$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa File: d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa (raw, json) Hash identifier: s+nyJo7/qKK/LrKR3JEuwxNlFdZTbwmrocxX1sJxYxg= Subject key identifier: CF:6A:18:98:38:4B:C0:9A:9A:BE:23:EF:DB:C8:E9:F2:F2:DF:F0:D5 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8EBB829CFCFB365B5300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8e:bb:82:9c:fc:fb:36:5b:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=1aed7b95-903c-430c-822f-e9e4acef97ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:7e:e8:7c:40:c6:9c:8c:b4:d7:24:c6:61: 93:09:40:83:48:56:e8:fc:04:34:ea:31:d3:d2:b6: 08:82:1d:eb:a8:50:cd:14:07:94:ff:12:ed:75:40: e2:6f:a6:d7:72:57:4d:dd:9c:18:ee:87:e7:e8:4c: 03:43:b3:4e:c0:dd:c1:bd:53:60:ab:be:4d:8d:35: c2:46:ac:a6:2e:37:37:45:73:c8:7e:96:5e:58:e1: 3a:6e:27:2a:81:f5:aa:53:9a:34:80:32:52:02:e7: 90:5b:3b:f0:c3:7c:b9:f9:41:a5:3f:de:d0:71:29: c2:11:9d:5e:26:cb:b3:be:b8:c8:3e:c2:8e:7e:9f: aa:20:05:76:d8:17:20:e0:af:77:11:fe:85:d0:d1: 73:f5:d2:95:ec:bb:83:3b:3b:a2:a8:5a:13:cf:b6: bf:ef:6e:67:d5:de:45:e4:8b:92:e9:d0:3d:1c:27: af:8c:b7:6f:85:c7:7d:e7:84:bf:74:5d:34:36:54: 19:d5:a5:6a:34:68:58:93:21:fc:41:3f:6f:77:52: 03:0e:46:b0:f6:48:81:1f:a5:e4:8c:8b:a4:70:90: 42:19:dd:b1:10:a1:fc:24:40:30:dc:4b:bc:59:5e: 87:7c:be:cb:66:03:f0:9a:0a:7c:c2:fe:60:1a:6a: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6A:18:98:38:4B:C0:9A:9A:BE:23:EF:DB:C8:E9:F2:F2:DF:F0:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d52f74de-8293-3bb8-be18-b46e51b4b2e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b1:ae:cd:cf:50:d7:36:7f:d6:11:35:ea:c7:81:8f:26:30: 32:36:e2:ed:fd:51:e9:a5:0c:fd:1e:bb:03:d0:69:2d:e4:85: f8:bc:ca:31:ed:86:8a:c3:97:16:ea:0a:5a:cd:a1:3a:92:f5: 90:cf:36:fa:b3:83:18:da:2a:31:fc:6c:c7:a7:67:f4:fc:66: 59:db:6f:57:be:16:ee:f3:1e:f4:c7:29:b0:ba:1c:2b:16:8f: 33:49:98:f3:75:fc:58:d7:a0:72:30:ac:55:e4:d5:d4:95:b3: ac:93:ad:c1:e8:e4:bb:78:bc:52:9a:5c:40:df:2c:7b:d4:c8: fc:ee:9a:be:2e:b9:87:42:52:ee:6e:66:ab:e0:8b:e2:5a:7c: 64:65:88:2b:0d:72:a2:d5:32:fc:bc:f1:c5:2c:a7:11:89:a9: ac:78:4a:b1:96:2c:8c:f0:a2:85:14:05:4e:2c:5c:c9:93:c3: f9:27:d9:35:75:ed:3d:80:b4:01:0b:95:b7:16:60:41:3a:2c: 2a:e5:b0:3b:9a:96:0f:25:ef:4c:ac:a7:eb:0f:2b:54:f3:4f: c4:e9:0f:f2:07:b9:32:38:12:08:b8:56:f9:ed:18:f4:78:dd: 16:e1:a2:bf:da:24:7c:0d:6a:a2:fe:33:90:34:8e:9b:b9:b5: 29:50:d8:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo67gpz8+zZbUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MWFlZDdiOTUtOTAzYy00MzBjLTgyMmYtZTllNGFjZWY5N2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTF+6HxAxpyMtNckxmGTCUCDSFbo/AQ06jHT 0rYIgh3rqFDNFAeU/xLtdUDib6bXcldN3ZwY7ofn6EwDQ7NOwN3BvVNgq75NjTXC RqymLjc3RXPIfpZeWOE6bicqgfWqU5o0gDJSAueQWzvww3y5+UGlP97QcSnCEZ1e JsuzvrjIPsKOfp+qIAV22Bcg4K93Ef6F0NFz9dKV7LuDOzuiqFoTz7a/725n1d5F 5IuS6dA9HCevjLdvhcd954S/dF00NlQZ1aVqNGhYkyH8QT9vd1IDDkaw9kiBH6Xk jIukcJBCGd2xEKH8JEAw3Eu8WV6HfL7LZgPwmgp8wv5gGmotMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9qGJg4S8Camr4j79vI6fLy3/DVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDUyZjc0ZGUtODI5My0z YmI4LWJlMTgtYjQ2ZTUxYjRiMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSxrs3PUNc2f9YRNerHgY8mMDI24u39UemlDP0euwPQaS3khfi8yjHt horDlxbqClrNoTqS9ZDPNvqzgxjaKjH8bMenZ/T8Zlnbb1e+Fu7zHvTHKbC6HCsW jzNJmPN1/FjXoHIwrFXk1dSVs6yTrcHo5Lt4vFKaXEDfLHvUyPzumr4uuYdCUu5u Zqvgi+JafGRliCsNcqLVMvy88cUspxGJqax4SrGWLIzwooUUBU4sXMmTw/kn2TV1 7T2AtAELlbcWYEE6LCrlsDualg8l70ysp+sPK1TzT8TpD/IHuTI4Egi4VvntGPR4 3Rbhor/aJHwNaqL+M5A0jpu5tSlQ2I0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:42 2025 by rpki-client