$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed33532b-71f4-3edc-8b2c-e05fc4eae1ab.roa File: ed33532b-71f4-3edc-8b2c-e05fc4eae1ab.roa (raw, json) Hash identifier: q4KElSLEhUXqMbUq7jNB4jRPaWIAE7g1EreHLe2Qs3M= Subject key identifier: 10:FA:33:29:87:2C:4E:67:DF:31:B9:CC:37:23:D4:A2:5F:7C:54:81 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8C86AA51903C85560940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed33532b-71f4-3edc-8b2c-e05fc4eae1ab.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8c:86:aa:51:90:3c:85:56:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=b1d456ea-19f3-41c7-a132-8f2ddf707d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:50:17:b9:ae:4a:4d:44:78:62:ed:09:cf: c9:c0:90:6f:03:a8:df:e2:b2:41:fc:1f:17:5d:c9: ff:c9:25:7b:c3:b9:7b:fc:05:79:f2:e2:2b:11:79: 47:22:ef:2b:00:82:14:1f:1a:24:e9:a6:da:63:5a: 4e:e7:cd:6e:d6:c0:2a:ed:2d:84:57:95:de:30:a2: 77:10:2b:6f:4c:cc:74:c0:b7:1e:ae:dd:97:73:e8: 89:49:fe:52:72:7b:9b:ff:80:93:18:a3:7a:bd:61: b1:69:5e:a3:0e:6a:87:da:98:06:ec:fc:8c:f8:db: 7f:a6:aa:ff:51:4b:fc:8a:c3:35:d0:6f:a0:8b:f8: 18:7c:9b:b4:95:d3:19:5a:b1:92:79:9c:9d:9f:c8: b4:e4:4d:b0:a6:db:bf:12:cf:e7:3a:9d:26:24:d7: cc:27:73:30:04:12:a3:8f:af:10:cc:f4:c8:c6:e3: 27:89:95:75:c9:24:aa:3f:24:96:19:0d:93:72:f8: 00:96:9c:a2:58:33:7c:a8:20:2b:3f:0c:37:f2:7a: 77:92:38:60:61:5f:56:8a:0e:6d:bb:0b:de:14:b8: 42:3d:70:2f:c5:2f:ee:e7:da:eb:37:21:df:a6:d8: 60:11:58:a1:65:33:85:7b:de:b6:45:ca:fb:a4:f0: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FA:33:29:87:2C:4E:67:DF:31:B9:CC:37:23:D4:A2:5F:7C:54:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed33532b-71f4-3edc-8b2c-e05fc4eae1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:45:25:63:66:d8:c8:e9:7c:24:8e:ed:45:42:dc:91:96:85: 6e:1b:83:48:c3:42:9e:0c:d2:84:3d:01:e5:dc:3e:72:bb:33: 08:66:b5:26:0f:9c:67:13:58:13:14:03:73:ab:46:a0:ce:8f: fc:5b:98:ca:5c:d1:e4:61:5e:0f:38:66:2f:1c:fe:d5:da:5d: 0f:cb:32:15:89:1f:88:40:08:6f:e7:47:36:64:30:47:49:d3: bb:3f:94:5f:96:76:47:b5:7e:30:df:2a:e2:0a:37:c1:7f:31: d7:a4:46:f4:84:12:22:e8:68:fa:c2:34:cc:16:36:30:65:7a: ac:65:e3:54:49:88:ab:01:d6:0d:4e:24:00:e0:10:58:bc:02: 64:3a:2c:5a:2c:0e:ee:36:8b:cf:76:2f:d6:86:53:e4:7c:08: c4:2e:82:2b:fe:3a:2b:51:9d:99:a1:7a:29:46:3b:96:e4:b1: 8d:a7:02:da:6f:34:27:3e:cb:8c:30:35:2e:4d:1e:7e:ac:07: 18:55:f1:0f:f8:aa:f8:09:ce:e1:b8:19:3e:b4:0b:dd:f8:91: 84:9d:24:1d:44:f8:64:39:89:69:3c:ab:17:17:a6:8f:10:de: 04:30:33:42:79:40:54:91:ed:ba:03:cf:77:17:42:db:e9:0d: 6e:cf:bf:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGoyGqlGQPIVWCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk YjFkNDU2ZWEtMTlmMy00MWM3LWExMzItOGYyZGRmNzA3ZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ZQF7muSk1EeGLtCc/JwJBvA6jf4rJB/B8X Xcn/ySV7w7l7/AV58uIrEXlHIu8rAIIUHxok6abaY1pO581u1sAq7S2EV5XeMKJ3 ECtvTMx0wLcert2Xc+iJSf5Scnub/4CTGKN6vWGxaV6jDmqH2pgG7PyM+Nt/pqr/ UUv8isM10G+gi/gYfJu0ldMZWrGSeZydn8i05E2wptu/Es/nOp0mJNfMJ3MwBBKj j68QzPTIxuMniZV1ySSqPySWGQ2TcvgAlpyiWDN8qCArPww38np3kjhgYV9Wig5t uwveFLhCPXAvxS/u59rrNyHfpthgEVihZTOFe962Rcr7pPDTWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBD6MymHLE5n3zG5zDcj1KJffFSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWQzMzUzMmItNzFmNC0z ZWRjLThiMmMtZTA1ZmM0ZWFlMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxFJWNm2MjpfCSO7UVC3JGWhW4bg0jDQp4M0oQ9AeXcPnK7MwhmtSYP nGcTWBMUA3OrRqDOj/xbmMpc0eRhXg84Zi8c/tXaXQ/LMhWJH4hACG/nRzZkMEdJ 07s/lF+Wdke1fjDfKuIKN8F/MdekRvSEEiLoaPrCNMwWNjBleqxl41RJiKsB1g1O JADgEFi8AmQ6LFosDu42i892L9aGU+R8CMQugiv+OitRnZmheilGO5bksY2nAtpv NCc+y4wwNS5NHn6sBxhV8Q/4qvgJzuG4GT60C934kYSdJB1E+GQ5iWk8qxcXpo8Q 3gQwM0J5QFSR7boDz3cXQtvpDW7Pv2Q= -----END CERTIFICATE-----Generated at Thu Jun 5 18:24:47 2025 by rpki-client