$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e535e3ad-72b4-3284-81a1-3669b6cee67a.roa File: e535e3ad-72b4-3284-81a1-3669b6cee67a.roa (raw, json) Hash identifier: pwe+vUEEF1HPQ1OfX3+Mk2M/ISqq5+gjzPzUro7UIXY= Subject key identifier: 72:B2:E1:72:FF:E6:B8:B7:EE:BD:53:3C:CB:CD:CA:D7:7A:F9:3A:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8B53D3165215234D9C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e535e3ad-72b4-3284-81a1-3669b6cee67a.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8b:53:d3:16:52:15:23:4d:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=1f9a7e98-0d7d-4099-8140-98272defa483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:8e:b2:aa:fd:4f:3d:8c:eb:e8:7a:86:b7: 24:1b:8c:45:93:4c:13:07:1f:6a:15:fb:72:46:09: 8e:60:69:04:f5:54:74:d8:11:ad:2a:90:58:b8:98: 15:3a:79:f5:63:e7:e1:69:e6:8f:cf:89:aa:ab:c7: 79:f4:80:2e:45:bb:86:09:31:ee:bb:ae:f1:5d:b6: c9:6a:74:b8:65:35:23:b0:fd:cd:4e:b7:aa:e9:2e: 94:ff:98:4f:03:7b:28:7c:0f:e6:a6:da:c1:af:33: 97:c0:e4:01:21:28:0b:a0:f1:7f:67:bb:6a:4b:ef: 39:12:3a:c2:96:5b:1e:9f:30:fd:aa:95:25:3a:51: e2:95:39:40:48:d3:71:46:98:fd:99:59:0d:cf:a8: b8:e6:ab:cc:e7:5c:36:07:71:d3:5e:dd:e5:48:04: 2b:38:bf:a3:a8:d3:e0:5d:8d:e5:f7:a6:a4:89:fe: c7:14:51:6b:83:3a:32:b4:c0:f9:15:75:31:c0:71: a7:f0:16:49:a5:28:3c:d8:a6:8e:ed:81:11:a1:58: 06:5b:b6:4e:b6:1d:be:44:37:d2:03:d9:27:98:53: d4:e8:5b:d9:bc:45:12:28:0c:92:db:6c:6d:15:2a: b7:6c:45:6e:31:79:27:a6:06:18:10:75:77:92:2a: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B2:E1:72:FF:E6:B8:B7:EE:BD:53:3C:CB:CD:CA:D7:7A:F9:3A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e535e3ad-72b4-3284-81a1-3669b6cee67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5e:2b:1a:d6:9d:e2:c9:86:a3:a2:a3:80:cb:19:cf:ad:da: 91:d9:cf:bc:26:4f:35:14:c7:a0:ff:a5:b8:99:06:42:aa:27: 38:54:31:43:2e:56:ae:f4:13:52:6a:1d:2d:ac:61:1b:cd:e5: 88:e1:5f:8e:34:2a:df:94:31:7c:2c:24:9f:54:e0:b5:0c:2e: f7:6d:ce:d7:c0:c5:71:c2:0b:e4:4c:96:06:99:f5:14:5b:73: 61:0b:f7:61:8c:1d:be:d8:16:2d:65:02:45:a9:51:a9:cb:a9: 89:58:4b:b6:33:5f:8b:9d:6a:0f:34:0e:3b:09:4f:4e:62:0b: ce:03:08:60:ce:a2:5d:ff:6b:ae:9a:cc:ee:99:95:75:c5:ea: a5:23:f2:0c:8a:b7:1f:91:ad:01:91:c6:ea:e4:5f:2b:f9:81: 9b:ae:d9:a3:87:cd:a6:19:f8:39:e3:73:6c:c0:6a:91:da:9f: 5b:cb:77:ba:a4:dc:8d:3d:78:6b:c5:1b:f7:16:7b:98:0e:cb: 2a:d1:54:d8:be:bd:25:3a:f8:06:2a:7d:a2:75:77:6d:1d:f7: 8f:98:df:90:4c:76:52:50:9c:a3:46:00:d9:ec:66:f0:48:48: 78:a2:eb:f1:1a:87:3d:0d:0e:f4:89:59:b4:d3:0f:ef:52:93: 46:4e:e5:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGotT0xZSFSNNnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MWY5YTdlOTgtMGQ3ZC00MDk5LTgxNDAtOTgyNzJkZWZhNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JiOsqr9Tz2M6+h6hrckG4xFk0wTBx9qFfty RgmOYGkE9VR02BGtKpBYuJgVOnn1Y+fhaeaPz4mqq8d59IAuRbuGCTHuu67xXbbJ anS4ZTUjsP3NTreq6S6U/5hPA3sofA/mptrBrzOXwOQBISgLoPF/Z7tqS+85EjrC llsenzD9qpUlOlHilTlASNNxRpj9mVkNz6i45qvM51w2B3HTXt3lSAQrOL+jqNPg XY3l96akif7HFFFrgzoytMD5FXUxwHGn8BZJpSg82KaO7YERoVgGW7ZOth2+RDfS A9knmFPU6FvZvEUSKAyS22xtFSq3bEVuMXknpgYYEHV3kiqtiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKy4XL/5ri37r1TPMvNytd6+TrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTUzNWUzYWQtNzJiNC0z Mjg0LTgxYTEtMzY2OWI2Y2VlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNeKxrWneLJhqOio4DLGc+t2pHZz7wmTzUUx6D/pbiZBkKqJzhUMUMu Vq70E1JqHS2sYRvN5YjhX440Kt+UMXwsJJ9U4LUMLvdtztfAxXHCC+RMlgaZ9RRb c2EL92GMHb7YFi1lAkWpUanLqYlYS7YzX4udag80DjsJT05iC84DCGDOol3/a66a zO6ZlXXF6qUj8gyKtx+RrQGRxurkXyv5gZuu2aOHzaYZ+Dnjc2zAapHan1vLd7qk 3I09eGvFG/cWe5gOyyrRVNi+vSU6+AYqfaJ1d20d94+Y35BMdlJQnKNGANnsZvBI SHii6/Eahz0NDvSJWbTTD+9Sk0ZO5Wk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:22:35 2025 by rpki-client