$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78ef5081-df1f-3c6f-be27-1cd9e1d5c610.roa File: 78ef5081-df1f-3c6f-be27-1cd9e1d5c610.roa (raw, json) Hash identifier: KiMZrtBs/AmOU+mEKYftT9BTlBrq2DU6tfYeq1SFRXs= Subject key identifier: CA:39:E7:B9:E9:E3:FA:95:F2:E6:EB:B1:17:9C:C4:86:32:42:E8:44 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8EC9A6FFAECDC6B29800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78ef5081-df1f-3c6f-be27-1cd9e1d5c610.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8e:c9:a6:ff:ae:cd:c6:b2:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=13ca92a6-fd00-4362-b5cb-d327df2b1545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1c:41:8a:63:c0:a0:33:1b:f0:7e:eb:1d:ee: 7d:9f:b3:f2:a7:86:39:a4:b4:38:f3:09:82:58:ee: aa:9b:4e:92:50:40:00:37:e4:ce:6a:fc:d6:9a:2e: fb:66:26:dc:51:bc:d6:48:31:fa:09:27:8d:6e:e3: b1:6c:4a:91:48:3c:04:93:f9:61:2b:d7:69:9c:1b: 93:91:da:30:f5:fb:89:a9:17:dc:67:ad:25:d2:27: 90:1a:16:49:8c:99:5e:5d:57:2a:37:4f:b6:10:3e: 31:79:22:c7:17:ae:2d:19:2c:38:eb:49:3d:b1:0a: a0:3d:d1:1c:7f:03:83:96:a7:7c:a3:b1:25:7a:bf: ec:e2:25:ce:91:68:46:f2:20:af:21:97:83:77:fa: b8:dd:45:16:d5:b6:18:be:53:b9:03:c9:05:90:ff: ae:c0:1c:15:32:7f:70:08:04:0c:30:30:b3:41:1c: 5d:8f:ab:38:1e:dd:5b:d9:e2:f6:89:d9:9e:97:e3: 1c:a7:49:38:63:65:8c:82:5f:bb:f6:75:c4:59:90: f5:86:86:76:0a:94:b4:30:66:3e:c1:84:09:2f:79: 01:7c:ff:8d:a7:d9:13:19:5a:6c:dc:07:18:84:84: 58:4a:c3:a8:31:51:e0:d7:5a:70:3a:6f:8d:ea:ec: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:39:E7:B9:E9:E3:FA:95:F2:E6:EB:B1:17:9C:C4:86:32:42:E8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78ef5081-df1f-3c6f-be27-1cd9e1d5c610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4f:4e:65:75:2d:05:57:05:d6:11:11:24:3b:9c:20:48:7a: a1:22:fa:1e:87:05:4d:2c:de:e6:aa:86:96:f3:1b:ba:4d:5c: ea:f3:fa:3d:f1:5b:a1:96:b1:76:63:36:64:72:1f:8c:b4:97: 25:5b:b6:c1:6f:29:97:58:85:24:2f:a1:89:7d:9f:03:24:a0: 2f:1d:b3:c6:eb:23:00:94:b6:45:7a:07:b9:37:4d:8b:93:31: a0:f9:c7:17:85:97:a6:3d:0b:c2:86:c7:7b:40:64:e6:ef:e7: e7:99:b5:5e:d3:5e:65:a4:c1:52:9b:c8:4d:ea:eb:b7:0c:2d: eb:26:8c:94:9d:8a:87:2f:73:51:ee:43:4d:bb:1f:37:9e:ce: a6:3f:3f:90:94:0d:cc:83:a7:f0:80:b6:1d:d5:d7:f4:04:6d: d3:97:30:18:1c:09:a5:7c:58:07:30:45:b8:09:c9:f2:0d:c9: eb:19:32:28:1b:68:4e:51:49:fd:44:5a:96:98:7a:6a:fa:ce: 1e:b6:43:b2:15:1f:55:d3:b0:9e:3c:de:04:36:ef:7e:57:ba: 82:f1:e5:42:cb:3d:f2:33:90:3d:df:52:f7:9d:15:df:ab:42: 3b:a3:fd:84:4c:f9:cf:d1:f3:c7:ca:e6:ec:71:7a:fc:03:e1: c5:11:aa:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo7Jpv+uzcaymAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MTNjYTkyYTYtZmQwMC00MzYyLWI1Y2ItZDMyN2RmMmIxNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xxBimPAoDMb8H7rHe59n7Pyp4Y5pLQ48wmC WO6qm06SUEAAN+TOavzWmi77ZibcUbzWSDH6CSeNbuOxbEqRSDwEk/lhK9dpnBuT kdow9fuJqRfcZ60l0ieQGhZJjJleXVcqN0+2ED4xeSLHF64tGSw460k9sQqgPdEc fwODlqd8o7Eler/s4iXOkWhG8iCvIZeDd/q43UUW1bYYvlO5A8kFkP+uwBwVMn9w CAQMMDCzQRxdj6s4Ht1b2eL2idmel+Mcp0k4Y2WMgl+79nXEWZD1hoZ2CpS0MGY+ wYQJL3kBfP+Np9kTGVps3AcYhIRYSsOoMVHg11pwOm+N6uy5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo557np4/qV8ubrsRecxIYyQuhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzhlZjUwODEtZGYxZi0z YzZmLWJlMjctMWNkOWUxZDVjNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpPTmV1LQVXBdYRESQ7nCBIeqEi+h6HBU0s3uaqhpbzG7pNXOrz+j3x W6GWsXZjNmRyH4y0lyVbtsFvKZdYhSQvoYl9nwMkoC8ds8brIwCUtkV6B7k3TYuT MaD5xxeFl6Y9C8KGx3tAZObv5+eZtV7TXmWkwVKbyE3q67cMLesmjJSdiocvc1Hu Q027HzeezqY/P5CUDcyDp/CAth3V1/QEbdOXMBgcCaV8WAcwRbgJyfINyesZMigb aE5RSf1EWpaYemr6zh62Q7IVH1XTsJ483gQ2735XuoLx5ULLPfIzkD3fUvedFd+r Qjuj/YRM+c/R88fK5uxxevwD4cURqu8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:29 2025 by rpki-client