$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a95a405-f2a3-3033-b746-b09b7eb542d4.roa File: 5a95a405-f2a3-3033-b746-b09b7eb542d4.roa (raw, json) Hash identifier: I4MLFQsvJxWAHFh5yZP4rJX4k5Nd7G6DKY7de0oSSSo= Subject key identifier: F3:20:01:B4:2B:5E:A5:D3:FE:14:2D:52:81:F2:C9:B7:3A:BC:96:46 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFD9FD280A42D276545820 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a95a405-f2a3-3033-b746-b09b7eb542d4.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.71.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:d9:fd:28:0a:42:d2:76:54:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=33d074fa-6347-417d-ad43-2be092dc35fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:8a:06:cd:61:f7:d4:f6:da:23:67:c7:45: 2c:41:0d:8d:f3:13:2f:3c:66:5a:9a:e9:05:f3:0c: 30:97:59:21:49:63:30:34:0e:91:e7:5e:4e:d6:bc: 2d:20:d8:1f:15:91:5a:6c:2b:04:e3:3e:d6:93:a4: 54:b5:02:49:67:7c:94:70:da:f4:b8:9b:09:f8:eb: 40:77:53:2a:78:ec:76:ca:78:49:fa:f9:97:97:f0: 01:64:de:70:12:b5:f5:ea:f7:54:1c:98:7f:36:75: ed:eb:83:9f:c9:96:51:24:54:55:16:57:fe:b7:b4: 86:3d:43:4f:42:81:fc:32:3e:af:94:18:29:83:4d: ae:02:4a:64:2f:d5:99:3c:aa:e5:a5:8a:b7:3d:fe: 3e:62:70:58:81:1c:71:7a:2b:b2:31:54:39:79:95: 42:ae:61:77:c6:c2:1a:94:eb:36:03:ab:f7:fa:22: 27:e8:a6:60:24:b6:4b:eb:b9:00:58:fe:0b:e4:47: dd:05:75:9e:97:28:2a:ea:a7:4a:5b:e1:07:1f:8e: 6d:7a:05:85:13:5a:b7:15:c4:b3:22:aa:7c:af:81: a3:05:29:37:08:b7:2b:e4:cd:21:c0:d3:9a:00:d0: 16:67:4d:70:d6:0c:36:19:0e:56:6c:74:80:55:e2: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:01:B4:2B:5E:A5:D3:FE:14:2D:52:81:F2:C9:B7:3A:BC:96:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a95a405-f2a3-3033-b746-b09b7eb542d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:59:f1:60:35:13:6d:62:35:10:bf:6d:ee:d7:1d:0c:5f:2d: 71:79:2a:32:6b:28:27:2a:f1:25:18:0d:6c:5b:91:d1:7e:5a: 84:5d:d5:00:a5:2c:b8:90:3d:56:2a:ca:42:26:34:bf:84:c3: 8e:9e:c8:13:a8:e3:56:98:d4:17:49:ee:c3:a3:38:b5:36:10: 54:fd:31:21:a7:27:7a:e0:82:c3:80:40:0f:1c:ba:bd:91:7b: 41:3e:f5:cb:16:77:e5:a9:5a:af:84:95:c9:82:04:fe:8d:9e: 97:76:73:aa:35:c3:a6:a3:a3:75:d3:fa:e5:47:e6:3d:bb:8e: 76:39:9e:64:bc:44:8d:e3:09:d3:fa:90:7e:49:fb:29:e4:99: ea:0c:e6:c8:1c:d0:4c:19:c0:bf:0a:5f:39:53:79:a1:ca:fb: e9:32:20:6a:2c:b0:56:28:01:29:80:97:75:3f:13:08:8b:9f: f1:f6:1e:87:58:e9:7c:5b:5a:68:17:50:9e:85:7e:53:6b:aa: f1:44:cb:c4:b8:b6:f0:57:51:e3:82:95:23:31:b6:06:00:0f: 27:ae:53:d6:8c:ca:df:c5:01:ad:b0:94:37:37:e7:82:99:3d: 8f:04:1b:71:6b:d3:07:4d:27:fc:5a:5a:59:05:76:06:42:7a: 17:8c:29:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79n9KApC0nZUWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzNkMDc0ZmEtNjM0Ny00MTdkLWFkNDMtMmJlMDkyZGMzNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVSKBs1h99T22iNnx0UsQQ2N8xMvPGZamukF 8wwwl1khSWMwNA6R515O1rwtINgfFZFabCsE4z7Wk6RUtQJJZ3yUcNr0uJsJ+OtA d1MqeOx2ynhJ+vmXl/ABZN5wErX16vdUHJh/NnXt64OfyZZRJFRVFlf+t7SGPUNP QoH8Mj6vlBgpg02uAkpkL9WZPKrlpYq3Pf4+YnBYgRxxeiuyMVQ5eZVCrmF3xsIa lOs2A6v3+iIn6KZgJLZL67kAWP4L5EfdBXWelygq6qdKW+EHH45tegWFE1q3FcSz Iqp8r4GjBSk3CLcr5M0hwNOaANAWZ01w1gw2GQ5WbHSAVeJ8/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMgAbQrXqXT/hQtUoHyybc6vJZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWE5NWE0MDUtZjJhMy0z MDMzLWI3NDYtYjA5YjdlYjU0MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBZ8WA1E21iNRC/be7XHQxfLXF5KjJrKCcq8SUYDWxbkdF+WoRd1QCl LLiQPVYqykImNL+Ew46eyBOo41aY1BdJ7sOjOLU2EFT9MSGnJ3rggsOAQA8cur2R e0E+9csWd+WpWq+ElcmCBP6Nnpd2c6o1w6ajo3XT+uVH5j27jnY5nmS8RI3jCdP6 kH5J+ynkmeoM5sgc0EwZwL8KXzlTeaHK++kyIGossFYoASmAl3U/EwiLn/H2HodY 6XxbWmgXUJ6FflNrqvFEy8S4tvBXUeOClSMxtgYADyeuU9aMyt/FAa2wlDc354KZ PY8EG3Fr0wdNJ/xaWlkFdgZCeheMKV8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:58:35 2025 by rpki-client