$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8849c24d-0e16-3e04-b4cc-e2d5a278f957.roa File: 8849c24d-0e16-3e04-b4cc-e2d5a278f957.roa (raw, json) Hash identifier: pH6kmUR35DGNhJyoYwCGDT1GhtB9iWt6G0FhufRXJgI= Subject key identifier: 62:F3:5A:8D:07:52:C3:4E:55:B5:A9:92:AF:05:73:A3:C2:87:DA:1D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BF729EA641BF9044D60C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8849c24d-0e16-3e04-b4cc-e2d5a278f957.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.71.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f7:29:ea:64:1b:f9:04:4d:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=b8dacdc6-6adf-40dc-9975-bf4b72471b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:3b:53:b5:1d:de:53:a6:a1:e4:15:c3:56: 77:d9:6c:1a:d2:67:21:c0:ab:3f:e8:fe:23:b5:41: 1a:e6:c0:8c:25:21:e4:37:32:e9:28:f5:87:69:7b: 8f:79:eb:31:5f:99:05:b5:0f:88:42:ee:0c:08:de: 30:c6:0a:85:00:39:5d:2c:35:25:92:bf:69:33:ce: c3:d1:b8:9a:11:d1:6a:5a:4e:fb:8c:dd:80:78:17: 2b:df:2e:1a:a4:5b:57:dc:f9:d7:95:bf:62:71:04: 84:b1:22:2a:34:58:6a:62:1e:40:84:31:53:e5:73: 39:a6:53:6d:2e:2b:66:38:fa:2f:51:41:39:10:c9: 77:b0:42:f8:5b:b8:3c:70:b2:93:94:4e:f9:5b:85: 10:43:91:05:15:a5:bb:33:fb:a8:2b:21:d2:fe:e6: 8b:c8:20:03:05:db:21:c4:51:e2:ff:54:9b:34:1a: 3b:25:07:3d:62:c4:42:50:bb:27:5e:9a:f2:28:8b: ff:ca:ae:46:93:21:25:4e:f2:e7:dd:4b:36:42:f7: bd:08:11:50:a2:73:d4:29:31:c0:8e:7e:c6:52:cf: 1b:9a:58:ee:91:ee:fd:84:c5:01:71:0e:d8:59:a9: ad:a0:95:3e:7d:63:29:77:06:a3:8b:47:e7:69:de: b6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F3:5A:8D:07:52:C3:4E:55:B5:A9:92:AF:05:73:A3:C2:87:DA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8849c24d-0e16-3e04-b4cc-e2d5a278f957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5a:ce:4d:5c:75:31:df:c1:1d:67:00:05:f5:5c:b3:dd:65: ea:47:c1:13:c1:2a:f8:45:4c:04:94:f3:b8:20:47:4f:c4:18: a4:1b:d7:c4:22:db:6e:49:a5:cc:46:3d:c2:5b:af:11:9f:c6: 73:01:d9:93:19:1d:07:ad:ae:f0:b1:f6:a6:cd:22:18:19:60: 85:54:2b:5a:16:15:2c:f4:54:15:0f:d8:0f:09:14:27:c0:f2: e7:9e:a5:42:cf:cf:eb:5f:8d:65:c9:88:bf:4d:65:ef:9a:14: e7:a1:0e:6d:2f:8e:f5:24:a7:09:b8:75:f5:0f:9a:11:66:20: 2c:65:8d:c2:35:2f:9f:8d:6a:8e:e3:b3:4d:5f:8e:d8:b2:f3: e0:3b:27:eb:ab:2e:0a:df:30:dc:86:90:42:0f:10:9e:05:65: 46:21:08:78:ee:ca:21:c2:48:9d:1d:15:9d:5d:1d:0b:9f:31: 76:ed:53:a0:80:76:19:43:d9:90:7b:7d:78:b1:41:96:28:e1: 78:49:7d:61:6a:5d:7d:47:26:10:2d:bb:1f:64:c9:db:33:e0: 95:e2:a0:61:e7:ac:fb:12:61:77:73:be:05:38:f0:cd:0d:98: 4b:42:90:28:14:a3:4f:02:ed:b0:c6:74:9d:c7:6c:cf:c4:da: 9a:3a:75:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/cp6mQb+QRNYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk YjhkYWNkYzYtNmFkZi00MGRjLTk5NzUtYmY0YjcyNDcxYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kk7U7Ud3lOmoeQVw1Z32Wwa0mchwKs/6P4j tUEa5sCMJSHkNzLpKPWHaXuPeesxX5kFtQ+IQu4MCN4wxgqFADldLDUlkr9pM87D 0biaEdFqWk77jN2AeBcr3y4apFtX3PnXlb9icQSEsSIqNFhqYh5AhDFT5XM5plNt LitmOPovUUE5EMl3sEL4W7g8cLKTlE75W4UQQ5EFFaW7M/uoKyHS/uaLyCADBdsh xFHi/1SbNBo7JQc9YsRCULsnXpryKIv/yq5GkyElTvLn3Us2Qve9CBFQonPUKTHA jn7GUs8bmljuke79hMUBcQ7YWamtoJU+fWMpdwaji0fnad62gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLzWo0HUsNOVbWpkq8Fc6PCh9odMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODg0OWMyNGQtMGUxNi0z ZTA0LWI0Y2MtZTJkNWEyNzhmOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBazk1cdTHfwR1nAAX1XLPdZepHwRPBKvhFTASU87ggR0/EGKQb18Qi 225JpcxGPcJbrxGfxnMB2ZMZHQetrvCx9qbNIhgZYIVUK1oWFSz0VBUP2A8JFCfA 8ueepULPz+tfjWXJiL9NZe+aFOehDm0vjvUkpwm4dfUPmhFmICxljcI1L5+Nao7j s01fjtiy8+A7J+urLgrfMNyGkEIPEJ4FZUYhCHjuyiHCSJ0dFZ1dHQufMXbtU6CA dhlD2ZB7fXixQZYo4XhJfWFqXX1HJhAtux9kydsz4JXioGHnrPsSYXdzvgU48M0N mEtCkCgUo08C7bDGdJ3HbM/E2po6dSI= -----END CERTIFICATE-----Generated at Sat Apr 5 08:49:59 2025 by rpki-client