$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/969b0afd-f5de-37f5-8fd2-c4c392870bad.roa File: 969b0afd-f5de-37f5-8fd2-c4c392870bad.roa (raw, json) Hash identifier: GTm+Ppp4TqbkSPadwCMjXUnfIZn4HDHplbbpVrL0+04= Subject key identifier: B2:41:28:52:D2:0D:49:C9:74:D7:22:79:78:31:70:68:F7:79:C1:72 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E174CF3C1C987635035940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/969b0afd-f5de-37f5-8fd2-c4c392870bad.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:74:cf:3c:1c:98:76:35:03:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=f2674a40-8639-4bb1-93fd-15facb358763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:2a:10:28:95:66:fd:24:6b:dd:14:e2:f7: 97:16:42:1d:f8:54:61:b7:33:09:02:f8:f5:e6:71: a4:be:76:b6:31:14:87:99:ad:2a:d8:10:ef:b3:3c: 23:93:c0:ff:9c:16:aa:a4:08:43:04:ad:c4:2b:9a: 56:10:56:f3:af:67:83:4a:a4:ec:1a:3b:02:d8:ba: 58:6c:8f:ce:44:6a:6c:ad:38:17:3f:61:c2:be:f6: 76:4e:c4:c5:2a:5a:5b:64:e2:e9:35:4d:8a:1d:37: 76:05:18:9a:9f:d0:62:90:30:81:7d:07:16:bc:7c: 3a:c1:08:7c:d0:d7:ae:84:9b:32:3f:2e:1d:fe:64: 15:f7:5e:59:74:bb:4b:a7:55:74:d7:22:d3:94:a7: dd:2b:72:2d:ad:65:cb:1f:11:24:de:f2:43:23:84: b5:ed:fd:10:5f:1f:5f:b1:35:6e:da:a1:28:88:d9: 58:3f:17:f3:70:ea:e4:30:d7:8d:29:f3:09:35:de: b7:65:41:ec:f0:89:07:bc:6c:6b:b7:99:9d:77:f2: 49:6c:3d:f2:fa:14:b6:d4:f6:f4:61:36:f8:e6:d0: 91:90:68:a5:b5:a9:13:80:8d:2f:64:10:61:f5:6b: 00:ed:96:62:c6:2f:e0:9e:e7:a7:ab:17:6e:3a:ad: 45:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:41:28:52:D2:0D:49:C9:74:D7:22:79:78:31:70:68:F7:79:C1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/969b0afd-f5de-37f5-8fd2-c4c392870bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ad:b1:c1:a2:12:44:64:03:4e:e3:d9:89:e1:89:e4:a8:c8: 63:0f:29:56:ca:be:f8:fc:e2:dc:32:df:fa:d7:8d:e4:f0:b7: 5c:7c:0e:48:f1:7e:37:32:d3:2f:01:d5:4f:0b:92:75:84:d9: 5f:5a:e4:35:77:63:42:df:8c:fc:1d:ba:2a:36:e4:91:a1:9a: 0d:5a:be:64:83:d3:6a:2a:4b:e2:c0:eb:4e:0b:df:e5:3b:2b: 8c:24:b6:11:45:f0:d3:3d:d5:ec:8e:0f:23:dd:07:97:b5:95: 87:5f:d8:03:04:59:38:3c:23:0e:78:9e:e1:17:6f:09:64:1a: ff:8a:4c:f2:91:a5:ef:d4:38:66:e1:87:71:ed:05:a6:b4:5e: be:8f:41:2f:98:7d:4d:d6:04:36:d9:da:73:9f:5b:6b:84:30: 33:be:7d:0c:ba:c1:35:14:2f:ae:2a:8b:b0:2a:a5:ff:18:07: 77:6c:3f:fc:c1:26:f4:b2:b7:38:47:3b:98:7f:11:2f:85:91: 92:33:64:d2:ae:e2:89:4d:4f:a9:82:17:88:ae:45:80:94:89: 70:77:42:26:45:f2:a1:85:28:a4:60:a6:b9:ab:c6:d6:fb:1c: 14:f9:06:3f:ba:c0:cf:2c:9b:6f:51:df:02:c9:51:e0:b7:e6: a1:93:49:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XTPPByYdjUDWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjI2NzRhNDAtODYzOS00YmIxLTkzZmQtMTVmYWNiMzU4NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKsqECiVZv0ka90U4veXFkId+FRhtzMJAvj1 5nGkvna2MRSHma0q2BDvszwjk8D/nBaqpAhDBK3EK5pWEFbzr2eDSqTsGjsC2LpY bI/ORGpsrTgXP2HCvvZ2TsTFKlpbZOLpNU2KHTd2BRian9BikDCBfQcWvHw6wQh8 0NeuhJsyPy4d/mQV915ZdLtLp1V01yLTlKfdK3ItrWXLHxEk3vJDI4S17f0QXx9f sTVu2qEoiNlYPxfzcOrkMNeNKfMJNd63ZUHs8IkHvGxrt5mdd/JJbD3y+hS21Pb0 YTb45tCRkGiltakTgI0vZBBh9WsA7ZZixi/gnuenqxduOq1FHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJBKFLSDUnJdNcieXgxcGj3ecFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTY5YjBhZmQtZjVkZS0z N2Y1LThmZDItYzRjMzkyODcwYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGetscGiEkRkA07j2YnhieSoyGMPKVbKvvj84twy3/rXjeTwt1x8Dkjx fjcy0y8B1U8LknWE2V9a5DV3Y0LfjPwduio25JGhmg1avmSD02oqS+LA604L3+U7 K4wkthFF8NM91eyODyPdB5e1lYdf2AMEWTg8Iw54nuEXbwlkGv+KTPKRpe/UOGbh h3HtBaa0Xr6PQS+YfU3WBDbZ2nOfW2uEMDO+fQy6wTUUL64qi7Aqpf8YB3dsP/zB JvSytzhHO5h/ES+FkZIzZNKu4olNT6mCF4iuRYCUiXB3QiZF8qGFKKRgprmrxtb7 HBT5Bj+6wM8sm29R3wLJUeC35qGTSec= -----END CERTIFICATE-----Generated at Sat Apr 5 07:54:34 2025 by rpki-client