$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5821854a-b87c-3ce0-91e0-20156ceb09ee.roa File: 5821854a-b87c-3ce0-91e0-20156ceb09ee.roa (raw, json) Hash identifier: iRcaB+6Evgz4VVXZ6KlVupOceqFHiafhgvU07+WA/4c= Subject key identifier: 12:49:B0:E7:3E:95:A5:DD:F1:20:0C:10:E6:CD:27:32:B0:7D:8C:99 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8C4629A21AC191F40780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5821854a-b87c-3ce0-91e0-20156ceb09ee.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8c:46:29:a2:1a:c1:91:f4:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=ac26df8e-9849-4760-9fc3-cd669571398a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:8a:d8:68:17:4e:0f:9c:25:60:36:3c:34: 47:98:7b:a2:b9:66:cb:5b:5c:d6:93:9d:fd:5e:d3: c6:46:0d:a5:6b:9d:21:41:f3:4e:56:00:6d:b2:e4: b7:32:5a:7d:da:42:dd:9a:dd:42:79:51:bc:65:46: 77:e1:4c:59:3c:7f:2f:c1:2e:22:9a:d8:52:20:05: 33:c9:a2:78:e8:5a:51:9a:bb:4e:ab:7a:96:21:23: 6c:1b:85:9f:77:18:ee:f0:25:51:3e:f0:d7:93:f3: 2c:99:8e:eb:2e:0c:8d:48:be:0f:3a:98:ee:ae:48: cc:9c:a9:d8:16:b2:75:09:05:ef:15:6c:44:26:7e: 52:e7:ac:0f:35:e2:79:ce:99:34:51:a7:00:dc:4e: dd:10:82:92:39:a5:a9:6b:88:bd:c2:50:e0:f5:a0: 4f:08:95:bc:2b:2a:e1:ac:e7:f9:ad:6a:5d:9d:41: 38:45:23:61:cb:85:03:ce:49:56:54:d1:c5:ff:89: 5b:65:20:fa:ef:dc:0a:c2:50:b6:c2:e5:05:3a:bd: 7e:79:11:08:9d:41:f4:fc:24:e1:18:d6:9a:7e:5f: 10:18:05:11:c1:b0:35:d3:0a:b3:bb:b0:01:19:00: 0f:8b:de:4f:81:33:6c:04:06:1f:ad:8a:d4:c2:34: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:49:B0:E7:3E:95:A5:DD:F1:20:0C:10:E6:CD:27:32:B0:7D:8C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5821854a-b87c-3ce0-91e0-20156ceb09ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:45:17:69:82:fc:f4:fe:cc:b1:2b:88:d8:19:6f:b2:f6:ce: 51:b8:74:14:26:61:38:2e:50:45:56:85:c5:e7:09:72:43:1c: 4b:86:65:97:e3:1c:6a:d0:30:2b:e6:8f:a4:f8:56:83:f9:33: be:3a:9c:58:0f:b4:e2:fc:b1:7a:71:03:18:12:f9:85:3a:4d: 2d:78:a6:80:e7:6e:9f:b2:97:d4:4c:b0:b0:ef:4c:c4:46:83: 19:47:57:73:db:36:d2:ef:04:c9:95:32:9f:59:04:12:ea:72: 27:d7:40:94:4c:ac:dd:8f:08:b5:eb:b8:d1:d7:60:46:27:51: 64:13:1f:a3:71:ac:34:b6:8d:c7:5e:7e:f9:9b:1a:52:7f:bb: 41:ff:81:d1:9b:0f:af:7e:3a:71:65:f0:67:93:45:77:9e:8d: 85:75:76:59:b8:52:fb:30:16:90:4e:a8:a0:98:97:ca:c4:e9: 74:cb:d4:a7:c1:ae:1b:9a:12:17:1c:7d:21:ea:ea:3b:1a:6d: 3c:44:9f:76:be:30:c0:da:7f:44:9d:a0:ed:ec:ce:1f:2f:6e: 83:ae:15:27:fd:28:eb:cd:64:4c:10:4d:e0:f2:23:46:36:09: 59:cf:0e:ee:ed:1d:3a:11:38:90:79:f8:11:5f:af:ba:22:0d: c3:97:87:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoxGKaIawZH0B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk YWMyNmRmOGUtOTg0OS00NzYwLTlmYzMtY2Q2Njk1NzEzOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOiK2GgXTg+cJWA2PDRHmHuiuWbLW1zWk539 XtPGRg2la50hQfNOVgBtsuS3Mlp92kLdmt1CeVG8ZUZ34UxZPH8vwS4imthSIAUz yaJ46FpRmrtOq3qWISNsG4Wfdxju8CVRPvDXk/MsmY7rLgyNSL4POpjurkjMnKnY FrJ1CQXvFWxEJn5S56wPNeJ5zpk0UacA3E7dEIKSOaWpa4i9wlDg9aBPCJW8Kyrh rOf5rWpdnUE4RSNhy4UDzklWVNHF/4lbZSD679wKwlC2wuUFOr1+eREInUH0/CTh GNaafl8QGAURwbA10wqzu7ABGQAPi95PgTNsBAYfrYrUwjQ1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJJsOc+laXd8SAMEObNJzKwfYyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTgyMTg1NGEtYjg3Yy0z Y2UwLTkxZTAtMjAxNTZjZWIwOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5FF2mC/PT+zLEriNgZb7L2zlG4dBQmYTguUEVWhcXnCXJDHEuGZZfj HGrQMCvmj6T4VoP5M746nFgPtOL8sXpxAxgS+YU6TS14poDnbp+yl9RMsLDvTMRG gxlHV3PbNtLvBMmVMp9ZBBLqcifXQJRMrN2PCLXruNHXYEYnUWQTH6NxrDS2jcde fvmbGlJ/u0H/gdGbD69+OnFl8GeTRXeejYV1dlm4UvswFpBOqKCYl8rE6XTL1KfB rhuaEhccfSHq6jsabTxEn3a+MMDaf0SdoO3szh8vboOuFSf9KOvNZEwQTeDyI0Y2 CVnPDu7tHToROJB5+BFfr7oiDcOXh6k= -----END CERTIFICATE-----Generated at Fri Jun 6 16:51:26 2025 by rpki-client