$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa File: a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa (raw, json) Hash identifier: MhmGXACj3A3UB09L5jDnItkxspmHJmz+9ATpwsroH/8= Subject key identifier: F2:72:D3:1C:66:86:CE:D3:44:F4:94:49:9C:F8:04:5E:E3:38:75:40 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8E3A83664A496A273140 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8e:3a:83:66:4a:49:6a:27:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=865c1272-7d76-4d4e-aa7f-9f042ad8d065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:5d:a3:e2:cf:bb:71:1b:2f:de:e6:f7:a9: 6c:4f:62:d8:0c:95:29:8e:d8:f5:99:be:a7:71:30: 36:fd:c3:6e:6c:a5:e3:74:31:43:c5:77:eb:de:76: 57:e8:3e:4f:ff:41:c2:1e:0b:8b:48:01:77:cf:da: 74:6a:b8:5a:57:76:1b:a4:99:43:cd:91:4a:52:82: 1c:b1:66:81:b1:f4:b5:18:ed:f1:a6:e6:e3:eb:9d: 53:32:b4:08:56:06:37:00:72:72:83:be:1f:91:f8: f8:9e:60:2c:3a:aa:12:a1:69:74:a2:b3:94:74:20: 3f:7e:cd:c4:bf:8a:42:44:17:ad:e3:5f:32:22:d6: 19:e6:73:69:9a:bd:c4:c4:4f:49:63:cf:6a:87:54: 88:61:c1:f8:3b:20:60:c7:2f:86:1f:e5:64:5c:ef: b1:e1:a1:5f:7b:1c:ef:3f:01:f8:45:c3:24:94:b9: 0c:5e:22:cd:eb:e0:2d:9a:1d:a7:bc:93:84:cc:a9: d8:b5:b1:43:87:e1:90:fb:14:b5:b5:f7:0c:2f:12: bc:be:20:ac:41:d2:55:e6:a9:e3:22:72:a0:75:a9: 29:15:4c:86:aa:2b:53:3b:9b:0a:ea:b0:27:f3:9e: 70:fa:4b:13:bd:98:f3:e9:5f:3d:81:1d:63:b2:1f: b1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:72:D3:1C:66:86:CE:D3:44:F4:94:49:9C:F8:04:5E:E3:38:75:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a807c1cc-e569-31f5-9f7e-47fc4f3a6bc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:21:b0:4d:83:05:e2:d7:6f:0f:91:73:d2:b0:98:67:35:4c: fb:3e:21:27:b2:59:c6:86:b8:48:ac:65:ba:75:76:16:19:0c: 94:d5:09:fd:c6:9a:0e:36:cc:ca:2f:88:14:ff:1b:45:5f:ff: c5:f9:0f:ff:b0:70:96:de:ec:21:2d:be:22:2e:85:71:02:8e: 0c:c5:cf:11:1b:e8:d3:b3:73:28:15:9d:09:72:10:0f:ec:41: 30:d4:12:36:2a:88:7d:64:76:4d:26:09:91:e6:72:a1:e9:1a: dc:6d:ae:67:72:ef:a0:b4:8f:e0:5c:95:86:f0:b5:81:13:38: b1:f2:2e:f6:a7:55:3d:cc:15:4e:d2:87:b8:02:b3:67:2e:a0: dd:8a:11:a3:2c:30:c8:59:7f:f7:33:48:f7:31:94:0b:4a:2b: 49:79:09:3e:66:47:31:35:87:a5:61:0e:47:f2:43:d4:76:8f: 24:59:52:69:a8:0c:bd:44:42:38:e4:70:11:c8:6d:1e:17:cd: 52:63:cc:db:c9:a5:20:6e:79:4d:0e:3c:0c:7c:42:ed:a9:b0: 44:32:b8:f9:88:97:5f:7b:c4:2f:4c:91:cf:38:54:4e:b6:6a: c8:34:84:67:e9:40:0b:08:c7:f0:bc:bd:0b:c8:2b:02:ff:42: db:55:01:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo46g2ZKSWonMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk ODY1YzEyNzItN2Q3Ni00ZDRlLWFhN2YtOWYwNDJhZDhkMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFpdo+LPu3EbL97m96lsT2LYDJUpjtj1mb6n cTA2/cNubKXjdDFDxXfr3nZX6D5P/0HCHguLSAF3z9p0arhaV3YbpJlDzZFKUoIc sWaBsfS1GO3xpubj651TMrQIVgY3AHJyg74fkfj4nmAsOqoSoWl0orOUdCA/fs3E v4pCRBet418yItYZ5nNpmr3ExE9JY89qh1SIYcH4OyBgxy+GH+VkXO+x4aFfexzv PwH4RcMklLkMXiLN6+Atmh2nvJOEzKnYtbFDh+GQ+xS1tfcMLxK8viCsQdJV5qnj InKgdakpFUyGqitTO5sK6rAn855w+ksTvZjz6V89gR1jsh+xAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJy0xxmhs7TRPSUSZz4BF7jOHVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTgwN2MxY2MtZTU2OS0z MWY1LTlmN2UtNDdmYzRmM2E2YmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEflMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFchsE2DBeLXbw+Rc9KwmGc1TPs+ISeyWcaGuEisZbp1dhYZDJTVCf3G mg42zMoviBT/G0Vf/8X5D/+wcJbe7CEtviIuhXECjgzFzxEb6NOzcygVnQlyEA/s QTDUEjYqiH1kdk0mCZHmcqHpGtxtrmdy76C0j+BclYbwtYETOLHyLvanVT3MFU7S h7gCs2cuoN2KEaMsMMhZf/czSPcxlAtKK0l5CT5mRzE1h6VhDkfyQ9R2jyRZUmmo DL1EQjjkcBHIbR4XzVJjzNvJpSBueU0OPAx8Qu2psEQyuPmIl197xC9Mkc84VE62 asg0hGfpQAsIx/C8vQvIKwL/QttVATc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:51 2025 by rpki-client