$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72dad931-531b-3c0e-9ce1-e490813e9731.roa File: 72dad931-531b-3c0e-9ce1-e490813e9731.roa (raw, json) Hash identifier: CUeY/21r4CW5dYKbIDUitLVewiAx5KcbZdcn2Wvb/LE= Subject key identifier: B8:C5:FD:04:12:31:68:CD:91:B4:74:24:EA:A8:9E:65:A7:9F:16:B4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CF5EA1BEF870E8FD9B40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72dad931-531b-3c0e-9ce1-e490813e9731.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 172.71.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:cf:5e:a1:be:f8:70:e8:fd:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=96a1650b-9f1b-4449-b0a6-a14eccda2c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:14:ed:74:d2:9f:75:2d:58:13:07:08:89: f9:7e:53:80:6d:70:0e:66:19:56:fe:34:eb:95:fa: 70:45:0c:db:73:35:58:44:06:e3:36:f2:86:19:d4: d2:bf:8a:bb:37:c7:d0:47:37:82:c4:04:f0:da:87: 57:aa:e2:4e:80:5c:eb:19:ea:17:49:f1:d6:27:af: c1:3d:63:40:56:c7:80:43:b1:e8:ed:f0:76:d6:09: 77:72:bd:55:1a:8f:d5:52:d4:b3:4a:2c:48:2b:bd: ba:31:30:46:0f:b6:31:32:37:44:05:63:7f:b8:e7: f8:63:bc:04:f5:87:53:72:ba:03:c7:74:75:2f:f8: 2e:9e:87:84:8d:e1:55:50:5b:a7:4b:b3:d2:10:90: 67:d8:98:cc:6b:8f:9f:bd:65:d2:c9:dd:90:45:c4: 6e:1d:83:98:3b:1d:59:61:d3:ab:65:6d:d5:62:d6: 76:80:6b:dc:ca:f6:2a:ea:dc:0b:43:97:bb:91:55: 95:1a:c6:18:10:a4:45:7f:86:6f:c2:25:aa:fc:28: 2c:a9:f6:97:de:13:88:fc:c5:b7:6d:5e:00:4c:7e: 8e:d7:ca:88:ca:d2:7e:9a:28:89:a5:ec:f0:1e:1a: f3:64:cb:0a:74:fe:a8:2b:dd:1a:b6:e1:f4:16:d0: a2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C5:FD:04:12:31:68:CD:91:B4:74:24:EA:A8:9E:65:A7:9F:16:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72dad931-531b-3c0e-9ce1-e490813e9731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a3:c8:68:c8:72:fd:17:1c:5a:43:19:81:8e:6c:0e:7c:68: de:39:34:4d:ae:41:01:5a:2c:a6:fe:26:1c:54:80:0f:5e:6b: da:c7:9f:fd:23:4b:5a:3d:d9:21:5e:50:5d:cf:09:4e:f8:6b: 6b:e8:df:e7:12:57:f6:23:db:1b:58:d8:ea:d0:4f:1d:ef:c6: 46:ae:a0:b7:13:d4:04:9c:6c:6f:42:9c:b4:17:b6:15:4e:b2: 74:2f:6e:cc:bf:28:eb:2e:7a:14:96:0e:4d:ba:c8:35:09:5c: f5:fa:82:17:45:df:0c:a9:d4:aa:c2:5d:52:53:48:b2:3d:5b: 75:25:27:c3:66:43:bd:23:9b:59:26:f4:5d:bd:10:92:8d:fb: 85:25:13:05:92:64:35:e6:70:89:fb:ba:0e:fe:e8:09:67:e6: 1a:67:ff:3d:0b:27:a7:5b:9f:73:22:26:2d:c5:a4:15:d2:c1: 4a:f7:6e:18:69:39:16:b2:ce:0c:40:4f:dd:51:9e:39:04:76: 6e:40:f8:75:00:fd:82:4d:90:43:57:b6:0a:81:23:a4:89:7c: c7:66:ee:d7:3d:a0:41:5e:34:ef:92:18:02:5c:6e:13:ec:d7: 78:7e:d9:8d:a9:72:31:50:56:85:fc:b7:01:2b:51:34:70:ba: 6c:6d:44:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFts9eob74cOj9m0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk OTZhMTY1MGItOWYxYi00NDQ5LWIwYTYtYTE0ZWNjZGEyYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMsU7XTSn3UtWBMHCIn5flOAbXAOZhlW/jTr lfpwRQzbczVYRAbjNvKGGdTSv4q7N8fQRzeCxATw2odXquJOgFzrGeoXSfHWJ6/B PWNAVseAQ7Ho7fB21gl3cr1VGo/VUtSzSixIK726MTBGD7YxMjdEBWN/uOf4Y7wE 9YdTcroDx3R1L/gunoeEjeFVUFunS7PSEJBn2JjMa4+fvWXSyd2QRcRuHYOYOx1Z YdOrZW3VYtZ2gGvcyvYq6twLQ5e7kVWVGsYYEKRFf4ZvwiWq/CgsqfaX3hOI/MW3 bV4ATH6O18qIytJ+miiJpezwHhrzZMsKdP6oK90atuH0FtCilQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjF/QQSMWjNkbR0JOqonmWnnxa0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzJkYWQ5MzEtNTMxYi0z YzBlLTljZTEtZTQ5MDgxM2U5NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSjyGjIcv0XHFpDGYGObA58aN45NE2uQQFaLKb+JhxUgA9ea9rHn/0j S1o92SFeUF3PCU74a2vo3+cSV/Yj2xtY2OrQTx3vxkauoLcT1AScbG9CnLQXthVO snQvbsy/KOsuehSWDk26yDUJXPX6ghdF3wyp1KrCXVJTSLI9W3UlJ8NmQ70jm1km 9F29EJKN+4UlEwWSZDXmcIn7ug7+6Aln5hpn/z0LJ6dbn3MiJi3FpBXSwUr3bhhp ORayzgxAT91RnjkEdm5A+HUA/YJNkENXtgqBI6SJfMdm7tc9oEFeNO+SGAJcbhPs 13h+2Y2pcjFQVoX8twErUTRwumxtRC0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:23:14 2025 by rpki-client