$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa File: b5c29b16-b492-33e1-863d-370c23ab71e2.roa (raw, json) Hash identifier: MAPSKHUvgeoHJjLe+JW65/1WnQx8vlECLRIea8XZEUQ= Subject key identifier: 0B:2B:AD:D9:FB:E6:A5:98:B4:E4:D2:2E:61:78:6E:C0:98:20:A0:C3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8A9B8317E199665E3AC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8a:9b:83:17:e1:99:66:5e:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=4aa55723-2d22-46b0-9d2f-52e6bcc041c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:f7:33:47:f7:54:91:08:79:a0:e3:db:36: cc:05:57:69:88:7e:98:f8:d2:72:5d:95:14:df:f0: ee:a8:46:a7:16:99:a6:15:d4:7f:ec:73:ac:3a:aa: 24:18:ce:07:cb:ba:5e:7b:fc:3b:30:6a:3a:58:c6: 22:d0:cb:0c:f5:ce:7f:d0:f7:37:04:94:16:f7:7f: 42:9a:b9:2b:7b:85:a1:a6:d4:9e:ad:cf:11:23:da: 67:c8:56:53:8c:6b:ea:8e:8a:e4:de:62:e6:0a:2b: a6:a8:ff:7e:35:a0:1a:ea:c6:d2:0e:62:f7:20:e1: b0:f7:76:81:cb:9f:e6:5e:12:9a:18:5a:69:88:d3: 74:75:32:f8:c5:66:4c:e3:5b:89:2b:3e:b2:b5:bd: 6c:7c:0e:1a:1b:34:05:dc:2d:e9:94:77:81:40:35: 56:9c:92:1e:f0:93:29:1e:7c:75:7e:2a:06:41:8e: 8e:13:2a:13:e4:8c:a5:ad:dc:f5:29:c7:2b:5e:3b: 5b:48:af:7c:1d:f3:88:e5:ab:63:ef:d4:26:9d:b4: 60:75:11:96:f1:c4:0e:da:d9:c5:26:de:ef:17:45: cd:ae:05:94:a8:7e:bb:a9:24:f6:ac:ab:56:0b:45: 6d:b5:0f:b2:84:c3:3a:73:41:ae:4c:14:67:32:37: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2B:AD:D9:FB:E6:A5:98:B4:E4:D2:2E:61:78:6E:C0:98:20:A0:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:75:69:8a:df:bd:50:cc:72:c5:1e:63:c2:75:47:44:41:4d: 95:91:e9:4a:dc:5a:24:96:f0:c6:4c:0a:e8:7e:76:2d:31:b7: 41:77:9f:1c:fc:93:88:fe:e2:95:a4:62:a2:55:35:68:fb:ce: 3d:b1:a4:25:16:38:c2:39:e7:02:39:9f:91:10:30:be:80:47: 96:03:64:67:90:7a:80:b6:66:21:62:92:92:d7:0b:44:44:25: ab:68:32:99:a9:40:32:8d:c3:dd:7d:47:f7:ac:b2:37:78:0d: cf:3f:83:05:3d:3d:69:2c:3c:b5:0b:e1:93:b1:57:8c:8d:2c: 94:9a:9b:c7:c8:28:23:0b:e2:c2:67:a0:5b:0d:15:10:20:9d: e0:34:0b:42:db:f6:74:a8:28:53:e8:28:b0:95:a3:ae:88:47: 9b:dd:1a:47:65:6d:95:dd:ed:a0:ab:0a:1e:5e:84:5b:8b:f2: 31:07:0c:8c:46:a4:3b:f7:17:4b:53:2f:1c:34:c5:89:b2:08: 54:80:ad:e2:58:8b:24:e8:16:75:db:8d:34:27:c6:53:49:cb: 88:ba:d4:d9:36:af:95:b8:8c:e0:58:ca:1c:a5:2a:11:40:f4: cb:a9:de:ce:35:56:ef:23:96:64:0b:3f:6d:f3:0a:d5:fa:73: a8:55:33:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoqbgxfhmWZeOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk NGFhNTU3MjMtMmQyMi00NmIwLTlkMmYtNTJlNmJjYzA0MWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0b3M0f3VJEIeaDj2zbMBVdpiH6Y+NJyXZUU 3/DuqEanFpmmFdR/7HOsOqokGM4Hy7pee/w7MGo6WMYi0MsM9c5/0Pc3BJQW939C mrkre4WhptSerc8RI9pnyFZTjGvqjork3mLmCiumqP9+NaAa6sbSDmL3IOGw93aB y5/mXhKaGFppiNN0dTL4xWZM41uJKz6ytb1sfA4aGzQF3C3plHeBQDVWnJIe8JMp Hnx1fioGQY6OEyoT5Iylrdz1KccrXjtbSK98HfOI5atj79QmnbRgdRGW8cQO2tnF Jt7vF0XNrgWUqH67qST2rKtWC0VttQ+yhMM6c0GuTBRnMjeT2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsrrdn75qWYtOTSLmF4bsCYIKDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjVjMjliMTYtYjQ5Mi0z M2UxLTg2M2QtMzcwYzIzYWI3MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR1aYrfvVDMcsUeY8J1R0RBTZWR6UrcWiSW8MZMCuh+di0xt0F3nxz8 k4j+4pWkYqJVNWj7zj2xpCUWOMI55wI5n5EQML6AR5YDZGeQeoC2ZiFikpLXC0RE JatoMpmpQDKNw919R/essjd4Dc8/gwU9PWksPLUL4ZOxV4yNLJSam8fIKCML4sJn oFsNFRAgneA0C0Lb9nSoKFPoKLCVo66IR5vdGkdlbZXd7aCrCh5ehFuL8jEHDIxG pDv3F0tTLxw0xYmyCFSAreJYiyToFnXbjTQnxlNJy4i61Nk2r5W4jOBYyhylKhFA 9Mup3s41Vu8jlmQLP23zCtX6c6hVM6M= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:54 2025 by rpki-client