$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa File: b5c29b16-b492-33e1-863d-370c23ab71e2.roa (raw, json) Hash identifier: HckmnSGz9qUuqE9JiVQsCVCd0RcLn4BysaU69sI+d2s= Subject key identifier: F3:2F:45:16:48:6C:22:07:7A:A9:B6:3D:33:C6:E1:A7:F6:3D:E8:4A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E16F767076C0652E7DDA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:6f:76:70:76:c0:65:2e:7d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=9b7a8276-15f2-499e-a283-1a2cb6213b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:dc:26:b3:81:bd:8a:a6:b2:8a:7f:6d:06: a9:9e:dc:d5:df:3f:e8:f5:38:53:db:be:5e:b7:0a: f1:1b:78:6d:6c:72:48:54:f3:81:2b:2e:c0:0c:dd: 4b:51:47:54:d5:91:b6:3c:9a:6e:03:be:c4:35:29: 18:3a:24:e0:c0:47:5c:0f:3b:50:21:ec:f3:c1:cb: 78:f4:d3:fb:70:09:33:b4:a4:46:3f:ec:78:4e:9c: 5a:cf:8f:55:cc:ef:10:f2:e6:72:42:63:4d:14:f1: e5:6b:22:28:c7:93:d7:86:98:1a:f4:04:ea:ca:7c: 2c:1e:53:ad:5b:05:c6:9b:ab:d4:c0:e0:5b:86:0d: b8:a5:e1:46:4f:a8:a7:7f:67:e6:c1:a7:ab:ed:9f: 18:95:5d:fa:0f:11:ea:2c:84:78:8d:36:93:f8:72: c2:85:e6:45:e9:bd:f1:b3:8d:ac:3b:2a:00:57:2b: 20:0a:69:e8:e4:93:94:58:03:98:01:60:aa:f8:64: 9b:c7:c0:85:76:67:0f:cf:28:c2:b6:4c:17:66:a2: 31:cb:33:dc:87:99:40:41:51:f0:a4:2d:ab:8d:47: 05:f8:a7:09:69:73:8c:ee:ef:9a:7a:70:5f:b4:74: ae:17:57:8e:9d:1e:cf:c7:ad:8c:c1:bb:38:64:1a: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2F:45:16:48:6C:22:07:7A:A9:B6:3D:33:C6:E1:A7:F6:3D:E8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5c29b16-b492-33e1-863d-370c23ab71e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d6:4b:64:52:e7:27:fe:75:95:74:cb:ef:45:eb:bd:b3:f5: 63:fd:13:36:ff:1d:9e:c9:66:c7:f6:aa:53:f7:04:75:d0:dd: 28:af:85:d7:be:fa:0e:d2:06:73:6c:2a:cb:ad:2c:ec:f5:d6: 4e:38:56:53:bd:ae:db:e3:1f:f8:25:55:16:91:58:8a:67:24: 9d:40:4a:2b:01:7a:3d:43:c7:9c:e8:6d:ab:c9:0a:61:8d:b1: 53:c5:0e:10:99:a3:6b:2a:69:48:48:33:4e:18:cb:a0:44:80: 07:f9:25:75:13:2d:ac:36:b1:05:1a:fd:cf:1f:5f:b1:e3:7d: 8b:3b:32:04:7c:a7:33:2b:74:10:ec:30:dd:87:51:e2:0a:79: ea:8c:01:2b:6f:5f:e1:4a:b5:cf:fd:43:5a:01:1c:59:b7:d4: a8:23:10:79:5a:bc:8c:a9:e6:e2:bf:50:76:80:18:b3:c8:ce: 57:f3:f8:f8:07:69:9a:3e:e8:dd:95:68:5b:7a:0f:ca:8f:07: b8:2e:51:4f:fe:a7:67:bf:96:47:ae:b9:84:d2:74:cc:2a:02: 4a:f9:9d:6c:f1:dd:7d:88:fc:89:d2:c3:ec:a5:d8:63:26:23: 4d:90:18:3b:94:fb:64:1e:0c:d7:a9:06:69:be:06:03:95:24: 93:ca:a8:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4W92cHbAZS592oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk OWI3YTgyNzYtMTVmMi00OTllLWEyODMtMWEyY2I2MjEzYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZXcJrOBvYqmsop/bQapntzV3z/o9ThT275e twrxG3htbHJIVPOBKy7ADN1LUUdU1ZG2PJpuA77ENSkYOiTgwEdcDztQIezzwct4 9NP7cAkztKRGP+x4Tpxaz49VzO8Q8uZyQmNNFPHlayIox5PXhpga9ATqynwsHlOt WwXGm6vUwOBbhg24peFGT6inf2fmwaer7Z8YlV36DxHqLIR4jTaT+HLCheZF6b3x s42sOyoAVysgCmno5JOUWAOYAWCq+GSbx8CFdmcPzyjCtkwXZqIxyzPch5lAQVHw pC2rjUcF+KcJaXOM7u+aenBftHSuF1eOnR7Px62Mwbs4ZBroAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMvRRZIbCIHeqm2PTPG4af2PehKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjVjMjliMTYtYjQ5Mi0z M2UxLTg2M2QtMzcwYzIzYWI3MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrWS2RS5yf+dZV0y+9F672z9WP9Ezb/HZ7JZsf2qlP3BHXQ3Sivhde+ +g7SBnNsKsutLOz11k44VlO9rtvjH/glVRaRWIpnJJ1ASisBej1Dx5zobavJCmGN sVPFDhCZo2sqaUhIM04Yy6BEgAf5JXUTLaw2sQUa/c8fX7HjfYs7MgR8pzMrdBDs MN2HUeIKeeqMAStvX+FKtc/9Q1oBHFm31KgjEHlavIyp5uK/UHaAGLPIzlfz+PgH aZo+6N2VaFt6D8qPB7guUU/+p2e/lkeuuYTSdMwqAkr5nWzx3X2I/InSw+yl2GMm I02QGDuU+2QeDNepBmm+BgOVJJPKqGo= -----END CERTIFICATE-----Generated at Sat Apr 5 07:54:28 2025 by rpki-client