$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e12b1e62-3444-35ae-96c5-9be155fe3860.roa File: e12b1e62-3444-35ae-96c5-9be155fe3860.roa (raw, json) Hash identifier: b1KN59DA3eqSHTpEriqSN2MZLVAAB2TmIj96h78ws0s= Subject key identifier: 5A:27:72:90:4E:E6:4A:D9:B6:94:23:D5:A0:88:11:F7:58:81:20:5E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFCFD0E729D8384B0414E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e12b1e62-3444-35ae-96c5-9be155fe3860.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.71.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:cf:d0:e7:29:d8:38:4b:04:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=6a7ff0f0-d35f-41e4-a7c4-b234f6a52c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:b0:0b:16:d6:eb:ba:0a:c2:21:ef:e7:8b: 3f:55:be:f7:12:8c:12:d6:f5:c3:ec:42:aa:db:04: 47:b8:2c:7c:d7:b9:d6:90:d0:b9:a3:f2:9f:f1:e6: 73:c6:a5:59:5b:a5:d3:c5:89:76:46:59:75:ff:3e: a2:e2:fa:78:eb:09:86:28:a5:ef:83:59:a6:e5:a6: 00:e4:fb:10:dc:5a:fa:7c:c5:47:85:5f:e5:55:dc: f5:bd:35:8c:b0:e4:52:17:43:9b:1a:b7:a4:2a:b9: cf:f2:44:bf:98:62:af:fd:b2:0e:c6:5c:1f:cf:00: 01:64:37:7d:b4:58:f8:81:6a:e2:7c:50:ee:de:d2: 72:4b:05:53:d6:be:2c:3f:eb:23:24:80:3f:87:2e: b4:fb:75:fd:d3:e6:e1:b7:1f:a9:41:aa:34:30:e5: 32:0b:2c:2b:2c:0a:8d:b0:a8:9a:07:c9:c0:e7:f1: a7:01:21:7b:c4:96:ab:65:a0:26:9b:e6:38:a6:50: 2c:2c:c4:c4:3f:47:3b:5f:01:8f:63:0f:d1:2c:fa: 50:4c:c6:7c:53:a8:a3:ea:46:1b:22:7b:2a:40:26: 32:ad:88:07:16:02:7c:d9:72:66:b5:61:5f:ef:04: ec:51:ff:4f:e6:54:9d:13:c4:2d:45:9a:bf:99:a8: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:27:72:90:4E:E6:4A:D9:B6:94:23:D5:A0:88:11:F7:58:81:20:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e12b1e62-3444-35ae-96c5-9be155fe3860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b3:42:8d:c1:85:b6:24:ce:61:ab:42:29:bf:9a:c4:68:ad: a7:73:10:11:20:26:ff:ba:90:a0:03:34:32:7d:7a:24:38:bd: 9f:d8:f5:9f:b3:77:d6:bc:cb:95:6a:48:bd:c1:6a:39:df:d8: b3:bb:40:af:e7:62:cd:50:55:54:c9:cc:bc:0e:19:9a:a9:fd: ff:4f:a1:e4:7a:bd:5c:58:f5:0f:bc:75:58:61:be:57:fd:d9: b9:ce:4c:b5:05:24:e4:4a:d3:59:99:d7:31:2a:9e:19:22:dd: 47:bd:16:c6:1f:d1:f4:bc:d9:b1:b0:b3:71:7d:e7:e1:49:d4: 84:d2:9f:7d:17:29:81:d2:91:b8:b3:1c:47:3b:32:8b:fe:f5: 84:91:cf:dc:41:0d:c1:13:ae:12:b9:b3:35:35:a3:5a:03:f6: 69:1c:79:26:a1:ad:76:87:f5:a0:a1:5f:fe:ce:ec:a5:f2:b8: 37:f0:f9:a3:f0:30:67:ff:e7:54:5a:71:a6:08:ca:f5:51:27: d7:30:2c:55:84:cd:7c:28:77:19:8e:c4:3c:40:ff:6c:07:05: 09:02:d9:3b:b0:c1:91:61:91:44:d7:a2:07:56:61:4f:ef:67: d2:ff:f4:53:85:97:0d:08:1c:f4:de:36:22:b4:8c:dd:73:be: 43:0b:39:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78/Q5ynYOEsEFOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NmE3ZmYwZjAtZDM1Zi00MWU0LWE3YzQtYjIzNGY2YTUyYzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwywCxbW67oKwiHv54s/Vb73EowS1vXD7EKq 2wRHuCx817nWkNC5o/Kf8eZzxqVZW6XTxYl2Rll1/z6i4vp46wmGKKXvg1mm5aYA 5PsQ3Fr6fMVHhV/lVdz1vTWMsORSF0ObGrekKrnP8kS/mGKv/bIOxlwfzwABZDd9 tFj4gWrifFDu3tJySwVT1r4sP+sjJIA/hy60+3X90+bhtx+pQao0MOUyCywrLAqN sKiaB8nA5/GnASF7xJarZaAmm+Y4plAsLMTEP0c7XwGPYw/RLPpQTMZ8U6ij6kYb InsqQCYyrYgHFgJ82XJmtWFf7wTsUf9P5lSdE8QtRZq/mahW9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoncpBO5krZtpQj1aCIEfdYgSBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTEyYjFlNjItMzQ0NC0z NWFlLTk2YzUtOWJlMTU1ZmUzODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2zQo3BhbYkzmGrQim/msRoradzEBEgJv+6kKADNDJ9eiQ4vZ/Y9Z+z d9a8y5VqSL3Bajnf2LO7QK/nYs1QVVTJzLwOGZqp/f9PoeR6vVxY9Q+8dVhhvlf9 2bnOTLUFJORK01mZ1zEqnhki3Ue9FsYf0fS82bGws3F95+FJ1ITSn30XKYHSkbiz HEc7Mov+9YSRz9xBDcETrhK5szU1o1oD9mkceSahrXaH9aChX/7O7KXyuDfw+aPw MGf/51RacaYIyvVRJ9cwLFWEzXwodxmOxDxA/2wHBQkC2TuwwZFhkUTXogdWYU/v Z9L/9FOFlw0IHPTeNiK0jN1zvkMLOfs= -----END CERTIFICATE-----Generated at Fri Jun 6 17:11:14 2025 by rpki-client