$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91312105-e616-3a60-90b9-47e7f5bddb3e.roa File: 91312105-e616-3a60-90b9-47e7f5bddb3e.roa (raw, json) Hash identifier: XSrOj5XgmQf9kOEj9oDslLIPhIy6MvB88NWkPT9Fan0= Subject key identifier: 9F:DD:72:B9:72:37:A4:DB:CE:D7:52:6C:D7:93:57:1C:64:82:CA:6C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8DDDD3B00DE316C5BD00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91312105-e616-3a60-90b9-47e7f5bddb3e.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8d:dd:d3:b0:0d:e3:16:c5:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=43726513-7c50-4c87-b45c-490262e6e9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:8b:43:7c:5a:19:2a:39:98:b5:6a:30:a5: 7f:75:cd:e5:21:dc:e1:ca:0c:d8:87:ff:f5:e7:59: 72:6d:df:f9:b3:04:d7:46:9c:5a:44:66:1f:56:ed: 19:2f:d6:95:fd:ec:90:c9:8d:bd:d1:b0:b1:3e:d3: a8:6d:5d:f1:7e:2d:b5:24:7a:58:5c:cd:3c:a3:33: 1c:c8:fb:da:13:fd:b3:b8:4e:5b:dc:1b:89:28:98: 59:95:b8:5e:11:08:36:52:0f:2d:4a:70:1f:84:9c: 1b:d2:63:b2:df:8c:52:56:eb:14:56:a7:4f:e0:f6: 0d:3b:df:e2:4f:44:32:c1:fb:9f:9e:e5:31:92:c8: e8:3b:0f:eb:1c:f7:4c:09:af:c7:88:8c:8b:76:c5: 9d:20:99:73:43:91:21:ed:11:54:03:d2:14:05:6e: 05:e8:c5:26:82:34:87:5b:f7:9c:df:50:1c:93:9a: 6e:04:ba:fb:49:92:74:49:77:f7:8e:fb:b4:35:a8: a6:58:eb:8a:c2:7f:97:37:23:cc:e8:e2:40:d3:0e: 4e:00:af:0b:5e:87:e7:cf:36:09:e3:b1:68:92:42: 04:22:d0:d3:ec:d6:a7:cb:58:eb:bb:33:09:12:c7: 1e:9a:81:bc:ff:60:e9:aa:99:ba:c1:4f:e3:d1:20: aa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DD:72:B9:72:37:A4:DB:CE:D7:52:6C:D7:93:57:1C:64:82:CA:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/91312105-e616-3a60-90b9-47e7f5bddb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:25:05:45:c1:d7:ba:11:49:c1:7f:e4:38:44:da:b9:c6:e0: c8:52:97:26:e9:2a:5e:08:07:42:4b:3a:c1:ce:fd:f2:f7:2f: e5:bc:f3:41:ea:94:ed:60:e3:b6:bd:67:e9:e8:7e:cb:d4:5c: 72:4d:40:7a:93:9d:7f:93:4e:bf:61:9a:57:57:c0:a8:0c:56: fc:f0:2e:2b:7d:c2:a4:9e:72:7c:d7:df:11:0e:75:5d:2e:2b: a8:b8:ce:b9:66:d2:62:ef:f0:9e:6b:0f:2c:8b:6a:e2:bf:0f: 47:68:9a:f4:b8:a6:74:ab:42:7b:5d:92:40:55:b9:38:37:22: d6:97:16:e4:c9:3d:a3:29:78:d6:ae:87:49:dd:90:3a:56:c4: cf:ac:4e:bb:aa:a8:d5:e2:ea:52:07:7c:d8:57:2d:16:84:92: 52:4b:6e:cf:f2:19:0b:1d:b9:d1:b7:ea:96:b4:d9:5b:74:fd: 7f:06:4f:9c:9b:a3:69:4a:11:60:97:03:fd:98:e5:83:4c:c4: 10:1d:1c:a4:bc:cb:ec:63:7c:dd:1d:2f:16:da:ad:e6:58:84: a2:d4:e5:94:2b:a5:29:c8:23:e4:1b:38:64:ff:60:75:98:f3: 70:7e:92:c6:a3:d9:29:35:a0:29:45:01:e0:43:fd:c3:31:04: 15:25:d2:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo3d07AN4xbFvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NDM3MjY1MTMtN2M1MC00Yzg3LWI0NWMtNDkwMjYyZTZlOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriaLQ3xaGSo5mLVqMKV/dc3lIdzhygzYh//1 51lybd/5swTXRpxaRGYfVu0ZL9aV/eyQyY290bCxPtOobV3xfi21JHpYXM08ozMc yPvaE/2zuE5b3BuJKJhZlbheEQg2Ug8tSnAfhJwb0mOy34xSVusUVqdP4PYNO9/i T0QywfufnuUxksjoOw/rHPdMCa/HiIyLdsWdIJlzQ5Eh7RFUA9IUBW4F6MUmgjSH W/ec31Ack5puBLr7SZJ0SXf3jvu0NaimWOuKwn+XNyPM6OJA0w5OAK8LXofnzzYJ 47FokkIEItDT7Nany1jruzMJEscemoG8/2Dpqpm6wU/j0SCq7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/dcrlyN6TbztdSbNeTVxxkgspsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTEzMTIxMDUtZTYxNi0z YTYwLTkwYjktNDdlN2Y1YmRkYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACslBUXB17oRScF/5DhE2rnG4MhSlybpKl4IB0JLOsHO/fL3L+W880Hq lO1g47a9Z+nofsvUXHJNQHqTnX+TTr9hmldXwKgMVvzwLit9wqSecnzX3xEOdV0u K6i4zrlm0mLv8J5rDyyLauK/D0domvS4pnSrQntdkkBVuTg3ItaXFuTJPaMpeNau h0ndkDpWxM+sTruqqNXi6lIHfNhXLRaEklJLbs/yGQsdudG36pa02Vt0/X8GT5yb o2lKEWCXA/2Y5YNMxBAdHKS8y+xjfN0dLxbareZYhKLU5ZQrpSnII+QbOGT/YHWY 83B+ksaj2Sk1oClFAeBD/cMxBBUl0kM= -----END CERTIFICATE-----Generated at Sat Jun 7 19:49:21 2025 by rpki-client