$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1d0986b-e9a5-3029-888e-96d2bb06b44e.roa File: c1d0986b-e9a5-3029-888e-96d2bb06b44e.roa (raw, json) Hash identifier: P3QSj7VfZ/Odxmyv23SEFWvaA3xlv7GCuOClY8qXgRw= Subject key identifier: 12:43:E1:86:17:9B:61:A4:1A:5A:4C:4D:EE:3F:35:20:57:4B:15:4D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550C2AE865CBDB35713440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1d0986b-e9a5-3029-888e-96d2bb06b44e.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.71.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0c:2a:e8:65:cb:db:35:71:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=456583ab-aba3-4c8a-967b-e4a58141d60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:cf:a4:05:b4:44:7c:31:87:02:18:14:ed: 72:c7:99:3a:f1:93:33:e8:cf:e4:a1:5f:23:d2:35: 73:46:2f:51:e5:9f:81:02:f0:44:61:04:a2:0c:6d: cd:31:0e:fc:71:93:50:ec:fe:5f:bc:30:58:72:ff: 4e:ab:21:ec:d5:f8:1d:be:cb:44:23:ab:a6:7c:42: dc:b0:7d:30:be:16:b6:06:b1:1f:8a:cb:d5:d3:17: 61:dd:ba:a7:19:1d:81:d0:cd:ce:1f:be:2b:f9:3e: d1:33:9b:57:5a:f4:ef:2e:92:89:cc:67:f5:7d:33: 5b:cb:cc:c4:88:93:3a:3a:00:0c:e4:10:b6:79:ee: e5:fc:22:45:e8:a8:2b:6a:fc:ff:02:e4:cd:f2:bb: 7e:cb:e5:70:48:99:27:7a:b4:a4:e9:57:8b:02:03: 05:21:9a:68:55:40:62:91:fc:07:f8:7e:4d:5f:9b: f9:35:98:41:69:6b:97:5f:bc:6c:f2:7c:13:39:48: 55:8d:76:ba:24:3d:cb:70:9c:7f:65:0c:dc:96:a6: e1:9c:2e:9d:d6:f6:3c:a2:00:bd:1c:1f:96:eb:16: b5:35:21:12:d3:13:5d:7d:07:13:18:3d:c1:b0:09: 4b:bf:1e:90:43:f5:2b:20:b5:a1:0c:1e:3b:d7:70: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:43:E1:86:17:9B:61:A4:1A:5A:4C:4D:EE:3F:35:20:57:4B:15:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1d0986b-e9a5-3029-888e-96d2bb06b44e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:93:6a:c0:eb:a6:8c:a3:bf:3d:b5:a5:0a:86:9e:fd:1b:3b: 9d:6f:cc:38:d6:9e:10:61:dc:89:7a:b9:c5:f7:58:4e:47:3c: b7:76:49:66:e1:3a:ec:77:2e:a3:9b:91:1e:e3:24:d7:bf:f7: 64:39:2a:ab:cf:ee:80:ec:14:83:28:15:3b:fa:58:ac:dd:bb: 7b:b9:50:bf:d8:55:86:40:93:53:14:43:ad:da:4d:ef:9d:c4: 7e:f1:03:0b:81:8c:c9:c4:7c:e1:df:a5:b7:94:13:fc:3a:bd: 37:14:fe:ae:72:01:f0:89:c9:51:11:b7:eb:81:e1:2e:72:4c: 7a:5b:d2:ef:0f:2a:73:32:d7:41:e0:2b:9c:e9:0c:2c:51:fa: db:45:42:06:97:eb:18:de:e0:03:12:0c:8f:bb:79:e4:60:a1: e8:c8:c3:b4:64:4c:2a:92:a9:24:46:50:7c:97:92:1f:f7:e1: b1:0d:00:90:96:e8:94:b3:0d:b9:46:d0:77:6a:e5:49:e8:62: f0:2a:65:0c:19:d5:94:c2:16:c6:1c:b5:a4:d3:22:eb:c0:8f: 15:2b:e6:7e:6f:76:19:0d:80:99:19:ec:98:1a:e9:95:70:0e: 99:c4:3a:5f:f3:12:91:47:11:58:79:b5:55:74:6c:8d:ac:b7: 79:55:41:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQwq6GXL2zVxNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk NDU2NTgzYWItYWJhMy00YzhhLTk2N2ItZTRhNTgxNDFkNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQzPpAW0RHwxhwIYFO1yx5k68ZMz6M/koV8j 0jVzRi9R5Z+BAvBEYQSiDG3NMQ78cZNQ7P5fvDBYcv9OqyHs1fgdvstEI6umfELc sH0wvha2BrEfisvV0xdh3bqnGR2B0M3OH74r+T7RM5tXWvTvLpKJzGf1fTNby8zE iJM6OgAM5BC2ee7l/CJF6Kgravz/AuTN8rt+y+VwSJknerSk6VeLAgMFIZpoVUBi kfwH+H5NX5v5NZhBaWuXX7xs8nwTOUhVjXa6JD3LcJx/ZQzclqbhnC6d1vY8ogC9 HB+W6xa1NSES0xNdfQcTGD3BsAlLvx6QQ/UrILWhDB4713AWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJD4YYXm2GkGlpMTe4/NSBXSxVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzFkMDk4NmItZTlhNS0z MDI5LTg4OGUtOTZkMmJiMDZiNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESTasDrpoyjvz21pQqGnv0bO51vzDjWnhBh3Il6ucX3WE5HPLd2SWbh Oux3LqObkR7jJNe/92Q5KqvP7oDsFIMoFTv6WKzdu3u5UL/YVYZAk1MUQ63aTe+d xH7xAwuBjMnEfOHfpbeUE/w6vTcU/q5yAfCJyVERt+uB4S5yTHpb0u8PKnMy10Hg K5zpDCxR+ttFQgaX6xje4AMSDI+7eeRgoejIw7RkTCqSqSRGUHyXkh/34bENAJCW 6JSzDblG0Hdq5UnoYvAqZQwZ1ZTCFsYctaTTIuvAjxUr5n5vdhkNgJkZ7Jga6ZVw DpnEOl/zEpFHEVh5tVV0bI2st3lVQQU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:30 2025 by rpki-client