$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4cdd618-ab61-321e-9f4d-6184ac67234f.roa File: e4cdd618-ab61-321e-9f4d-6184ac67234f.roa (raw, json) Hash identifier: sfP+39r3jS8enerW9VUZxMTbWEfQFUIm6xRsZ9KNVyM= Subject key identifier: BF:BC:52:31:EF:0B:F4:85:A8:BA:D3:59:94:FB:93:B1:62:E5:78:DF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285848ADC6046EF5A8B2685CD85CC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4cdd618-ab61-321e-9f4d-6184ac67234f.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 13335 IP address blocks: 172.71.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:04:6e:f5:a8:b2:68:5c:d8:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=4fe9dc7d-31d5-4fef-b228-177e08ad01af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:92:4d:df:cc:6b:e6:db:aa:f8:0d:14:37: b4:a6:48:fe:8a:65:49:7f:dd:9c:73:6e:2d:96:d6: 7c:a7:8f:12:51:28:72:bf:06:df:dd:24:e5:ca:33: c3:a4:68:50:63:ff:f2:53:3c:f7:3d:2a:53:6d:71: fc:10:32:f9:3f:08:4a:ed:e9:d5:ed:2c:74:ad:2d: 6e:66:dc:c9:9b:c4:8d:2c:75:8a:bf:b0:af:1a:0f: a7:fd:da:66:c0:ce:ab:6f:fc:34:7a:b7:cc:83:3d: 4f:3c:5c:9a:b8:18:6c:65:90:fc:8a:76:86:3e:fb: ce:70:75:56:75:51:7b:90:c1:63:f8:28:d1:be:4d: 9e:82:48:da:1e:a2:38:75:11:e4:22:d1:0f:df:de: 45:b4:1c:b8:df:5a:df:92:64:b5:1e:12:04:bd:59: a7:19:e0:38:6d:69:0f:d4:2b:eb:17:9f:93:d7:d8: 5e:aa:aa:c9:f6:8d:ff:f9:d9:54:65:a1:ba:7b:3b: c0:cc:4d:82:13:28:f8:76:bc:77:89:8b:92:b6:48: e7:cf:6c:01:49:d6:32:3f:82:d1:97:57:6c:3b:8d: 1c:75:20:a4:3a:8f:fe:69:d8:d0:5e:2a:60:74:ff: 42:a6:da:8a:4c:3a:0c:a3:1a:67:73:e2:4b:00:0e: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BC:52:31:EF:0B:F4:85:A8:BA:D3:59:94:FB:93:B1:62:E5:78:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e4cdd618-ab61-321e-9f4d-6184ac67234f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ee:6d:29:7a:30:85:1a:90:83:dc:c9:ea:22:0e:b5:7d:ac: aa:02:e9:7f:44:3f:0b:fe:b7:b5:6e:a9:c3:a9:fc:30:81:d1: 58:4e:02:63:73:34:3b:12:53:91:e4:da:b2:ce:10:f8:61:a7: 5c:92:ee:34:6f:7a:e9:41:61:65:29:60:eb:59:cf:b6:d2:ed: 9e:3b:fa:1a:c6:c0:a0:28:77:8a:d7:52:eb:0d:f8:07:dd:29: 05:5a:79:bd:ef:a6:7e:36:da:24:6b:6b:6c:32:f3:80:13:2e: 1c:b9:01:42:9c:77:e3:02:6e:67:5f:0a:16:bc:36:e2:86:82: 67:9e:7c:59:39:5e:0b:57:b9:2f:20:70:01:99:5a:53:88:bd: b3:32:05:8c:8b:fc:51:2b:04:42:8e:fb:7e:9b:c3:ba:ad:54: 9b:f6:89:1d:f6:9c:22:02:31:95:81:f3:30:d4:0e:15:87:25: c8:6b:72:8b:c2:d6:51:25:c8:65:c4:71:76:22:f3:80:c9:54: a8:4c:7d:a3:d1:4b:5d:32:5d:16:22:4a:53:d2:ef:74:be:2b: b4:3c:14:ca:d0:02:6f:4a:cc:3e:19:47:a2:b9:2b:6a:84:93: c8:df:8a:ba:0c:6c:54:0d:e8:ee:79:c7:55:0f:d2:6f:52:65: e1:66:71:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgRu9aiyaFzYXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk NGZlOWRjN2QtMzFkNS00ZmVmLWIyMjgtMTc3ZTA4YWQwMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtOSTd/Ma+bbqvgNFDe0pkj+imVJf92cc24t ltZ8p48SUShyvwbf3STlyjPDpGhQY//yUzz3PSpTbXH8EDL5PwhK7enV7Sx0rS1u ZtzJm8SNLHWKv7CvGg+n/dpmwM6rb/w0erfMgz1PPFyauBhsZZD8inaGPvvOcHVW dVF7kMFj+CjRvk2egkjaHqI4dRHkItEP395FtBy431rfkmS1HhIEvVmnGeA4bWkP 1CvrF5+T19heqqrJ9o3/+dlUZaG6ezvAzE2CEyj4drx3iYuStkjnz2wBSdYyP4LR l1dsO40cdSCkOo/+adjQXipgdP9CptqKTDoMoxpnc+JLAA5zPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+8UjHvC/SFqLrTWZT7k7Fi5XjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTRjZGQ2MTgtYWI2MS0z MjFlLTlmNGQtNjE4NGFjNjcyMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXubSl6MIUakIPcyeoiDrV9rKoC6X9EPwv+t7VuqcOp/DCB0VhOAmNz NDsSU5Hk2rLOEPhhp1yS7jRveulBYWUpYOtZz7bS7Z47+hrGwKAod4rXUusN+Afd KQVaeb3vpn422iRra2wy84ATLhy5AUKcd+MCbmdfCha8NuKGgmeefFk5XgtXuS8g cAGZWlOIvbMyBYyL/FErBEKO+36bw7qtVJv2iR32nCICMZWB8zDUDhWHJchrcovC 1lElyGXEcXYi84DJVKhMfaPRS10yXRYiSlPS73S+K7Q8FMrQAm9KzD4ZR6K5K2qE k8jfiroMbFQN6O55x1UP0m9SZeFmcZY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:17:57 2025 by rpki-client