$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e303c661-bdaf-359e-a2d9-d8a1052ef220.roa File: e303c661-bdaf-359e-a2d9-d8a1052ef220.roa (raw, json) Hash identifier: ex3QGZghjVOP2bkf580sdbFEbj9yjsQhrnwvV6S8So0= Subject key identifier: E8:E6:07:CD:19:F5:39:98:60:46:1A:1B:4F:0C:CB:8A:6F:64:94:0E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8C0514B20C2D87975A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e303c661-bdaf-359e-a2d9-d8a1052ef220.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8c:05:14:b2:0c:2d:87:97:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=9c547767-6352-47ed-a1fa-263ee9261d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:f9:a4:33:29:e6:55:0d:26:f7:a9:dc:63: 02:eb:ec:c5:73:40:da:3c:40:c9:57:59:71:47:44: 46:24:11:50:fa:02:73:81:c3:37:c0:22:84:f3:7d: d2:41:ea:7d:12:c3:6f:0b:b0:25:d4:59:65:d8:c5: ee:29:b8:1d:88:2b:2c:ab:1d:4b:9c:04:a3:01:26: ab:ce:90:85:c9:51:cf:2d:4f:53:ff:b1:3c:04:b4: ce:f6:ce:b6:5a:8d:93:3b:96:d7:5b:c3:a9:fd:2b: d9:2f:83:99:d6:6a:30:3b:ec:47:a9:6a:dc:78:a2: 5f:ea:16:38:39:95:0c:37:fa:33:18:2c:3f:6d:4a: 45:36:9e:41:16:b8:64:04:41:d4:9c:51:4b:d2:88: 62:7a:c9:14:39:62:ae:c3:95:0b:49:54:ee:85:45: 9c:88:47:db:96:c6:a3:27:48:1d:d5:32:da:03:b6: ad:b0:31:04:23:a7:6b:f3:0f:b7:15:a9:07:b7:6d: 35:61:c0:c1:9b:09:1f:6b:b3:4f:82:38:f2:11:42: 31:8e:67:e3:6d:be:b4:c9:fe:2e:77:da:08:fe:c0: 83:3b:ac:c7:23:7f:c3:e7:ca:17:b2:94:e4:56:26: c8:10:05:4d:83:c9:82:19:fd:62:84:d4:52:e9:36: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E6:07:CD:19:F5:39:98:60:46:1A:1B:4F:0C:CB:8A:6F:64:94:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e303c661-bdaf-359e-a2d9-d8a1052ef220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:df:78:7f:18:80:dd:48:a4:1d:9a:cc:2e:5e:e2:2e:c5:44: 60:35:e3:ae:2a:f0:e0:80:c0:2e:34:11:3a:cd:eb:64:85:d9: 42:eb:77:ed:c1:e1:14:01:70:2c:e8:1d:6b:cb:bc:f9:8a:7f: 3b:d3:b6:b3:03:2a:78:ca:40:3d:11:21:e0:3a:d3:bf:76:30: f4:2b:3e:b2:9b:c4:19:d0:15:a7:0a:f4:3f:66:0e:c2:a4:fc: ce:b8:fa:2d:af:b8:8d:dc:e3:08:d1:43:41:58:ca:9f:70:fa: 99:2e:d8:81:ce:12:ed:74:0a:e6:3f:62:b7:a7:d7:db:84:08: 85:68:46:77:39:44:cd:46:37:17:c5:f8:21:fd:8a:b7:77:83: 3e:04:e3:a9:23:7b:b1:99:8c:d3:05:93:e8:c2:08:b4:64:71: 0b:48:a7:30:9d:92:6c:b3:49:54:6f:73:5c:f1:e9:a3:9f:3c: 5b:4c:4f:0d:55:f5:25:0d:f1:c6:86:4a:1e:0e:f4:87:8d:ef: 20:48:86:17:0e:11:04:5a:ac:95:aa:9f:71:6e:f6:e3:59:c4: 27:27:12:da:aa:19:3b:ba:d8:28:d3:59:5e:d5:89:9b:f0:6c: 23:f6:84:36:d0:76:b9:bf:11:cb:ab:8d:7a:41:1c:a2:37:7d: 22:5b:1c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGowFFLIMLYeXWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk OWM1NDc3NjctNjM1Mi00N2VkLWExZmEtMjYzZWU5MjYxZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmv5pDMp5lUNJvep3GMC6+zFc0DaPEDJV1lx R0RGJBFQ+gJzgcM3wCKE833SQep9EsNvC7Al1Fll2MXuKbgdiCssqx1LnASjASar zpCFyVHPLU9T/7E8BLTO9s62Wo2TO5bXW8Op/SvZL4OZ1mowO+xHqWrceKJf6hY4 OZUMN/ozGCw/bUpFNp5BFrhkBEHUnFFL0ohieskUOWKuw5ULSVTuhUWciEfblsaj J0gd1TLaA7atsDEEI6dr8w+3FakHt201YcDBmwkfa7NPgjjyEUIxjmfjbb60yf4u d9oI/sCDO6zHI3/D58oXspTkVibIEAVNg8mCGf1ihNRS6TY1rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjmB80Z9TmYYEYaG08My4pvZJQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTMwM2M2NjEtYmRhZi0z NTllLWEyZDktZDhhMTA1MmVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELfeH8YgN1IpB2azC5e4i7FRGA1464q8OCAwC40ETrN62SF2ULrd+3B 4RQBcCzoHWvLvPmKfzvTtrMDKnjKQD0RIeA60792MPQrPrKbxBnQFacK9D9mDsKk /M64+i2vuI3c4wjRQ0FYyp9w+pku2IHOEu10CuY/Yren19uECIVoRnc5RM1GNxfF +CH9ird3gz4E46kje7GZjNMFk+jCCLRkcQtIpzCdkmyzSVRvc1zx6aOfPFtMTw1V 9SUN8caGSh4O9IeN7yBIhhcOEQRarJWqn3Fu9uNZxCcnEtqqGTu62CjTWV7ViZvw bCP2hDbQdrm/EcurjXpBHKI3fSJbHO4= -----END CERTIFICATE-----Generated at Thu Jun 5 19:00:33 2025 by rpki-client