$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa File: dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa (raw, json) Hash identifier: I/9bXjn2lXW1YFG3e1THATNW4zBAUF0istIBAeI6amw= Subject key identifier: AD:17:E2:1D:FF:EA:C6:FA:5E:A6:C8:83:85:8D:F1:28:14:3C:3A:31 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490F7BFA950D9078B7FC760B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:fa:95:0d:90:78:b7:fc:76:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=ab798101-07e8-4ee6-b5e7-a7918407fe91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:eb:c0:b9:0b:8f:d8:7e:58:44:10:69:04:57: 7b:e3:bb:db:60:83:36:a8:8f:38:29:3c:50:89:d9: b5:9e:77:0d:3a:3e:39:84:de:45:26:10:54:98:81: 02:c7:56:5c:80:37:0a:e0:8e:41:3c:cb:52:5f:51: 6d:8c:ac:6a:9b:69:d1:2e:4a:74:b5:de:31:bd:5b: 5f:d6:4e:5c:0b:fb:e5:dc:2d:51:5c:03:38:2a:fe: e8:a9:b9:e5:ce:18:00:57:50:4d:8c:a1:ee:f8:7c: c3:87:bf:da:2e:8e:02:43:71:81:0c:41:e4:7e:18: fc:ff:ef:fc:2e:bc:03:0a:f3:ab:5f:04:24:5d:52: 54:86:0f:0b:98:f6:b9:7f:c9:60:13:e7:a1:3d:ce: e4:4c:ad:59:79:c5:dd:bb:72:c2:57:e1:05:0a:2d: 5a:3a:5f:a9:1f:c1:8a:4d:4c:ab:42:18:46:70:78: 39:f2:5f:9d:3b:6d:ec:68:ee:2c:be:5e:48:c7:3b: 4c:af:a2:f9:95:3c:ad:53:bc:06:be:95:db:5b:16: 9f:85:5a:f9:7b:6d:bc:d8:10:db:51:cd:64:ce:58: 22:2a:c4:dc:7e:ed:2e:4a:59:63:ce:3a:f8:96:7e: 15:5b:30:32:a7:78:1a:39:02:39:5b:21:7b:41:cc: db:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:17:E2:1D:FF:EA:C6:FA:5E:A6:C8:83:85:8D:F1:28:14:3C:3A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b1:fc:bc:e2:8c:47:22:fe:a4:f4:d5:7e:d2:87:b1:51:e9: b0:98:ed:c2:57:04:87:0e:15:17:51:af:75:c4:d2:83:39:cf: 6d:87:af:a5:90:01:9f:d6:26:2b:73:1d:49:86:83:a5:cb:55: d7:67:b8:e2:e8:cf:fc:f1:82:22:a0:28:13:ca:75:91:90:60: 32:29:fc:ae:a5:fb:3c:fc:98:35:6f:17:91:35:9c:6d:57:6e: 35:3c:46:af:1a:ee:67:58:a2:2c:21:26:e7:94:e0:cb:54:17: 74:0b:4d:30:50:8e:df:b7:e1:e4:45:36:f5:eb:36:9a:4b:fd: 40:a7:64:9e:01:df:5e:4b:c7:33:e4:43:1e:ee:35:a1:93:91: c6:cf:81:a8:a4:36:09:0b:a1:fe:7a:fd:62:8c:3f:1b:8e:b3: 8b:66:ec:25:cc:d3:e5:2b:02:ee:28:73:64:9f:a8:c6:6c:a0: 31:69:42:28:1b:24:e2:7d:fd:d0:69:f3:c2:88:a8:1a:e0:62: 74:aa:84:64:45:83:4d:9f:9f:f1:94:da:2c:a1:70:10:38:ff: b7:3f:3f:29:b9:8e:a2:6f:8d:eb:56:48:b9:b4:c7:0a:f5:ea: 01:e3:fb:f3:ea:c3:be:04:72:a3:03:44:13:94:ad:60:69:08: fe:18:78:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/qVDZB4t/x2C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk YWI3OTgxMDEtMDdlOC00ZWU2LWI1ZTctYTc5MTg0MDdmZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOvAuQuP2H5YRBBpBFd747vbYIM2qI84KTxQ idm1nncNOj45hN5FJhBUmIECx1ZcgDcK4I5BPMtSX1FtjKxqm2nRLkp0td4xvVtf 1k5cC/vl3C1RXAM4Kv7oqbnlzhgAV1BNjKHu+HzDh7/aLo4CQ3GBDEHkfhj8/+/8 LrwDCvOrXwQkXVJUhg8LmPa5f8lgE+ehPc7kTK1ZecXdu3LCV+EFCi1aOl+pH8GK TUyrQhhGcHg58l+dO23saO4svl5IxztMr6L5lTytU7wGvpXbWxafhVr5e2282BDb Uc1kzlgiKsTcfu0uSlljzjr4ln4VWzAyp3gaOQI5WyF7QczbswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0X4h3/6sb6XqbIg4WN8SgUPDoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGZiYThlNWEtMDI0OC0z M2NiLWJjN2YtZjNkZDEyYWYyNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABux/LzijEci/qT01X7Sh7FR6bCY7cJXBIcOFRdRr3XE0oM5z22Hr6WQ AZ/WJitzHUmGg6XLVddnuOLoz/zxgiKgKBPKdZGQYDIp/K6l+zz8mDVvF5E1nG1X bjU8Rq8a7mdYoiwhJueU4MtUF3QLTTBQjt+34eRFNvXrNppL/UCnZJ4B315LxzPk Qx7uNaGTkcbPgaikNgkLof56/WKMPxuOs4tm7CXM0+UrAu4oc2SfqMZsoDFpQigb JOJ9/dBp88KIqBrgYnSqhGRFg02fn/GU2iyhcBA4/7c/Pym5jqJvjetWSLm0xwr1 6gHj+/Pqw74EcqMDRBOUrWBpCP4YeJ0= -----END CERTIFICATE-----Generated at Sat Apr 5 09:54:56 2025 by rpki-client