$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb1ed61e-685b-333c-82f5-dbd9b81b69b8.roa File: eb1ed61e-685b-333c-82f5-dbd9b81b69b8.roa (raw, json) Hash identifier: psIA6dspa4w0+tQzd43QlYwIpAJSgaIJ8cgbjt/hi6s= Subject key identifier: 23:C6:B8:BE:3E:D6:67:5D:2E:9E:CB:DF:9F:8D:90:FC:11:7E:0D:3D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E1743D65A661DD3C8A5E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb1ed61e-685b-333c-82f5-dbd9b81b69b8.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:74:3d:65:a6:61:dd:3c:8a:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=34b11d04-c064-4e64-9226-48e8fda98525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:8a:b6:65:c6:73:87:80:fe:74:60:03:f7: 5e:7e:b0:af:99:b4:a0:e1:05:2d:5b:72:50:9b:10: 65:06:a7:16:0a:d8:32:c7:7d:0a:14:2c:f4:74:93: 3d:68:2a:c6:f9:b8:3a:1c:d6:a5:ca:4f:5e:1f:8f: 3f:49:ec:da:90:2a:ee:c3:6d:b1:e6:29:73:ef:90: 70:f2:94:f3:aa:bd:8a:5a:76:1c:26:d2:3a:c6:e8: 50:73:62:ce:98:f5:d7:a4:a0:f6:9b:e2:ff:30:c4: a1:ce:16:f5:d8:22:8e:48:a0:e0:a9:ea:a8:75:c7: 19:b6:f9:7e:96:7c:a9:60:23:0c:6f:c7:87:41:bb: f6:39:c4:56:9e:72:01:ca:2f:4e:7f:cd:6e:ef:5f: b0:d1:bc:3b:4f:7b:39:5f:2c:d8:23:bc:78:1c:76: 41:60:97:62:ac:ec:e9:86:d5:71:76:2f:14:12:01: 62:c8:ee:77:f6:29:64:27:a1:d8:98:c2:05:37:b6: 04:d4:52:67:80:30:8f:cd:fc:4f:80:28:19:ae:1f: 5d:33:54:b9:f5:c4:e2:63:b4:f6:7a:9c:6e:f9:ee: 64:9a:6c:3c:64:07:e6:04:70:29:c9:5d:6e:d7:0d: 18:99:11:ef:e0:42:18:d6:2f:3b:42:fe:a1:f7:12: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C6:B8:BE:3E:D6:67:5D:2E:9E:CB:DF:9F:8D:90:FC:11:7E:0D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb1ed61e-685b-333c-82f5-dbd9b81b69b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d0:e1:2b:9e:82:4f:83:b1:b4:56:08:3f:db:66:5d:41:8e: cd:de:54:43:3f:cc:f0:8a:45:61:f7:fd:5b:67:b5:02:54:9c: 14:07:18:9e:ee:18:b6:07:a7:2d:c9:e5:ca:cb:7d:b2:bc:d7: 45:fa:7a:53:f9:ec:ce:29:92:31:36:b8:10:ab:e6:24:29:0e: a9:b6:59:6c:cf:e8:6a:0e:89:ed:75:b3:32:3d:07:47:e3:be: ad:99:8e:df:e8:82:1f:23:33:12:ee:e4:db:24:1f:7d:71:59: 2a:72:a4:cf:3c:29:10:fe:2d:03:f1:b5:86:b3:53:cc:a2:55: d9:8e:0d:2e:70:63:0a:ba:4a:c2:ff:1a:4c:51:62:70:71:8c: a5:85:cf:01:d0:74:6d:b1:78:0d:d1:9e:ff:6c:f9:f5:a7:b0: e0:41:53:6b:70:db:74:46:84:06:19:ab:f1:7d:14:4e:e2:45: a1:a5:29:54:1e:2c:ff:ae:01:bc:df:f8:9f:b1:82:b9:3c:05: f5:61:01:d8:8d:2b:49:61:43:fe:61:60:69:dc:55:88:4b:c8: 5b:14:33:ea:5e:08:dc:66:a0:ca:8a:14:f4:88:73:82:e1:61: ce:08:1d:2a:ab:46:44:60:9d:da:36:b6:5f:87:7f:e3:1e:f1: c3:a7:4b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XQ9ZaZh3TyKXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk MzRiMTFkMDQtYzA2NC00ZTY0LTkyMjYtNDhlOGZkYTk4NTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt2KtmXGc4eA/nRgA/defrCvmbSg4QUtW3JQ mxBlBqcWCtgyx30KFCz0dJM9aCrG+bg6HNalyk9eH48/SezakCruw22x5ilz75Bw 8pTzqr2KWnYcJtI6xuhQc2LOmPXXpKD2m+L/MMShzhb12CKOSKDgqeqodccZtvl+ lnypYCMMb8eHQbv2OcRWnnIByi9Of81u71+w0bw7T3s5XyzYI7x4HHZBYJdirOzp htVxdi8UEgFiyO539ilkJ6HYmMIFN7YE1FJngDCPzfxPgCgZrh9dM1S59cTiY7T2 epxu+e5kmmw8ZAfmBHApyV1u1w0YmRHv4EIY1i87Qv6h9xKrIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPGuL4+1mddLp7L35+NkPwRfg09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWIxZWQ2MWUtNjg1Yi0z MzNjLTgyZjUtZGJkOWI4MWI2OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEehMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDQ4Suegk+DsbRWCD/bZl1Bjs3eVEM/zPCKRWH3/VtntQJUnBQHGJ7u GLYHpy3J5crLfbK810X6elP57M4pkjE2uBCr5iQpDqm2WWzP6GoOie11szI9B0fj vq2Zjt/ogh8jMxLu5NskH31xWSpypM88KRD+LQPxtYazU8yiVdmODS5wYwq6SsL/ GkxRYnBxjKWFzwHQdG2xeA3Rnv9s+fWnsOBBU2tw23RGhAYZq/F9FE7iRaGlKVQe LP+uAbzf+J+xgrk8BfVhAdiNK0lhQ/5hYGncVYhLyFsUM+peCNxmoMqKFPSIc4Lh Yc4IHSqrRkRgndo2tl+Hf+Me8cOnSwU= -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:32 2025 by rpki-client