$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/573c24df-3b25-3d49-a306-31216b32fa22.roa File: 573c24df-3b25-3d49-a306-31216b32fa22.roa (raw, json) Hash identifier: nzGGbHJUQKc6VNqYNfxs1fuxlJAgWL3ZpG7cCDvnuDk= Subject key identifier: 04:69:42:7B:03:3B:8D:27:E8:66:A6:A7:3C:57:31:15:9A:50:E9:56 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD0105667D3B25F177900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/573c24df-3b25-3d49-a306-31216b32fa22.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.71.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d0:10:56:67:d3:b2:5f:17:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=3a29cc2a-a568-40c2-ad6d-fc96642e789f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:0f:9b:e7:9a:71:81:32:9a:ee:b1:44:1b: 10:d8:22:39:b2:6f:98:c2:f6:fa:74:b7:6e:e7:68: 95:9f:51:82:79:27:a2:8e:1b:32:28:2a:5f:3d:1e: e1:1c:f9:2f:a4:f0:92:f2:75:37:5f:ac:43:95:0d: 22:be:1b:0a:a2:d7:2c:20:80:bd:59:c4:2e:45:ec: 80:f2:8b:ad:97:b3:32:23:f1:af:7d:61:f8:ec:21: 13:1e:03:47:ad:3c:c7:4e:8f:45:3b:77:12:f8:ca: b1:a7:ca:28:7f:f3:f8:b5:85:8c:27:53:24:e6:20: 11:85:d3:34:2c:1a:8f:f5:0e:d5:5d:f1:71:10:dc: a9:32:f2:4a:7a:98:06:ca:21:e0:d0:19:d1:58:e0: 46:43:89:0c:77:77:19:c5:a6:38:6b:05:60:35:d3: 3a:81:13:ee:0f:a5:33:75:d3:f7:b5:60:dd:a7:81: 1e:c2:6b:40:a5:e6:69:24:ab:64:97:50:04:34:fc: 16:7d:05:7e:27:25:44:da:5d:c7:20:55:95:f5:fc: 27:2c:d2:f9:1f:67:41:d4:49:57:bd:6a:b4:2b:89: c3:17:88:33:10:75:40:2f:0a:30:2c:45:b7:2b:11: c7:4f:66:19:6a:e6:00:65:87:a0:47:b1:0b:57:90: 6c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:69:42:7B:03:3B:8D:27:E8:66:A6:A7:3C:57:31:15:9A:50:E9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/573c24df-3b25-3d49-a306-31216b32fa22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:20:58:8d:72:7a:2b:bd:aa:44:c2:a5:89:39:2d:7c:48:6b: 98:c0:76:89:9c:94:dd:43:01:cd:4c:fe:ed:38:95:1f:a5:a6: 7f:03:4b:97:cc:cf:e9:37:06:49:21:4b:70:7d:29:dc:51:e9: 67:fb:9a:dd:09:ff:14:8e:03:7f:cf:65:16:77:e2:52:10:1e: 60:ad:df:b5:80:5c:56:72:da:4b:8d:4d:bc:6d:04:a7:4a:83: 33:3b:5d:b4:cd:01:d5:28:e3:4d:d4:b7:45:65:aa:01:a5:71: bd:83:6c:f3:89:ef:fe:97:86:ee:b7:3f:69:7b:8c:22:3f:ea: 4a:ab:17:fa:dc:0a:c5:3e:96:49:74:39:4b:ab:23:5e:95:61: ac:91:d7:e0:eb:ea:2b:3a:ee:8d:56:37:ee:2d:60:5c:35:2a: ef:be:d7:4c:cf:70:c2:a3:44:46:9b:fa:ba:f7:88:60:7a:40: e5:76:c6:b2:d0:2e:d2:89:0f:a8:f1:dc:90:a4:ec:a0:c1:23: 52:4c:45:00:3a:2e:08:39:e3:73:3a:c5:cf:6e:97:20:cd:c9: d6:39:1d:f9:0c:7b:63:e2:0f:fd:30:04:c0:56:e9:12:74:bd: 14:fa:5c:09:73:6e:55:e9:6b:3f:e5:38:0f:32:69:2c:91:91: f6:c7:64:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79AQVmfTsl8XeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk M2EyOWNjMmEtYTU2OC00MGMyLWFkNmQtZmM5NjY0MmU3ODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ8Pm+eacYEymu6xRBsQ2CI5sm+Ywvb6dLdu 52iVn1GCeSeijhsyKCpfPR7hHPkvpPCS8nU3X6xDlQ0ivhsKotcsIIC9WcQuReyA 8outl7MyI/GvfWH47CETHgNHrTzHTo9FO3cS+Mqxp8oof/P4tYWMJ1Mk5iARhdM0 LBqP9Q7VXfFxENypMvJKepgGyiHg0BnRWOBGQ4kMd3cZxaY4awVgNdM6gRPuD6Uz ddP3tWDdp4EewmtApeZpJKtkl1AENPwWfQV+JyVE2l3HIFWV9fwnLNL5H2dB1ElX vWq0K4nDF4gzEHVALwowLEW3KxHHT2YZauYAZYegR7ELV5BsWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARpQnsDO40n6GampzxXMRWaUOlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTczYzI0ZGYtM2IyNS0z ZDQ5LWEzMDYtMzEyMTZiMzJmYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEevMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0gWI1yeiu9qkTCpYk5LXxIa5jAdomclN1DAc1M/u04lR+lpn8DS5fM z+k3BkkhS3B9KdxR6Wf7mt0J/xSOA3/PZRZ34lIQHmCt37WAXFZy2kuNTbxtBKdK gzM7XbTNAdUo403Ut0VlqgGlcb2DbPOJ7/6Xhu63P2l7jCI/6kqrF/rcCsU+lkl0 OUurI16VYayR1+Dr6is67o1WN+4tYFw1Ku++10zPcMKjREab+rr3iGB6QOV2xrLQ LtKJD6jx3JCk7KDBI1JMRQA6Lgg543M6xc9ulyDNydY5HfkMe2PiD/0wBMBW6RJ0 vRT6XAlzblXpaz/lOA8yaSyRkfbHZIY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:42:39 2025 by rpki-client