$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa File: 94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa (raw, json) Hash identifier: Ck3SozFA4pNWheluzqNaUP4pJa7UAqTOkCZ25KS9JDc= Subject key identifier: CF:0E:5C:55:AC:7A:4F:92:40:EA:B1:07:B7:9C:B3:42:F3:18:61:10 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A9833CA85EF3A40D16A20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:98:33:ca:85:ef:3a:40:d1:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=5eadf9c8-46c2-4990-98d7-5e85e7f2ec36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d6:65:5d:dd:ed:8e:4a:7a:75:e7:60:46:8a: f7:de:f0:08:b3:13:c5:7e:a1:26:5e:fa:4c:dc:99: bd:5c:10:cd:a5:04:57:cd:55:29:04:87:f0:cf:30: b0:5d:d2:47:48:6a:dc:1a:cc:fb:a7:70:9e:06:f3: 3e:b3:00:05:10:c8:a7:ee:c8:55:7f:12:83:38:f4: a7:31:68:01:9c:a7:de:7c:18:fd:02:cc:ec:02:32: 31:64:65:3e:10:f1:8c:79:02:42:f7:7a:c5:8f:ba: 3b:f2:20:f0:be:78:78:d9:eb:28:01:33:f7:b6:f5: 0d:cb:3c:f2:90:d1:c5:05:f3:34:2f:ff:1a:b8:4c: e2:59:d9:0a:38:00:6c:7b:99:c4:c1:af:a2:6e:63: 33:b6:a3:a5:1d:e7:fa:46:c0:32:2d:1f:08:eb:3e: 1c:ea:12:31:f4:9a:0c:64:aa:f7:64:ce:c3:7c:3e: d1:60:4a:5e:70:fc:77:e0:94:59:e8:b3:dd:e7:a6: 12:d0:20:d2:94:bc:3a:df:c6:32:7e:3b:cb:b5:ea: f8:81:33:08:9b:4a:f8:07:54:0b:ed:0c:d0:32:15: d4:af:b3:5e:85:3a:5a:85:21:a0:7c:9e:2c:68:a0: 88:a0:20:dd:18:cf:96:59:ed:5e:e1:17:e2:39:75: d6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0E:5C:55:AC:7A:4F:92:40:EA:B1:07:B7:9C:B3:42:F3:18:61:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/94d34060-7e90-37ef-b43e-f385f7e8b0cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:47:ff:55:f3:77:4e:23:c9:65:a2:2e:af:e8:b3:b6:a0:0f: 01:5d:f4:a5:db:a4:32:14:35:7b:cf:3a:44:55:12:60:fa:fb: 03:70:8b:f9:0b:40:34:03:bb:05:13:14:90:b2:da:41:39:73: 7e:32:11:f4:a5:28:ab:7c:c4:4a:92:21:cb:59:46:88:66:11: 68:47:5f:5f:49:c1:30:8d:46:50:2c:b8:c4:22:86:ea:96:6c: ad:5e:8b:e5:c1:01:1b:94:64:21:ac:9f:64:e2:0d:a0:02:64: ab:56:48:ed:36:ae:71:6a:38:9b:c3:93:87:77:ba:b9:5e:a0: 17:60:45:12:9a:62:0c:8d:51:8a:2a:89:22:ca:51:d7:31:ff: aa:28:01:0f:6b:d1:21:74:8e:f8:b4:71:00:28:c9:56:46:ac: c6:2f:f7:3b:e0:7b:d3:67:dc:94:a9:09:c3:2a:52:22:5f:f8: 38:c8:d2:7c:4f:4a:8c:19:ba:ef:36:14:13:66:48:dc:e7:c4: 82:fe:1f:77:8f:f1:f6:bb:a6:ee:cd:2e:e0:f6:bf:4c:ad:d8: 89:31:ec:67:69:f8:00:a9:d2:54:bf:27:c6:73:5a:c8:a7:9f: 1a:04:4d:b1:0a:c0:c9:92:cc:15:46:8d:5b:c3:10:c8:be:97: 8c:cb:e7:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpgzyoXvOkDRaiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NWVhZGY5YzgtNDZjMi00OTkwLTk4ZDctNWU4NWU3ZjJlYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNZlXd3tjkp6dedgRor33vAIsxPFfqEmXvpM 3Jm9XBDNpQRXzVUpBIfwzzCwXdJHSGrcGsz7p3CeBvM+swAFEMin7shVfxKDOPSn MWgBnKfefBj9AszsAjIxZGU+EPGMeQJC93rFj7o78iDwvnh42esoATP3tvUNyzzy kNHFBfM0L/8auEziWdkKOABse5nEwa+ibmMztqOlHef6RsAyLR8I6z4c6hIx9JoM ZKr3ZM7DfD7RYEpecPx34JRZ6LPd56YS0CDSlLw638YyfjvLter4gTMIm0r4B1QL 7QzQMhXUr7NehTpahSGgfJ4saKCIoCDdGM+WWe1e4RfiOXXWowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8OXFWsek+SQOqxB7ecs0LzGGEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTRkMzQwNjAtN2U5MC0z N2VmLWI0M2UtZjM4NWY3ZThiMGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlH/1Xzd04jyWWiLq/os7agDwFd9KXbpDIUNXvPOkRVEmD6+wNwi/kL QDQDuwUTFJCy2kE5c34yEfSlKKt8xEqSIctZRohmEWhHX19JwTCNRlAsuMQihuqW bK1ei+XBARuUZCGsn2TiDaACZKtWSO02rnFqOJvDk4d3urleoBdgRRKaYgyNUYoq iSLKUdcx/6ooAQ9r0SF0jvi0cQAoyVZGrMYv9zvge9Nn3JSpCcMqUiJf+DjI0nxP SowZuu82FBNmSNznxIL+H3eP8fa7pu7NLuD2v0yt2Ikx7Gdp+ACp0lS/J8ZzWsin nxoETbEKwMmSzBVGjVvDEMi+l4zL59k= -----END CERTIFICATE-----Generated at Sat Jun 7 12:07:56 2025 by rpki-client