$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68db9de5-d222-3be4-81e3-8136afb6dc23.roa File: 68db9de5-d222-3be4-81e3-8136afb6dc23.roa (raw, json) Hash identifier: YmvGDcuvaUwZdHCYr74GUhq2ghQ0qzuBn1KKVv9JQ0s= Subject key identifier: D3:E5:50:8D:C3:2F:58:57:0B:68:EE:CB:38:EB:93:E3:4E:34:82:EA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA8C411C36C309ABD6DA20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68db9de5-d222-3be4-81e3-8136afb6dc23.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 172.71.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:8c:41:1c:36:c3:09:ab:d6:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=cefe8bc3-6791-4501-9ec0-fdd51d2a8edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:68:5a:f5:78:9b:e7:77:6f:0e:4c:ca:2e: 69:4d:92:f8:7f:c4:50:56:17:e8:e9:d2:86:3e:86: ea:5b:5c:34:66:bc:e3:63:6d:eb:30:22:f5:e8:b7: 42:67:c1:76:a3:87:2a:84:f5:a6:8e:58:e1:95:b7: c7:b0:ad:55:2b:f2:a4:cb:74:90:39:74:31:71:b0: 85:c1:f6:b5:26:83:bc:0b:91:ee:8f:46:0b:18:a6: 5a:60:24:34:de:eb:dd:e4:c1:0f:96:bb:8f:ff:3a: 05:e7:e4:8b:1e:eb:5f:26:70:04:21:08:30:df:24: 7c:41:57:db:f4:ea:1a:5e:43:a7:6d:e5:ef:4e:f1: c3:75:47:c4:ab:4a:21:4e:d4:24:ca:81:24:c3:eb: 7b:68:a0:99:65:e8:2f:ee:51:b9:a5:a8:17:6b:de: b3:10:13:09:a4:20:4b:0d:36:6c:9b:72:2f:de:dc: 69:c4:16:9c:6a:ea:bd:90:1a:77:51:94:ac:e2:0c: dd:53:da:f4:05:86:1c:47:46:ef:71:d1:26:88:77: 1a:ed:83:8c:ab:01:bf:3e:b4:20:79:d1:e7:4c:35: 49:2f:c5:fb:c2:f6:cc:83:19:74:a5:b4:6d:68:72: af:c2:fb:a4:f5:ce:46:96:ff:9d:2b:ff:92:14:c6: ac:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E5:50:8D:C3:2F:58:57:0B:68:EE:CB:38:EB:93:E3:4E:34:82:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/68db9de5-d222-3be4-81e3-8136afb6dc23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:23:d4:61:5d:a0:c7:62:89:81:ed:e6:80:e5:04:0f:f0:77: 44:b9:ea:b5:83:7c:de:7a:32:11:3b:02:5a:36:88:72:92:04: 86:7b:75:95:39:b4:69:f2:29:2a:57:66:1c:90:4b:24:97:91: d8:38:ff:90:96:6e:59:bd:d8:af:99:95:f6:c4:68:41:3c:53: 99:42:77:62:e0:5e:a9:e6:bb:17:9f:1c:d1:4a:47:c4:7f:cf: d4:9b:16:6e:7a:db:dc:48:ea:56:2c:5d:43:79:68:49:55:16: 0f:54:48:90:91:1b:ee:f9:36:03:a0:35:7e:e0:26:49:57:c4: c1:23:15:42:4d:f1:37:54:f2:06:49:ec:2c:97:08:73:7c:27: d4:e2:e5:83:ac:f9:4a:ed:49:4d:b7:18:17:7d:4f:44:4e:26: 6e:8d:a3:ee:61:61:ef:29:86:64:59:c0:b1:0f:32:c5:f9:cb: c8:4d:6d:e1:7e:b0:b8:19:2d:b2:8c:a3:1d:fb:2c:41:a7:3f: 70:bd:b1:22:f1:eb:cd:da:4c:72:21:b1:e5:d3:a3:3d:da:6d: 89:de:a5:49:ba:f4:cb:fa:69:27:a4:f1:2f:72:ad:30:6b:98: 85:c9:1f:4f:dc:5b:83:e4:52:b6:9e:b3:05:e5:6e:7c:ce:42: 3b:a2:05:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoxBHDbDCavW2iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk Y2VmZThiYzMtNjc5MS00NTAxLTllYzAtZmRkNTFkMmE4ZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDhoWvV4m+d3bw5Myi5pTZL4f8RQVhfo6dKG PobqW1w0ZrzjY23rMCL16LdCZ8F2o4cqhPWmjljhlbfHsK1VK/Kky3SQOXQxcbCF wfa1JoO8C5Huj0YLGKZaYCQ03uvd5MEPlruP/zoF5+SLHutfJnAEIQgw3yR8QVfb 9OoaXkOnbeXvTvHDdUfEq0ohTtQkyoEkw+t7aKCZZegv7lG5pagXa96zEBMJpCBL DTZsm3Iv3txpxBacauq9kBp3UZSs4gzdU9r0BYYcR0bvcdEmiHca7YOMqwG/PrQg edHnTDVJL8X7wvbMgxl0pbRtaHKvwvuk9c5Glv+dK/+SFMasmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPlUI3DL1hXC2juyzjrk+NONILqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjhkYjlkZTUtZDIyMi0z YmU0LTgxZTMtODEzNmFmYjZkYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwj1GFdoMdiiYHt5oDlBA/wd0S56rWDfN56MhE7Alo2iHKSBIZ7dZU5 tGnyKSpXZhyQSySXkdg4/5CWblm92K+ZlfbEaEE8U5lCd2LgXqnmuxefHNFKR8R/ z9SbFm5629xI6lYsXUN5aElVFg9USJCRG+75NgOgNX7gJklXxMEjFUJN8TdU8gZJ 7CyXCHN8J9Ti5YOs+UrtSU23GBd9T0ROJm6No+5hYe8phmRZwLEPMsX5y8hNbeF+ sLgZLbKMox37LEGnP3C9sSLx683aTHIhseXToz3abYnepUm69Mv6aSek8S9yrTBr mIXJH0/cW4PkUraeswXlbnzOQjuiBeE= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:13 2025 by rpki-client