$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4efbec6b-b02b-319f-9b4e-b6cdfed2a9e8.roa File: 4efbec6b-b02b-319f-9b4e-b6cdfed2a9e8.roa (raw, json) Hash identifier: 1c1G7kG5J3F60ywuYApvsBTPKYfGagxVnq5rUzg/UqU= Subject key identifier: D1:D7:9E:67:EA:12:05:41:D0:B6:8D:FF:42:57:A7:6E:24:F9:6C:38 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EEB50F2F9170E27EF8AC8DC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4efbec6b-b02b-319f-9b4e-b6cdfed2a9e8.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 13335 IP address blocks: 172.71.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:0f:2f:91:70:e2:7e:f8:ac:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=4df3b27c-c00c-4ce8-8b45-b3dfe4d0088b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:25:f3:c5:76:35:ef:06:8d:47:32:3f:ce: 3c:e5:f9:63:f8:ea:52:bd:e5:f2:da:2d:8d:55:40: 5f:70:ce:f6:c6:49:99:eb:c6:ac:1a:a3:85:0d:47: a8:d9:b9:07:bc:d0:1d:e2:2b:4b:1b:d1:65:8e:57: 21:a3:ed:4b:47:55:c6:3c:a3:b2:c4:07:03:f7:c6: b4:e4:b8:9f:4e:1b:3b:70:9d:90:1a:97:d8:fd:8e: 84:66:88:3b:2b:3b:d2:da:72:af:ef:3c:1c:42:ee: f6:e9:ad:71:4b:52:87:52:4a:91:e7:62:c1:3a:2c: 50:8b:75:2a:67:10:cc:fc:e8:69:07:dd:85:1a:0a: 57:7b:51:37:5e:a3:9b:b2:02:9f:2a:51:9d:08:c8: f8:95:56:06:3b:57:55:6e:56:33:2b:32:79:64:f0: 6a:02:27:e0:c1:2f:84:43:a0:1f:76:0c:cc:87:41: b2:67:0f:e2:81:8d:06:89:f2:fa:bb:b5:05:54:1e: 45:5f:0c:3d:17:95:b6:b3:4d:32:95:0a:a9:6f:48: a6:e1:70:95:1b:e1:10:52:96:2d:17:23:66:74:a3: ff:ae:0c:b7:c3:8b:80:e2:fd:85:3c:67:be:dd:e0: 0b:a0:77:85:43:5a:b2:47:4c:1a:20:ed:85:ee:64: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D7:9E:67:EA:12:05:41:D0:B6:8D:FF:42:57:A7:6E:24:F9:6C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4efbec6b-b02b-319f-9b4e-b6cdfed2a9e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b0:a1:0a:b6:45:39:bd:c1:be:9e:9b:35:e2:13:e2:ca:f0: 60:89:17:d8:5e:4e:d1:7a:f0:65:52:d5:2f:b6:ea:94:a2:4f: 1c:c5:c9:d7:7c:22:f0:71:7a:da:cf:4e:ba:11:7f:bd:96:e8: ab:01:66:2c:ed:38:97:94:74:a6:74:77:39:9e:19:47:2d:3d: 03:f4:41:7c:bc:02:a7:cc:fc:60:fa:a4:56:d9:03:fc:5b:09: 13:2a:df:2d:31:fc:13:46:b3:96:7f:02:ac:bf:fa:35:5a:8e: 12:bc:b5:80:fb:c5:29:72:eb:bd:30:6f:56:1d:79:39:fd:17: b2:e2:ec:39:b9:dc:1f:55:54:1d:07:9c:9e:ea:0a:1e:b5:8a: c1:14:ab:4c:76:41:27:f0:0c:7f:b5:90:d3:ac:a5:45:8b:92: 1b:8f:05:8e:13:1a:d8:b2:d1:ae:a8:b9:0b:49:a5:8e:9d:26: 46:dc:b2:ab:6f:55:86:60:32:d2:eb:15:2c:29:1b:a2:39:42: f6:ad:f6:b4:e5:6c:e4:e1:bf:c0:ce:61:af:6d:3e:cd:62:37: 7e:54:1e:e4:f8:b6:b7:04:57:7a:4d:c1:4d:37:1d:90:eb:0b: 5c:5f:12:c2:d6:91:47:2b:d3:1b:33:88:d3:bd:1c:a8:2c:68: d1:5b:f8:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQ8vkXDifvisjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk NGRmM2IyN2MtYzAwYy00Y2U4LThiNDUtYjNkZmU0ZDAwODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWIl88V2Ne8GjUcyP8485flj+OpSveXy2i2N VUBfcM72xkmZ68asGqOFDUeo2bkHvNAd4itLG9Fljlcho+1LR1XGPKOyxAcD98a0 5LifThs7cJ2QGpfY/Y6EZog7KzvS2nKv7zwcQu726a1xS1KHUkqR52LBOixQi3Uq ZxDM/OhpB92FGgpXe1E3XqObsgKfKlGdCMj4lVYGO1dVblYzKzJ5ZPBqAifgwS+E Q6AfdgzMh0GyZw/igY0GifL6u7UFVB5FXww9F5W2s00ylQqpb0im4XCVG+EQUpYt FyNmdKP/rgy3w4uA4v2FPGe+3eALoHeFQ1qyR0waIO2F7mQm/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHXnmfqEgVB0LaN/0JXp24k+Ww4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGVmYmVjNmItYjAyYi0z MTlmLTliNGUtYjZjZGZlZDJhOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+woQq2RTm9wb6emzXiE+LK8GCJF9heTtF68GVS1S+26pSiTxzFydd8 IvBxetrPTroRf72W6KsBZiztOJeUdKZ0dzmeGUctPQP0QXy8AqfM/GD6pFbZA/xb CRMq3y0x/BNGs5Z/Aqy/+jVajhK8tYD7xSly670wb1YdeTn9F7Li7Dm53B9VVB0H nJ7qCh61isEUq0x2QSfwDH+1kNOspUWLkhuPBY4TGtiy0a6ouQtJpY6dJkbcsqtv VYZgMtLrFSwpG6I5Qvat9rTlbOThv8DOYa9tPs1iN35UHuT4trcEV3pNwU03HZDr C1xfEsLWkUcr0xsziNO9HKgsaNFb+AA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:01 2025 by rpki-client