$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a509a83b-a4f8-33c3-8a60-603c0f3c7835.roa File: a509a83b-a4f8-33c3-8a60-603c0f3c7835.roa (raw, json) Hash identifier: hxjsIzoZB3hsqSPUhl+HDQ7UGIfVvfGYdZapUiKajZ8= Subject key identifier: E9:E1:C8:23:C5:9B:71:26:CA:FB:30:CA:24:A4:25:2E:40:1D:15:6D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFDAEBB0F14401A49987C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a509a83b-a4f8-33c3-8a60-603c0f3c7835.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.71.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:da:eb:b0:f1:44:01:a4:99:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=d45207a5-01ab-4350-b810-ed374310ff25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:a0:58:d8:98:59:7f:69:2b:1d:80:f8:98: db:72:fc:86:a9:f9:a8:11:68:a1:a1:86:54:07:81: 77:fd:21:ac:c7:a3:ea:e9:04:24:47:a6:89:0a:b7: 0c:77:84:91:c7:15:85:17:28:7a:b0:1c:59:4c:19: 86:7e:03:43:1b:f8:4f:7a:17:d0:e8:01:7a:8f:56: e5:fc:1b:cb:4e:f9:7f:34:01:e3:64:6a:91:41:d9: f5:e8:47:b5:d4:78:42:a5:34:45:41:e4:7d:b7:6e: 68:2a:85:8c:7c:a4:1f:ea:9b:82:5a:fe:94:59:ad: ee:ec:0e:89:f8:06:e7:a5:de:15:64:9e:13:e3:21: 0a:2d:83:95:5c:b8:1d:bf:04:ea:c3:03:fa:7a:d5: 27:a5:21:16:cc:bd:56:b1:80:44:93:c3:fb:a8:99: 18:0f:65:44:10:27:8e:81:4f:24:0a:1e:76:f0:71: 3e:2a:e0:85:25:4b:76:02:24:23:46:c2:1b:4f:cc: b3:b9:b5:fd:56:ef:c0:eb:a6:d8:4b:f8:cd:8d:9f: 74:d0:dd:58:8e:ad:33:4d:c1:7f:91:78:13:e8:74: 9f:8c:dd:cd:d2:4c:98:fd:c2:94:3a:87:1a:1a:ca: 1f:6e:41:63:7c:77:19:da:10:06:5c:c7:09:88:e4: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E1:C8:23:C5:9B:71:26:CA:FB:30:CA:24:A4:25:2E:40:1D:15:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a509a83b-a4f8-33c3-8a60-603c0f3c7835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:24:1f:83:a4:1b:49:c0:e6:ec:0b:e5:ec:74:3e:a8:f4:b9: 19:a0:eb:aa:b1:31:80:9f:f6:ff:a5:d2:11:45:96:6b:a9:15: 4c:78:70:8c:e7:f7:57:93:d2:49:d5:37:53:8d:db:b5:16:0f: e3:f3:2a:0c:6f:d1:a5:d7:0d:7e:44:c4:5e:56:c6:bd:8a:c2: 1d:a4:0a:8d:31:8a:ba:0e:b0:8d:9b:11:98:fc:8b:e5:6e:12: 1f:8a:e9:8e:bf:26:f1:77:9c:b6:cf:74:87:26:fc:1d:b3:2e: 1b:e8:5a:9f:ac:52:59:11:25:3b:b3:57:0f:fb:4c:fd:31:82: ac:94:97:62:3c:3f:9c:5f:9f:f5:37:33:97:df:3c:40:bf:f1: 11:78:58:0f:d1:b7:95:2f:dc:85:33:2b:55:9c:3c:90:8c:ac: 75:7d:f9:3c:fa:e6:63:3f:30:b3:0a:e4:98:dd:41:1c:bc:74: 38:1c:39:8e:ab:5b:0b:13:72:83:55:68:e4:11:6f:ba:c7:c2: 54:cb:74:7a:17:24:89:53:76:7e:6c:5f:52:2b:69:69:6e:9c: 95:0f:00:75:a7:8c:5b:26:bc:92:17:df:2f:9c:6e:eb:87:4f: 8c:e1:61:cb:1c:29:23:02:f1:48:63:de:9d:54:8d:d4:2f:ab: 59:df:c0:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79rrsPFEAaSZh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ1MjA3YTUtMDFhYi00MzUwLWI4MTAtZWQzNzQzMTBmZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu6gWNiYWX9pKx2A+JjbcvyGqfmoEWihoYZU B4F3/SGsx6Pq6QQkR6aJCrcMd4SRxxWFFyh6sBxZTBmGfgNDG/hPehfQ6AF6j1bl /BvLTvl/NAHjZGqRQdn16Ee11HhCpTRFQeR9t25oKoWMfKQf6puCWv6UWa3u7A6J +Abnpd4VZJ4T4yEKLYOVXLgdvwTqwwP6etUnpSEWzL1WsYBEk8P7qJkYD2VEECeO gU8kCh528HE+KuCFJUt2AiQjRsIbT8yzubX9Vu/A66bYS/jNjZ900N1Yjq0zTcF/ kXgT6HSfjN3N0kyY/cKUOocaGsofbkFjfHcZ2hAGXMcJiORv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnhyCPFm3EmyvswyiSkJS5AHRVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTUwOWE4M2ItYTRmOC0z M2MzLThhNjAtNjAzYzBmM2M3ODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAokH4OkG0nA5uwL5ex0Pqj0uRmg66qxMYCf9v+l0hFFlmupFUx4cIzn 91eT0knVN1ON27UWD+PzKgxv0aXXDX5ExF5Wxr2Kwh2kCo0xiroOsI2bEZj8i+Vu Eh+K6Y6/JvF3nLbPdIcm/B2zLhvoWp+sUlkRJTuzVw/7TP0xgqyUl2I8P5xfn/U3 M5ffPEC/8RF4WA/Rt5Uv3IUzK1WcPJCMrHV9+Tz65mM/MLMK5JjdQRy8dDgcOY6r WwsTcoNVaOQRb7rHwlTLdHoXJIlTdn5sX1IraWlunJUPAHWnjFsmvJIX3y+cbuuH T4zhYcscKSMC8Uhj3p1UjdQvq1nfwLw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:52:50 2025 by rpki-client