$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90d1fac8-d34b-3c7b-852e-951b6215c0ca.roa File: 90d1fac8-d34b-3c7b-852e-951b6215c0ca.roa (raw, json) Hash identifier: g0GcC2o2j7JH4QBrb3rcmQQv1ws0yLfnzqbjAxiw9F0= Subject key identifier: 31:14:0F:C6:F5:81:2D:E4:2B:FE:A7:8D:8D:0B:B6:E9:8E:B5:FC:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BF50AC03A0A2EB5BCE100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90d1fac8-d34b-3c7b-852e-951b6215c0ca.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.71.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f5:0a:c0:3a:0a:2e:b5:bc:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=c1dd012a-222a-4f2e-994a-b9b2a3b7f0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8d:7f:b5:a5:05:e2:b6:5e:de:9c:cf:bf:cb: 81:4d:90:4d:2e:a0:6d:7e:9f:2a:36:14:1e:ff:64: a6:ea:42:2e:cd:55:31:c7:7b:4a:13:92:75:32:03: 54:9e:6e:44:dd:4a:c5:eb:b1:3b:b5:72:82:39:a1: 25:2b:1d:e9:70:af:24:2c:a7:2b:e9:61:64:26:e7: 23:cd:90:d6:a4:54:b4:e6:7b:3d:e7:70:44:a2:01: 63:cc:ba:d4:3b:03:38:08:27:f1:04:ff:02:b1:de: e3:dc:4c:cd:4c:03:78:45:04:cd:28:53:5c:b2:df: 97:8d:58:a3:d0:0f:2f:c1:7b:87:d5:c1:c7:27:ef: 6f:a3:e1:82:1b:07:2a:85:15:0d:e9:84:b1:02:4b: d5:2d:df:54:97:4b:be:96:89:2c:df:d9:4b:bc:39: 6c:a5:ec:8f:56:84:b3:79:bd:22:72:fb:a6:e2:61: 8c:95:77:9f:bc:0e:9a:ab:61:45:2b:de:ad:90:8b: cf:a5:69:98:53:2b:49:5f:8d:5d:7f:7a:8f:53:fe: 2d:e0:03:2f:84:48:ba:0f:fc:37:28:5c:d8:34:0d: 77:09:dc:21:e4:d7:7b:48:02:83:20:aa:8f:54:1a: 3d:5c:02:11:b5:8f:54:86:2d:c5:a7:4c:a1:15:3f: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:14:0F:C6:F5:81:2D:E4:2B:FE:A7:8D:8D:0B:B6:E9:8E:B5:FC:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90d1fac8-d34b-3c7b-852e-951b6215c0ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:10:ca:cb:e7:f6:3a:e8:63:0b:25:15:0b:de:a3:8a:bd:ee: bc:d0:7e:20:e0:5c:43:6b:77:6f:89:12:88:42:17:c6:7f:2d: c3:45:0e:d2:b4:c6:5e:66:18:f9:91:e0:75:d3:ef:bf:bb:00: 56:30:74:a8:42:7c:a8:0b:1a:60:7b:db:af:e7:d8:2f:c2:d6: c5:8c:49:53:be:9d:43:23:62:c4:35:b3:5f:6f:7b:20:00:37: 6c:a5:90:17:ed:8d:46:c9:58:fc:a4:a2:61:d6:28:40:5c:a7: 89:a7:f0:86:0b:ed:a0:7e:1c:36:f6:d1:52:d5:68:c7:3d:18: 6c:52:4d:07:ce:6d:d0:33:fa:06:65:ec:9f:94:8b:21:bc:1a: f8:69:b8:d4:59:2e:a5:c1:b0:05:ed:18:41:e8:13:d0:33:81: 5d:97:37:35:30:1b:e9:a6:c4:62:af:85:f8:e0:11:63:42:8d: ec:05:58:75:d4:fa:78:79:52:58:f9:a1:8a:34:65:34:9d:4b: 86:e8:a1:7e:3b:09:02:b2:15:98:ef:4e:3b:5e:5b:50:30:7e: 71:d8:8a:bf:7d:2d:41:8d:50:0a:64:01:ca:0e:d9:b2:b3:76: 6d:5a:fa:2e:88:8e:16:52:80:38:f8:1a:80:b9:cf:ab:ae:dd: ee:91:f0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/UKwDoKLrW84QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk YzFkZDAxMmEtMjIyYS00ZjJlLTk5NGEtYjliMmEzYjdmMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio1/taUF4rZe3pzPv8uBTZBNLqBtfp8qNhQe /2Sm6kIuzVUxx3tKE5J1MgNUnm5E3UrF67E7tXKCOaElKx3pcK8kLKcr6WFkJucj zZDWpFS05ns953BEogFjzLrUOwM4CCfxBP8Csd7j3EzNTAN4RQTNKFNcst+XjVij 0A8vwXuH1cHHJ+9vo+GCGwcqhRUN6YSxAkvVLd9Ul0u+loks39lLvDlspeyPVoSz eb0icvum4mGMlXefvA6aq2FFK96tkIvPpWmYUytJX41df3qPU/4t4AMvhEi6D/w3 KFzYNA13Cdwh5Nd7SAKDIKqPVBo9XAIRtY9Uhi3Fp0yhFT82YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEUD8b1gS3kK/6njY0LtumOtfy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTBkMWZhYzgtZDM0Yi0z YzdiLTg1MmUtOTUxYjYyMTVjMGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYQysvn9jroYwslFQveo4q97rzQfiDgXENrd2+JEohCF8Z/LcNFDtK0 xl5mGPmR4HXT77+7AFYwdKhCfKgLGmB726/n2C/C1sWMSVO+nUMjYsQ1s19veyAA N2ylkBftjUbJWPykomHWKEBcp4mn8IYL7aB+HDb20VLVaMc9GGxSTQfObdAz+gZl 7J+UiyG8GvhpuNRZLqXBsAXtGEHoE9AzgV2XNzUwG+mmxGKvhfjgEWNCjewFWHXU +nh5Ulj5oYo0ZTSdS4booX47CQKyFZjvTjteW1AwfnHYir99LUGNUApkAcoO2bKz dm1a+i6IjhZSgDj4GoC5z6uu3e6R8Cg= -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:06 2025 by rpki-client