$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/605bf8fc-26d4-38b0-a9c5-ddeef9883959.roa File: 605bf8fc-26d4-38b0-a9c5-ddeef9883959.roa (raw, json) Hash identifier: 3xMsjmRud4N+v4k1NamMZbJaH7KyzhP5bSzCrNXhXbA= Subject key identifier: D3:E0:CA:21:EA:1C:C9:58:AA:A1:1D:E4:3E:19:1C:67:AC:1D:A8:10 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490F7BFA27888C3D37D0285500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/605bf8fc-26d4-38b0-a9c5-ddeef9883959.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.71.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:fa:27:88:8c:3d:37:d0:28:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=3ce3a35d-6d19-44cb-b227-3d7c7b81ac44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ea:81:f4:31:c5:72:36:7f:06:03:54:09:e5: ea:0b:8b:9a:48:93:82:04:8b:16:5b:43:65:4a:1c: a5:08:48:51:10:a8:49:c4:00:52:7e:8f:11:72:02: 0c:5c:97:1e:f8:a8:7e:3a:fa:e3:35:27:27:62:45: 73:01:c7:5a:0f:ff:d6:38:96:a1:ee:02:0e:3d:26: 66:35:70:0c:ec:1f:5d:0c:53:65:cc:60:af:a8:5b: 57:8e:c7:fd:20:c4:97:2f:a7:1b:56:8f:3d:21:a2: e7:64:96:f7:d9:bb:c7:6d:05:48:66:bc:a6:96:8a: 9b:69:ea:e9:89:31:ca:35:11:06:89:ac:f5:18:7a: 48:6b:72:47:f7:63:93:be:f1:9a:ac:73:01:c1:79: c8:82:e4:ad:39:7f:0d:a6:57:45:2c:f9:7a:44:50: 2f:76:62:78:a5:2e:9a:f8:14:9e:73:61:59:a1:74: 25:9d:cf:3f:c3:71:73:a3:5b:9f:f6:90:4b:e4:64: b7:df:2f:88:c8:04:08:8c:97:7f:6c:a5:77:d1:79: 03:87:8c:a6:f9:c2:87:99:8a:62:50:de:b2:4e:96: d7:e1:32:71:f1:e4:5a:5e:04:8a:d4:d3:bb:16:0c: 58:14:5c:ca:c8:d3:f6:00:c0:73:a3:b9:ef:6a:46: 14:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E0:CA:21:EA:1C:C9:58:AA:A1:1D:E4:3E:19:1C:67:AC:1D:A8:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/605bf8fc-26d4-38b0-a9c5-ddeef9883959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:37:7c:cb:8c:40:12:f1:92:8a:f1:6a:d8:e9:04:0e:9d:3c: c3:fb:16:2e:f7:99:bc:12:c7:7d:7e:84:22:b9:0a:5c:6e:f2: 80:c2:bc:14:56:cc:7f:24:f0:d6:50:e7:8c:47:67:85:33:b1: b6:ea:3d:ba:13:ef:c7:82:a0:80:53:63:ae:a6:db:c3:5b:f9: 74:96:12:e3:29:21:ad:b5:c3:50:15:dc:82:fd:86:59:60:3f: f9:46:28:83:fc:74:8f:a0:ac:b1:4d:76:fc:08:41:80:b8:c2: 36:5c:9d:36:8b:e8:1d:f4:9d:04:fd:fc:e6:a4:d4:c2:a1:eb: 57:81:82:ca:59:b5:00:4a:3a:75:0d:5d:88:bd:1e:6b:7c:09: 22:1a:6f:2f:38:ef:36:fd:0a:7a:26:e0:3c:c2:2b:63:d5:2f: 2a:e1:ec:df:dd:ff:b9:95:01:06:12:ee:f5:12:53:ab:d2:ee: 00:a4:e5:b8:19:4a:b9:00:2e:07:39:37:2d:f6:02:b3:31:64: a3:35:08:46:c8:ab:53:da:4c:1c:a6:d9:b7:fa:57:7c:29:b3: f7:b2:ea:91:10:32:2f:45:fd:6d:76:38:27:da:3d:ac:0d:96: 8a:79:f3:17:38:85:9a:0c:fd:36:9d:83:a7:a1:10:4e:29:eb: 6d:78:99:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/oniIw9N9AoVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk M2NlM2EzNWQtNmQxOS00NGNiLWIyMjctM2Q3YzdiODFhYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uqB9DHFcjZ/BgNUCeXqC4uaSJOCBIsWW0Nl ShylCEhREKhJxABSfo8RcgIMXJce+Kh+OvrjNScnYkVzAcdaD//WOJah7gIOPSZm NXAM7B9dDFNlzGCvqFtXjsf9IMSXL6cbVo89IaLnZJb32bvHbQVIZrymloqbaerp iTHKNREGiaz1GHpIa3JH92OTvvGarHMBwXnIguStOX8NpldFLPl6RFAvdmJ4pS6a +BSec2FZoXQlnc8/w3Fzo1uf9pBL5GS33y+IyAQIjJd/bKV30XkDh4ym+cKHmYpi UN6yTpbX4TJx8eRaXgSK1NO7FgxYFFzKyNP2AMBzo7nvakYUOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPgyiHqHMlYqqEd5D4ZHGesHagQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjA1YmY4ZmMtMjZkNC0z OGIwLWE5YzUtZGRlZWY5ODgzOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALI3fMuMQBLxkorxatjpBA6dPMP7Fi73mbwSx31+hCK5Clxu8oDCvBRW zH8k8NZQ54xHZ4UzsbbqPboT78eCoIBTY66m28Nb+XSWEuMpIa21w1AV3IL9hllg P/lGKIP8dI+grLFNdvwIQYC4wjZcnTaL6B30nQT9/Oak1MKh61eBgspZtQBKOnUN XYi9Hmt8CSIaby847zb9Cnom4DzCK2PVLyrh7N/d/7mVAQYS7vUSU6vS7gCk5bgZ SrkALgc5Ny32ArMxZKM1CEbIq1PaTBym2bf6V3wps/ey6pEQMi9F/W12OCfaPawN lop58xc4hZoM/Tadg6ehEE4p6214mTc= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:28 2025 by rpki-client