$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa File: d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa (raw, json) Hash identifier: VxGJm2wIghF7lJSG6Ejm85pmIHzaSvoPiLUjd8+8iZU= Subject key identifier: E8:6C:69:39:24:99:B9:08:34:3C:A2:81:5F:A7:1B:8A:CF:7A:F9:23 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E176CE7108FE107FBB4800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:76:ce:71:08:fe:10:7f:bb:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=69b0c867-dcef-4aec-85d9-cd00b42d0c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:e8:00:4b:a4:1f:bf:91:4e:00:22:0a:c0: 5d:b2:b9:95:d6:b4:c7:e1:58:59:76:59:36:89:6b: ba:3c:97:d6:ec:fe:f9:20:4c:de:fa:e8:ef:8c:b0: 21:0b:0f:35:71:b3:4f:bd:fc:0f:54:91:03:df:ab: 59:72:87:70:d2:34:83:13:2f:3e:a3:75:f1:29:26: c6:b4:19:14:7c:b5:6c:0b:18:7e:b8:d6:ff:d1:fa: df:88:21:a0:15:98:05:15:55:0b:89:07:2f:36:96: 32:4c:d7:2b:d2:d4:12:49:e4:94:57:70:e7:3d:db: 3f:30:e9:d1:cc:cd:6c:52:34:eb:bc:fa:67:33:cd: ac:5d:40:3f:d6:b9:56:86:06:81:e5:a9:f3:5d:41: 92:ca:f3:a3:7d:15:df:2d:4a:16:c6:45:0a:b4:ef: 63:91:a9:99:99:de:7e:6c:5c:22:ac:2e:f3:07:42: d8:56:11:e7:1d:46:5e:67:82:17:57:fd:9d:56:49: 30:19:bf:56:8e:27:65:bf:6e:15:2d:a1:ea:7a:69: 49:35:eb:82:f2:97:90:87:ef:db:81:90:c4:ac:32: f4:96:47:60:12:a2:d9:18:ca:18:e0:26:90:cd:d1: 41:ea:75:a7:de:aa:ab:99:ab:00:3b:3e:15:90:16: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6C:69:39:24:99:B9:08:34:3C:A2:81:5F:A7:1B:8A:CF:7A:F9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2f:0f:53:67:e6:ff:d4:7b:f1:7e:e2:3b:bd:a7:41:06:b1: 62:4d:8a:e0:6a:24:b3:92:fe:07:e7:b7:fd:d2:bb:6c:e0:2b: 15:19:a0:f8:77:be:80:63:c4:7f:f2:ac:3b:d4:cc:98:a5:93: f8:0a:f4:05:bf:f2:62:6b:bf:3f:11:e5:2c:94:18:20:c0:b0: 2d:f7:b7:57:52:de:bc:02:4d:66:03:38:9e:51:b8:4f:27:0e: 48:e1:dd:83:2b:24:1e:c7:00:16:43:ed:8d:0e:4e:69:af:da: 3a:a7:4b:69:d9:da:a4:18:65:ce:a8:08:3a:fd:32:76:a7:e6: 7a:d8:fd:53:d5:e8:b6:af:28:38:be:3b:90:76:0c:1a:00:46: 28:7e:dd:43:25:df:02:6f:82:be:2f:fb:50:3e:c0:29:66:b3: 21:c4:33:da:bf:a9:19:a8:b7:12:6b:46:7e:5c:fe:bf:0f:b8: f8:3c:84:54:ab:f2:52:49:b9:0f:db:d2:9e:af:56:53:d0:5d: 13:2d:74:54:ee:6a:29:27:95:8d:de:a0:f1:83:5c:ea:fc:42: 11:d9:d7:3a:48:13:99:c2:2e:4f:e5:4f:a9:b7:45:3b:40:47: a0:8d:f6:f5:f0:9e:73:a9:6c:83:84:a4:d1:8e:ad:20:8a:cb: a9:95:de:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XbOcQj+EH+7SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NjliMGM4NjctZGNlZi00YWVjLTg1ZDktY2QwMGI0MmQwYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdjoAEukH7+RTgAiCsBdsrmV1rTH4VhZdlk2 iWu6PJfW7P75IEze+ujvjLAhCw81cbNPvfwPVJED36tZcodw0jSDEy8+o3XxKSbG tBkUfLVsCxh+uNb/0frfiCGgFZgFFVULiQcvNpYyTNcr0tQSSeSUV3DnPds/MOnR zM1sUjTrvPpnM82sXUA/1rlWhgaB5anzXUGSyvOjfRXfLUoWxkUKtO9jkamZmd5+ bFwirC7zB0LYVhHnHUZeZ4IXV/2dVkkwGb9Wjidlv24VLaHqemlJNeuC8peQh+/b gZDErDL0lkdgEqLZGMoY4CaQzdFB6nWn3qqrmasAOz4VkBYA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhsaTkkmbkINDyigV+nG4rPevkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDJhMTJlNjAtZTg0ZS0z Mzg4LThhZGQtNTBlOGJjYmRiYjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQvD1Nn5v/Ue/F+4ju9p0EGsWJNiuBqJLOS/gfnt/3Su2zgKxUZoPh3 voBjxH/yrDvUzJilk/gK9AW/8mJrvz8R5SyUGCDAsC33t1dS3rwCTWYDOJ5RuE8n Dkjh3YMrJB7HABZD7Y0OTmmv2jqnS2nZ2qQYZc6oCDr9Mnan5nrY/VPV6LavKDi+ O5B2DBoARih+3UMl3wJvgr4v+1A+wClmsyHEM9q/qRmotxJrRn5c/r8PuPg8hFSr 8lJJuQ/b0p6vVlPQXRMtdFTuaiknlY3eoPGDXOr8QhHZ1zpIE5nCLk/lT6m3RTtA R6CN9vXwnnOpbIOEpNGOrSCKy6mV3rg= -----END CERTIFICATE-----Generated at Sat Apr 5 08:02:06 2025 by rpki-client