$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e962e39-33d9-3e02-bab7-24bed439b9b4.roa File: 9e962e39-33d9-3e02-bab7-24bed439b9b4.roa (raw, json) Hash identifier: NnzXxYL8vGTavVyAAWEuV0AvUe/vfdkjfpHySBRLEPQ= Subject key identifier: 2A:00:20:7B:59:6D:06:F9:B1:1A:A6:BE:6E:45:B1:EE:70:9F:5A:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550CA79EB74E2AC09A7F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e962e39-33d9-3e02-bab7-24bed439b9b4.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.71.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0c:a7:9e:b7:4e:2a:c0:9a:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=75fe849b-fe44-4b7e-866b-6cf82b71ca2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:2a:74:d6:a4:2c:94:90:c7:cc:92:31:49: f3:f2:e7:9f:ed:02:51:ac:8f:eb:8a:39:64:89:9a: 18:56:b3:f0:63:f5:c5:29:92:1b:f6:31:c1:b2:fb: 78:f6:cb:61:ed:8b:f9:1e:13:ad:72:10:66:3d:a5: 05:ce:51:c2:25:ff:84:7c:28:da:8a:5a:f4:1b:e4: bb:13:30:34:87:8a:29:f1:43:21:56:5a:3a:3a:6e: 1d:a0:4d:30:bb:c1:74:be:d4:c8:78:d1:96:a2:f1: 0c:c1:bb:42:de:40:12:14:c6:22:2b:36:74:6d:c3: 6a:f8:5c:96:ac:62:14:fc:e5:58:51:ad:57:e0:37: 09:18:c7:47:c6:a6:b8:6b:2b:34:dd:52:c1:bd:e9: c2:d9:54:ac:02:8d:d3:47:5f:b5:5b:eb:ca:69:b2: 5f:ed:e9:51:01:6b:97:0b:33:6f:d4:2b:fe:64:17: 76:d1:00:8b:20:08:a3:90:2a:39:13:35:25:de:cc: 85:1a:5d:aa:42:72:a2:61:0f:b0:77:16:98:05:19: 5a:54:12:58:d5:a4:99:ee:e1:df:1c:9e:fa:40:70: d2:90:4b:b4:88:24:7c:a7:d0:b1:bc:64:15:b5:76: 76:e9:0d:bc:ed:4c:58:15:4c:4e:66:97:ab:d4:f7: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:20:7B:59:6D:06:F9:B1:1A:A6:BE:6E:45:B1:EE:70:9F:5A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9e962e39-33d9-3e02-bab7-24bed439b9b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:28:01:bf:27:d7:74:30:4c:b3:0c:08:4e:75:d9:4a:b3:5b: 6a:35:f6:09:48:a2:95:29:6d:f9:2a:97:04:78:29:05:70:e5: 70:37:ee:c0:60:77:ab:0a:22:94:fd:d1:34:c2:f0:d0:33:bf: 1e:b6:ae:10:80:14:c1:f1:de:18:8e:99:b0:41:b4:5e:37:19: 94:aa:de:ff:32:6e:61:6d:db:3d:1c:a2:1f:86:b2:c3:3c:fd: f4:b6:1d:56:58:b9:1f:e2:67:ba:68:f5:6b:ab:54:32:0b:75: f5:97:ac:ab:6c:d2:45:92:d7:3e:95:90:11:26:5a:8e:f9:79: 6a:5f:26:a2:08:40:56:74:c8:cb:6e:43:f4:ae:04:a3:50:f6: f8:57:ad:76:43:ce:86:91:2d:53:f9:94:71:e7:24:94:55:cf: ed:b6:30:9d:50:df:ac:a4:3f:bb:9b:d8:6a:15:0a:21:93:51: 90:51:dc:f6:c0:24:29:ed:b1:02:b7:29:2e:28:3d:7b:33:e2: 77:74:d6:e7:07:b1:56:38:e2:0f:ec:57:bf:aa:a1:65:36:78: 01:a4:64:d7:72:73:67:9a:d8:6d:0a:98:4a:d6:d6:67:16:6a: 72:fc:0a:42:92:3e:1b:d0:98:64:cb:3e:36:53:a0:05:83:cd: 31:ee:8a:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQynnrdOKsCaf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk NzVmZTg0OWItZmU0NC00YjdlLTg2NmItNmNmODJiNzFjYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK8qdNakLJSQx8ySMUnz8uef7QJRrI/rijlk iZoYVrPwY/XFKZIb9jHBsvt49sth7Yv5HhOtchBmPaUFzlHCJf+EfCjailr0G+S7 EzA0h4op8UMhVlo6Om4doE0wu8F0vtTIeNGWovEMwbtC3kASFMYiKzZ0bcNq+FyW rGIU/OVYUa1X4DcJGMdHxqa4ays03VLBvenC2VSsAo3TR1+1W+vKabJf7elRAWuX CzNv1Cv+ZBd20QCLIAijkCo5EzUl3syFGl2qQnKiYQ+wdxaYBRlaVBJY1aSZ7uHf HJ76QHDSkEu0iCR8p9CxvGQVtXZ26Q287UxYFUxOZper1PfeLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoAIHtZbQb5sRqmvm5Fse5wn1pRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWU5NjJlMzktMzNkOS0z ZTAyLWJhYjctMjRiZWQ0MzliOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkoAb8n13QwTLMMCE512UqzW2o19glIopUpbfkqlwR4KQVw5XA37sBg d6sKIpT90TTC8NAzvx62rhCAFMHx3hiOmbBBtF43GZSq3v8ybmFt2z0coh+GssM8 /fS2HVZYuR/iZ7po9WurVDILdfWXrKts0kWS1z6VkBEmWo75eWpfJqIIQFZ0yMtu Q/SuBKNQ9vhXrXZDzoaRLVP5lHHnJJRVz+22MJ1Q36ykP7ub2GoVCiGTUZBR3PbA JCntsQK3KS4oPXsz4nd01ucHsVY44g/sV7+qoWU2eAGkZNdyc2ea2G0KmErW1mcW anL8CkKSPhvQmGTLPjZToAWDzTHuikY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:47:51 2025 by rpki-client