$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3f089f5-5c10-3467-a622-c6ea09b985d8.roa File: b3f089f5-5c10-3467-a622-c6ea09b985d8.roa (raw, json) Hash identifier: gWOGWKra8VwwvMk8H1HAVhp5QdTvpz7iIyNglpxSayQ= Subject key identifier: 95:CA:66:F6:54:65:26:D3:FD:6B:79:A1:8F:5C:4F:7D:84:59:13:D8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E17724A00077E718CA5780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3f089f5-5c10-3467-a622-c6ea09b985d8.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:77:24:a0:00:77:e7:18:ca:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=ab9c6e97-3d3e-4c08-b93f-aea617b747f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5a:26:b7:db:aa:39:82:ff:5e:f1:41:2c:4e: fa:7b:f3:04:cf:67:3e:30:f7:34:ae:40:a1:4b:49: 2a:96:f4:1e:57:f1:57:d3:14:33:20:14:06:c5:8f: 95:b1:59:90:69:00:e5:74:46:4d:23:3f:a6:45:83: 06:ee:32:71:95:8c:3d:48:6d:64:89:92:a0:fe:51: 75:cc:c7:00:3d:16:02:4e:2f:64:2c:70:34:17:fe: b1:21:0b:58:86:14:73:bc:d5:8d:ff:64:5f:08:14: 32:c4:4f:4c:c8:ee:85:76:6f:cc:52:b2:53:54:a2: 82:9a:fb:8e:d6:05:8f:95:40:d9:dc:4c:10:02:cc: ed:7a:b7:c8:da:f2:b6:36:7e:c2:af:f3:77:5c:ab: 93:ac:61:bc:5f:13:b2:63:c9:33:06:94:f3:d4:f0: 31:a1:7e:ea:cb:ea:31:db:96:92:1b:19:04:3d:84: fb:8f:7d:ee:2b:64:84:9d:06:06:9d:18:c4:4a:06: 8f:95:14:80:6a:97:43:50:e2:f2:7b:7f:89:a2:94: 91:f5:2b:3f:f5:91:de:db:29:b8:ac:e7:07:3e:b9: 00:44:af:9c:cf:fa:9b:9b:66:12:74:b8:d9:dd:89: f1:8b:7e:54:46:c3:07:7b:9d:89:74:aa:bb:f3:00: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CA:66:F6:54:65:26:D3:FD:6B:79:A1:8F:5C:4F:7D:84:59:13:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3f089f5-5c10-3467-a622-c6ea09b985d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e7:53:1f:1e:72:5c:77:68:a2:7b:16:c2:ff:ea:19:7f:bd: c5:84:6b:c1:0a:32:5f:7d:97:44:dc:65:c1:ce:b6:a9:8e:3b: ba:37:21:89:89:3a:3b:3c:27:a1:c7:8c:d1:97:c0:e2:28:44: 93:a9:78:42:2f:94:da:c8:6b:0d:de:05:ea:89:61:50:31:63: 21:f0:a2:97:0d:86:be:ee:93:e1:55:8e:2b:d7:15:c2:9c:09: 8c:17:09:6b:0d:38:1a:bd:9b:6d:62:d3:e2:b3:c4:ff:f9:58: 99:f3:40:55:ba:93:c3:21:2e:d4:07:cd:19:ae:fd:21:c1:83: 73:e7:69:a5:45:c0:c3:80:a9:ae:31:63:e3:40:5b:db:b0:b4: c1:21:64:1c:88:f9:b8:bb:b5:84:f5:5a:ce:a1:fc:a7:b9:a8: e2:0c:ca:7b:bc:db:64:15:9e:3a:60:f5:b1:73:ca:91:ca:54: 2d:8a:a4:e5:7e:5d:6f:60:93:34:b2:6b:19:62:ef:d4:a5:81: c7:e0:63:e2:8e:bd:18:68:3b:53:06:c7:76:23:a9:da:17:81: 22:8e:51:a4:70:69:42:be:24:d3:4e:f0:6c:ee:e6:48:ca:27: 24:a0:16:5f:56:b7:a7:47:98:f3:43:a7:7a:39:31:26:bb:c9: 9f:50:84:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XckoAB35xjKV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk YWI5YzZlOTctM2QzZS00YzA4LWI5M2YtYWVhNjE3Yjc0N2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlomt9uqOYL/XvFBLE76e/MEz2c+MPc0rkCh S0kqlvQeV/FX0xQzIBQGxY+VsVmQaQDldEZNIz+mRYMG7jJxlYw9SG1kiZKg/lF1 zMcAPRYCTi9kLHA0F/6xIQtYhhRzvNWN/2RfCBQyxE9MyO6Fdm/MUrJTVKKCmvuO 1gWPlUDZ3EwQAszterfI2vK2Nn7Cr/N3XKuTrGG8XxOyY8kzBpTz1PAxoX7qy+ox 25aSGxkEPYT7j33uK2SEnQYGnRjESgaPlRSAapdDUOLye3+JopSR9Ss/9ZHe2ym4 rOcHPrkARK+cz/qbm2YSdLjZ3Ynxi35URsMHe52JdKq78wD9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXKZvZUZSbT/Wt5oY9cT32EWRPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjNmMDg5ZjUtNWMxMC0z NDY3LWE2MjItYzZlYTA5Yjk4NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvnUx8eclx3aKJ7FsL/6hl/vcWEa8EKMl99l0TcZcHOtqmOO7o3IYmJ Ojs8J6HHjNGXwOIoRJOpeEIvlNrIaw3eBeqJYVAxYyHwopcNhr7uk+FVjivXFcKc CYwXCWsNOBq9m21i0+KzxP/5WJnzQFW6k8MhLtQHzRmu/SHBg3PnaaVFwMOAqa4x Y+NAW9uwtMEhZByI+bi7tYT1Ws6h/Ke5qOIMynu822QVnjpg9bFzypHKVC2KpOV+ XW9gkzSyaxli79SlgcfgY+KOvRhoO1MGx3YjqdoXgSKOUaRwaUK+JNNO8Gzu5kjK JySgFl9Wt6dHmPNDp3o5MSa7yZ9QhII= -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:25 2025 by rpki-client