMmFsfYu2isEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGEwYjA4YmYtYzhmMS0z OTMwLTk3ZTktOGQyYWY1ZDY3NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSd1c8NwtVXVj6JeIdcv/jNOMGGjDft+zjJ9VxPx/WH9iqhzZpy59jj 3Ti30ft0zTumqrNdz+sCfsObWVQo70bWrBWsQvelWccdwGcPqkw6PmzcLpoQH7Pm WRLPht1NIWgIbAltdSpYeMnyirSBmCsD59gatN3UU8Z4J+R+BRoMA0I/211D6PlJ u56iDVvKlxvYIMHdmkUfwsFGth7SgSWh3LPxOL9vT7hTqhOlxjp5quZ7qSxsLDFy kcovnsknl6DCoWjiRQj1XJQVD02YGpLkPLRSID845bqzcsxmokPzl5ASEhJwmLl8 Ec6PmUH1MgEWh+CBuUWul0fLNGu/xsw= -----END CERTIFICATE-----Generated at Fri Jun 6 16:55:09 2025 by rpki-client