$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/69136d25-6cea-331c-b4f3-4060b88abae4.roa File: 69136d25-6cea-331c-b4f3-4060b88abae4.roa (raw, json) Hash identifier: mFwv4LYu9hUjg5iSTX5+nkxjnpoRVXKK4LJFiA0Cy2I= Subject key identifier: F3:43:66:AC:2A:8E:F3:16:0B:E0:43:56:C8:91:EA:12:82:26:7D:58 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E654FBF8624277DBBC103500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/69136d25-6cea-331c-b4f3-4060b88abae4.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.71.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:fb:f8:62:42:77:db:bc:10:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=ab227d63-d500-4498-b6a7-386e16557b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:7a:0a:d8:4c:19:38:7e:ba:56:e5:34:dd: cd:e6:41:35:df:e7:eb:7c:d2:85:f8:bf:f2:7c:07: 6f:a2:57:9e:11:d6:b8:1c:7e:25:c3:6d:e0:3a:4d: d3:c7:35:b8:ac:43:e9:59:ce:4a:b1:f1:6e:cc:b0: 78:42:f1:55:b4:08:87:9a:09:55:30:cb:04:20:03: 54:d9:16:90:1c:ac:f4:5e:27:ea:c0:51:21:1e:7d: 95:bb:60:17:39:28:ee:97:2d:52:e7:d8:06:44:93: 26:77:18:ad:5d:c3:96:ce:b4:36:69:5d:e0:32:a1: d6:ca:d0:bf:ff:8b:1a:3a:8d:17:bc:17:54:9e:37: 49:69:46:b7:35:1f:b4:57:05:14:8d:69:9c:1c:4c: 22:7f:23:b9:60:68:10:ca:78:b8:3a:91:eb:79:db: 53:67:5b:37:bb:c7:9c:7d:28:36:ec:f7:be:70:1e: 00:6b:a9:cf:e6:d0:8b:f9:32:65:de:7c:dd:b3:11: 45:19:80:06:cd:ad:c7:e3:12:72:13:65:6f:6b:51: 75:96:e6:9c:a6:0e:c4:db:fb:0d:84:f2:1f:b3:63: fa:b8:26:ab:81:53:1c:9d:60:8a:df:7e:0a:18:49: cc:a5:3a:83:70:38:71:b5:eb:27:0a:07:a7:c5:08: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:43:66:AC:2A:8E:F3:16:0B:E0:43:56:C8:91:EA:12:82:26:7D:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/69136d25-6cea-331c-b4f3-4060b88abae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:8a:7d:bc:1d:9f:e6:21:02:63:ad:47:ce:26:03:a4:c1:99: 03:73:91:82:19:55:c8:3b:1c:ea:dc:c2:95:52:2e:9f:38:78: 1e:ad:4f:bf:bd:50:39:4e:3e:b2:84:fc:a0:0a:11:c7:4b:49: b0:6e:c5:e6:10:cc:14:ed:87:bb:ac:2d:39:b8:67:0f:50:61: d8:cd:cd:71:4a:b6:c6:d5:ed:5b:8f:af:7f:93:5a:87:cc:31: 2f:22:92:df:26:a4:7b:b0:b8:4a:b7:a2:54:59:40:95:c3:2d: 67:40:c8:d9:7d:7b:70:f2:c1:87:5c:47:21:a3:41:a6:46:50: d8:7e:c7:3f:49:df:9a:d7:65:2d:ab:86:09:36:b1:4e:dd:d9: 09:2a:6d:60:25:cb:4d:8b:f1:d9:48:a9:de:7f:bd:ed:34:bf: 7a:07:1f:bb:3d:38:bd:27:65:6c:98:d7:2e:5a:24:9d:99:a3: d8:0f:3b:c5:e4:16:84:a9:68:6c:28:32:2e:f6:34:8a:62:94: 85:9a:2e:de:7b:73:a3:d7:8c:8b:41:3b:63:3e:64:28:8d:08: 98:4d:30:7e:1d:45:1d:a0:0c:f5:64:87:27:a1:bb:b2:0d:fa: cd:82:0e:a4:19:88:8f:c5:7a:67:39:a2:ba:57:3a:38:46:a4: ca:3c:69:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPv4YkJ327wQNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk YWIyMjdkNjMtZDUwMC00NDk4LWI2YTctMzg2ZTE2NTU3YjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK56CthMGTh+ulblNN3N5kE13+frfNKF+L/y fAdvoleeEda4HH4lw23gOk3TxzW4rEPpWc5KsfFuzLB4QvFVtAiHmglVMMsEIANU 2RaQHKz0XifqwFEhHn2Vu2AXOSjuly1S59gGRJMmdxitXcOWzrQ2aV3gMqHWytC/ /4saOo0XvBdUnjdJaUa3NR+0VwUUjWmcHEwifyO5YGgQyni4OpHredtTZ1s3u8ec fSg27Pe+cB4Aa6nP5tCL+TJl3nzdsxFFGYAGza3H4xJyE2Vva1F1luacpg7E2/sN hPIfs2P6uCargVMcnWCK334KGEnMpTqDcDhxtesnCgenxQh3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNDZqwqjvMWC+BDVsiR6hKCJn1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjkxMzZkMjUtNmNlYS0z MzFjLWI0ZjMtNDA2MGI4OGFiYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGKfbwdn+YhAmOtR84mA6TBmQNzkYIZVcg7HOrcwpVSLp84eB6tT7+9 UDlOPrKE/KAKEcdLSbBuxeYQzBTth7usLTm4Zw9QYdjNzXFKtsbV7VuPr3+TWofM MS8ikt8mpHuwuEq3olRZQJXDLWdAyNl9e3DywYdcRyGjQaZGUNh+xz9J35rXZS2r hgk2sU7d2QkqbWAly02L8dlIqd5/ve00v3oHH7s9OL0nZWyY1y5aJJ2Zo9gPO8Xk FoSpaGwoMi72NIpilIWaLt57c6PXjItBO2M+ZCiNCJhNMH4dRR2gDPVkhyehu7IN +s2CDqQZiI/Femc5orpXOjhGpMo8af0= -----END CERTIFICATE-----Generated at Fri Jun 6 16:45:13 2025 by rpki-client