$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa File: dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa (raw, json) Hash identifier: IhDneVEPIzq7u5IV6PALPzI3Bwq+HAw6PBVVk6qiX20= Subject key identifier: EC:98:A2:CE:43:DB:D2:F7:AC:39:2D:05:1D:D8:F9:B6:90:CA:97:17 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849EEB50F6173610C763CD7F380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 13335 IP address blocks: 172.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:0f:61:73:61:0c:76:3c:d7:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=79477fac-282d-46ac-8d7e-9ef91b80e30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:42:e0:b7:a3:da:eb:5f:1e:e3:19:f4:39: 57:fb:08:0c:45:fd:7f:43:b2:aa:19:90:03:71:e6: 72:c7:c4:87:b4:1b:24:a4:e6:b3:1f:2c:15:c6:05: 77:ab:87:41:1f:f4:b3:43:a8:c3:07:52:15:e5:62: 96:8a:0e:dd:35:bd:58:29:4e:3b:ae:96:ca:85:09: 4d:aa:21:d3:04:8a:d6:1d:3b:4a:b3:9d:e4:99:7d: 2e:70:00:c1:aa:de:e6:8c:b6:25:f1:2c:21:62:39: f3:46:3d:52:b5:ae:e9:43:78:f8:2d:04:c7:ed:53: b1:e4:d6:31:84:1a:a7:58:d9:e1:fa:81:64:42:78: c6:1f:d8:17:c1:99:98:67:60:6c:b0:b6:d2:dd:83: 2c:db:6c:20:3a:5e:5a:db:db:ce:e1:14:e2:43:a2: 7f:ad:1f:22:b0:28:fc:7f:34:fc:a0:c0:9c:cc:ca: f6:23:e9:53:ab:6f:6e:3b:a3:f7:a2:57:a0:80:d7: 0b:f4:f0:74:23:29:f2:ee:7e:4a:63:94:85:a8:b2: d8:3f:62:21:99:21:95:1d:c5:e7:c4:a6:d4:e7:8f: a0:40:a2:ca:1f:7e:b0:15:f8:34:a4:6b:e8:f7:21: d1:b7:45:2b:df:f5:75:83:29:79:25:04:97:cc:21: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:98:A2:CE:43:DB:D2:F7:AC:39:2D:05:1D:D8:F9:B6:90:CA:97:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:2b:e9:5f:a1:97:4f:59:30:21:85:3e:3e:80:03:23:4d:e0: 35:bd:db:11:1d:30:20:f3:1d:a6:8e:8d:7b:4f:5d:6f:9b:df: 7f:96:14:7a:91:16:3a:6a:11:1f:2a:04:2f:c0:bd:34:f9:b6: ec:19:77:d2:e2:8c:37:07:83:33:f3:15:a8:c9:ff:da:bf:15: a8:48:46:58:bd:49:91:01:ee:ac:af:c1:40:d0:dd:d4:15:f2: d7:8d:39:1c:f7:28:25:d0:ac:8e:5f:07:17:8f:7a:ed:98:d0: 8a:11:65:68:90:f3:03:e5:de:7d:d3:c1:f8:fc:8d:b9:15:81: e7:49:08:2d:04:14:dd:b0:ff:11:ee:2f:3e:53:2b:99:d0:51: 42:f9:3b:d4:82:28:77:44:3a:ce:4b:96:10:a5:08:c7:8e:81: 18:0b:e6:cf:be:23:98:10:96:93:cb:97:ef:39:ea:58:02:98: 83:34:80:43:db:14:6b:e9:d7:5f:98:0c:c1:12:62:dd:96:00: 73:2c:84:2c:5d:1c:fe:f5:84:08:fc:1d:e2:b0:b0:e6:03:71: 47:12:56:f1:cd:04:a6:35:9d:58:40:a8:96:8b:83:86:b6:b1: 6a:4f:1c:e1:e0:5b:dd:e8:4e:d3:a4:8c:07:66:e5:77:6c:a9: 60:6f:2d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQ9hc2EMdjzX84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk Nzk0NzdmYWMtMjgyZC00NmFjLThkN2UtOWVmOTFiODBlMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMBC4Lej2utfHuMZ9DlX+wgMRf1/Q7KqGZAD ceZyx8SHtBskpOazHywVxgV3q4dBH/SzQ6jDB1IV5WKWig7dNb1YKU47rpbKhQlN qiHTBIrWHTtKs53kmX0ucADBqt7mjLYl8SwhYjnzRj1Sta7pQ3j4LQTH7VOx5NYx hBqnWNnh+oFkQnjGH9gXwZmYZ2BssLbS3YMs22wgOl5a29vO4RTiQ6J/rR8isCj8 fzT8oMCczMr2I+lTq29uO6P3oleggNcL9PB0Iyny7n5KY5SFqLLYP2IhmSGVHcXn xKbU54+gQKLKH36wFfg0pGvo9yHRt0Ur3/V1gyl5JQSXzCFlgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyYos5D29L3rDktBR3Y+baQypcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGZiYThlNWEtMDI0OC0z M2NiLWJjN2YtZjNkZDEyYWYyNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAr6V+hl09ZMCGFPj6AAyNN4DW92xEdMCDzHaaOjXtPXW+b33+WFHqR FjpqER8qBC/AvTT5tuwZd9LijDcHgzPzFajJ/9q/FahIRli9SZEB7qyvwUDQ3dQV 8teNORz3KCXQrI5fBxePeu2Y0IoRZWiQ8wPl3n3Twfj8jbkVgedJCC0EFN2w/xHu Lz5TK5nQUUL5O9SCKHdEOs5LlhClCMeOgRgL5s++I5gQlpPLl+856lgCmIM0gEPb FGvp11+YDMESYt2WAHMshCxdHP71hAj8HeKwsOYDcUcSVvHNBKY1nVhAqJaLg4a2 sWpPHOHgW93oTtOkjAdm5XdsqWBvLd8= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:05 2025 by rpki-client