$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2ec1719-bcd3-34dd-a231-3e2a5e585d5f.roa File: e2ec1719-bcd3-34dd-a231-3e2a5e585d5f.roa (raw, json) Hash identifier: fPrRHvq3N5NQvtexiAl9p0rpRQUvaT/Q5qxus2g3Jlw= Subject key identifier: 3B:9F:93:56:3B:C8:19:7A:DF:99:8C:AB:68:E6:6F:5C:DC:07:DE:74 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550BBBCB31C92D9BCCCC40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2ec1719-bcd3-34dd-a231-3e2a5e585d5f.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.71.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0b:bb:cb:31:c9:2d:9b:cc:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=1c368ff4-5545-47bf-85fd-d52c7117019f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:b2:6f:57:dc:32:c5:ec:0e:ac:41:f4:79: 5d:e2:cf:23:4f:bc:7f:62:8e:71:ec:47:9f:b2:3f: c6:ba:a4:c8:0b:53:79:23:ee:55:46:aa:fd:c9:3b: 81:4b:93:00:8b:bf:20:42:ca:3b:e8:b3:94:da:5c: 8c:d7:0f:1e:8f:fc:81:92:71:85:50:f0:09:09:af: 77:99:9c:37:10:4b:7a:5e:98:71:41:b7:0a:8e:da: a2:f3:9b:65:3d:29:cb:1d:2a:65:65:6b:b4:77:da: 85:02:90:b9:2a:57:d4:0d:30:f2:13:c3:66:3f:ee: cf:0a:7a:af:54:a5:e2:80:e5:fc:79:6b:1c:69:c1: 68:16:8b:ee:5a:af:f8:c3:9d:b2:99:45:16:12:70: 06:62:5c:e6:b2:82:45:b4:ce:d5:22:eb:56:c7:16: 89:9c:49:8d:ba:cc:ce:09:0d:f5:52:16:f2:13:09: 83:07:04:ee:65:ee:3c:a6:aa:02:94:2d:88:56:63: 73:7d:d8:de:a3:fa:6a:36:c4:7b:f7:f2:82:bc:27: 18:fe:3b:ae:c6:a1:bb:86:c8:cf:c5:42:a9:4d:e0: a0:46:26:5a:ce:7f:57:66:a9:6d:b6:01:08:0d:dd: 84:67:24:de:7b:c7:9a:1f:ca:09:1f:0d:c0:0e:e6: 1b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9F:93:56:3B:C8:19:7A:DF:99:8C:AB:68:E6:6F:5C:DC:07:DE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2ec1719-bcd3-34dd-a231-3e2a5e585d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:70:c2:3e:4e:9a:2b:42:fe:0b:da:5a:b3:b9:79:10:89:30: 29:63:e4:66:21:21:b9:d1:80:32:67:91:88:13:53:7e:4b:b3: 79:8b:f1:10:d4:74:73:b8:47:fb:1c:be:ae:f0:7d:c6:28:b0: 54:87:c6:f1:ed:ce:08:d5:84:b4:a3:40:14:a6:13:31:13:81: f2:22:95:f3:39:ec:f6:ad:ab:43:3c:26:2c:d8:a2:52:63:fc: 84:c1:63:69:2a:60:63:f1:4d:e1:0b:c4:eb:62:24:25:16:0a: b2:85:a9:8a:ce:a0:73:98:41:f5:17:36:d4:48:23:8f:07:c3: 0b:fa:9a:e3:94:ee:31:f3:48:72:7f:81:0f:96:60:6a:6f:0f: fa:57:e6:77:19:ea:dc:b8:86:9b:42:23:29:fa:a2:e6:0c:9f: ff:de:b2:cb:25:12:0a:02:ea:99:03:84:f9:f8:53:64:91:63: dd:35:64:64:da:35:99:04:7b:61:b8:36:24:a7:8a:dc:9f:3f: bb:12:8f:12:43:26:07:99:51:16:e7:3b:b4:f3:fc:32:c2:bd: 15:55:e7:50:d6:8c:16:f2:5c:b8:71:01:a8:d6:c0:84:36:3e: af:59:39:29:a3:53:d4:44:de:e0:f5:81:d4:6f:95:05:d7:ab: 26:34:88:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQu7yzHJLZvMzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MWMzNjhmZjQtNTU0NS00N2JmLTg1ZmQtZDUyYzcxMTcwMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziWyb1fcMsXsDqxB9Hld4s8jT7x/Yo5x7Eef sj/GuqTIC1N5I+5VRqr9yTuBS5MAi78gQso76LOU2lyM1w8ej/yBknGFUPAJCa93 mZw3EEt6XphxQbcKjtqi85tlPSnLHSplZWu0d9qFApC5KlfUDTDyE8NmP+7PCnqv VKXigOX8eWscacFoFovuWq/4w52ymUUWEnAGYlzmsoJFtM7VIutWxxaJnEmNuszO CQ31UhbyEwmDBwTuZe48pqoClC2IVmNzfdjeo/pqNsR79/KCvCcY/juuxqG7hsjP xUKpTeCgRiZazn9XZqlttgEIDd2EZyTee8eaH8oJHw3ADuYb2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDufk1Y7yBl635mMq2jmb1zcB950MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTJlYzE3MTktYmNkMy0z NGRkLWEyMzEtM2UyYTVlNTg1ZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtwwj5OmitC/gvaWrO5eRCJMClj5GYhIbnRgDJnkYgTU35Ls3mL8RDU dHO4R/scvq7wfcYosFSHxvHtzgjVhLSjQBSmEzETgfIilfM57Patq0M8JizYolJj /ITBY2kqYGPxTeELxOtiJCUWCrKFqYrOoHOYQfUXNtRII48Hwwv6muOU7jHzSHJ/ gQ+WYGpvD/pX5ncZ6ty4hptCIyn6ouYMn//essslEgoC6pkDhPn4U2SRY901ZGTa NZkEe2G4NiSnityfP7sSjxJDJgeZURbnO7Tz/DLCvRVV51DWjBbyXLhxAajWwIQ2 Pq9ZOSmjU9RE3uD1gdRvlQXXqyY0iGQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:14 2025 by rpki-client