$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cfdd889-e994-345d-823c-e2688cee7aca.roa File: 8cfdd889-e994-345d-823c-e2688cee7aca.roa (raw, json) Hash identifier: PBobdeSWUJAYVtD96tDKbnSeYq/dWXzhNu3pbyZwKgU= Subject key identifier: 50:2C:3D:3E:FE:D6:BA:51:6C:B2:14:ED:63:AB:54:E2:18:8C:AA:41 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8D8D08FBA5BE53BD5F40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cfdd889-e994-345d-823c-e2688cee7aca.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8d:8d:08:fb:a5:be:53:bd:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=5e7d50ee-5252-4a44-a4ae-35226d32ffc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f0:5b:8d:55:83:e7:9d:ca:bc:72:10:56:07: be:24:5e:19:c7:67:90:77:4e:19:9e:50:c7:d8:4d: 5c:8e:b4:91:3f:cd:34:9f:4c:c9:65:51:06:93:37: 11:f0:b7:77:e2:24:77:52:d4:cc:6e:68:59:72:4e: 60:07:28:b6:fa:ea:ee:c9:fd:ad:39:81:bd:39:fa: 6f:97:4c:ef:4d:b2:8d:b8:b5:34:08:68:f2:a6:51: 1a:84:38:20:52:aa:ea:61:30:4a:97:e8:e2:38:53: d9:5e:3c:ed:dc:11:fd:46:2d:4f:61:db:a0:9f:27: 52:88:b2:d7:48:82:ad:2e:01:51:62:d7:4e:00:e1: bd:81:c5:d5:9a:ce:c4:36:06:8b:47:55:8f:9b:ce: f7:db:f9:aa:b3:d8:5d:d5:fc:3f:6d:00:ca:0a:47: 78:f1:e0:71:19:74:b7:6e:b8:00:58:d4:a7:45:01: b8:32:28:a2:db:69:0b:8f:c4:04:07:40:78:c3:bd: 0c:79:eb:7e:8d:d1:da:85:af:56:23:cb:ed:78:9a: 47:b3:89:1c:08:5f:f2:e6:06:5e:19:cf:2c:cd:f6: 9c:73:22:c4:d4:2f:34:7e:79:5a:ee:22:5a:29:dc: 19:a6:d2:b0:a1:77:79:06:74:88:51:1f:aa:1d:d8: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:3D:3E:FE:D6:BA:51:6C:B2:14:ED:63:AB:54:E2:18:8C:AA:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8cfdd889-e994-345d-823c-e2688cee7aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:70:97:2d:02:b0:bd:49:a6:bb:c7:7a:f2:cf:47:00:d5:72: 1e:c6:ff:04:a4:bf:00:4c:4b:00:46:5f:00:87:74:dd:db:30: c3:47:e4:e7:c0:1b:bc:ea:b3:24:03:5e:ce:f4:6e:42:3b:d1: 2d:94:4b:30:25:2d:5c:6c:79:6c:5b:6e:95:b0:c5:ec:ed:98: a8:a3:ee:01:5e:52:17:84:4c:79:24:89:ea:2c:c3:9d:5b:32: 80:ba:75:02:18:aa:f7:9d:02:90:e4:e7:25:2a:c9:7e:8e:2e: f9:61:4e:51:74:23:52:fd:a4:6c:70:9d:7a:f9:89:a7:a9:74: 4b:f6:1d:62:b7:08:92:1a:ea:b2:92:d5:b3:4d:73:30:bc:ca: 4d:50:cf:8e:36:5c:8f:ff:82:6c:ae:b4:19:7a:23:fb:f0:11: d5:49:e0:08:7f:09:88:c6:6e:31:ab:e3:29:f2:c3:ce:ff:c2: c4:c4:30:5b:74:46:a0:6b:36:f2:9f:62:e8:1c:9a:62:0d:fe: 11:f7:6c:98:96:44:44:78:63:76:2c:4b:58:cb:02:10:20:43: 08:93:c6:b5:60:21:96:af:77:bf:86:a0:50:78:1f:d3:27:08: ed:75:6b:8b:28:47:7b:03:26:29:63:b0:07:53:bf:1a:30:c2: 98:a0:17:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo2NCPulvlO9X0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NWU3ZDUwZWUtNTI1Mi00YTQ0LWE0YWUtMzUyMjZkMzJmZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfBbjVWD553KvHIQVge+JF4Zx2eQd04ZnlDH 2E1cjrSRP800n0zJZVEGkzcR8Ld34iR3UtTMbmhZck5gByi2+uruyf2tOYG9Ofpv l0zvTbKNuLU0CGjyplEahDggUqrqYTBKl+jiOFPZXjzt3BH9Ri1PYdugnydSiLLX SIKtLgFRYtdOAOG9gcXVms7ENgaLR1WPm8732/mqs9hd1fw/bQDKCkd48eBxGXS3 brgAWNSnRQG4Miii22kLj8QEB0B4w70Meet+jdHaha9WI8vteJpHs4kcCF/y5gZe Gc8szfaccyLE1C80fnla7iJaKdwZptKwoXd5BnSIUR+qHdg2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAsPT7+1rpRbLIU7WOrVOIYjKpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGNmZGQ4ODktZTk5NC0z NDVkLTgyM2MtZTI2ODhjZWU3YWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFwly0CsL1JprvHevLPRwDVch7G/wSkvwBMSwBGXwCHdN3bMMNH5OfA G7zqsyQDXs70bkI70S2USzAlLVxseWxbbpWwxeztmKij7gFeUheETHkkieosw51b MoC6dQIYqvedApDk5yUqyX6OLvlhTlF0I1L9pGxwnXr5iaepdEv2HWK3CJIa6rKS 1bNNczC8yk1Qz442XI//gmyutBl6I/vwEdVJ4Ah/CYjGbjGr4ynyw87/wsTEMFt0 RqBrNvKfYugcmmIN/hH3bJiWRER4Y3YsS1jLAhAgQwiTxrVgIZavd7+GoFB4H9Mn CO11a4soR3sDJiljsAdTvxowwpigF8E= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:22 2025 by rpki-client