$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f2d8f496-5c53-3121-9796-677fda00fb18.roa File: f2d8f496-5c53-3121-9796-677fda00fb18.roa (raw, json) Hash identifier: idc6PKGJs2lOqaJi5/amjRpUS4sQtsIpYNm+nv7D3lM= Subject key identifier: 33:A1:72:80:9F:E7:F6:74:B1:C7:A6:23:53:8B:54:F9:5B:A6:D5:AD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A99BC49BC0C1E16DAAF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f2d8f496-5c53-3121-9796-677fda00fb18.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:99:bc:49:bc:0c:1e:16:da:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=bf090fcf-73d2-4a3a-9f90-f735203dd388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:94:fa:b1:26:d1:5e:07:07:49:98:b9:c7: 18:03:8f:eb:75:2f:4f:f1:37:b2:f6:cd:cc:71:26: 9a:3c:89:1a:83:48:b5:07:74:fe:f5:19:36:d4:ed: 27:b6:24:0c:3d:18:9f:83:ae:7a:37:70:89:88:57: cf:27:87:8b:6e:48:65:f3:20:af:4b:2d:7d:4f:94: 5d:90:d4:1d:47:24:4e:3b:34:82:cc:59:f7:6e:43: 4a:ae:05:a6:58:83:2f:ba:90:df:0c:27:df:33:8d: be:0c:05:d1:6a:ac:94:a3:ab:58:c2:91:d3:1b:97: a3:af:38:e0:72:86:30:7a:a1:35:c0:81:da:32:0b: 60:de:e6:1f:b6:9e:70:e9:30:f3:d8:c3:69:43:4c: c5:4e:78:ae:0d:30:86:b2:07:04:24:c7:4c:ad:24: ed:b7:a3:cb:a4:ec:02:1a:ac:59:13:e4:fb:4e:9e: 1a:a9:d4:c2:56:ad:f1:33:1c:27:d5:3a:a9:b1:97: 9d:6b:00:ed:2f:40:16:7b:37:77:c3:fe:bf:a9:fa: a1:ae:25:7a:50:9f:69:ce:d4:26:fb:d6:d7:b5:4f: 00:ab:97:93:fe:2f:fb:e5:36:7e:89:c0:37:17:ce: 58:17:f1:0c:e9:34:86:98:a7:f1:73:62:bf:8c:3f: 57:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A1:72:80:9F:E7:F6:74:B1:C7:A6:23:53:8B:54:F9:5B:A6:D5:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f2d8f496-5c53-3121-9796-677fda00fb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:67:31:b0:ad:95:2e:a1:d2:8d:7b:19:20:95:5b:55:c3:cc: 20:13:4b:0d:90:1e:0e:9f:e3:63:ff:94:7d:8a:80:70:c8:19: 06:ce:dd:ee:a2:85:fe:47:1f:00:68:f0:37:d4:ed:64:17:85: 92:54:43:77:df:cb:09:9b:7c:5c:ee:9c:a7:9d:8c:bd:2a:f6: e4:fc:c2:8e:11:04:9a:b8:79:3e:a3:d3:7d:0e:58:d4:bf:57: 8b:0b:34:02:20:1a:c9:84:f1:b1:bb:c2:f9:f8:98:70:78:5f: 7e:f1:a8:36:a4:5f:27:dc:18:17:20:72:c2:78:5e:0d:65:16: 24:de:9f:d4:06:8b:7d:cb:28:fc:9c:7e:a5:b5:cf:0a:e5:e8: 41:14:11:4c:fb:be:6f:4a:23:a3:d8:6e:5e:ad:2a:16:4c:29: 40:81:7a:54:13:88:14:2e:c1:1d:84:21:35:72:b3:ee:5e:63: e8:bd:23:45:03:10:0b:73:ea:0d:08:bd:05:54:37:56:e2:3b: dd:aa:39:96:d1:46:db:be:26:fb:0c:d1:ab:bb:a9:e9:34:7d: 79:75:e2:04:a5:f8:9b:77:22:fa:14:24:4a:d1:76:3e:b5:2b: 75:5f:cc:6d:4d:0c:8e:43:a5:ff:e4:96:eb:80:b9:01:8e:5a: 32:52:fe:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpm8SbwMHhbarwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk YmYwOTBmY2YtNzNkMi00YTNhLTlmOTAtZjczNTIwM2RkMzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAOU+rEm0V4HB0mYuccYA4/rdS9P8Tey9s3M cSaaPIkag0i1B3T+9Rk21O0ntiQMPRifg656N3CJiFfPJ4eLbkhl8yCvSy19T5Rd kNQdRyROOzSCzFn3bkNKrgWmWIMvupDfDCffM42+DAXRaqyUo6tYwpHTG5ejrzjg coYweqE1wIHaMgtg3uYftp5w6TDz2MNpQ0zFTniuDTCGsgcEJMdMrSTtt6PLpOwC GqxZE+T7Tp4aqdTCVq3xMxwn1TqpsZedawDtL0AWezd3w/6/qfqhriV6UJ9pztQm +9bXtU8Aq5eT/i/75TZ+icA3F85YF/EM6TSGmKfxc2K/jD9X0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOhcoCf5/Z0scemI1OLVPlbptWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjJkOGY0OTYtNWM1My0z MTIxLTk3OTYtNjc3ZmRhMDBmYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhnMbCtlS6h0o17GSCVW1XDzCATSw2QHg6f42P/lH2KgHDIGQbO3e6i hf5HHwBo8DfU7WQXhZJUQ3ffywmbfFzunKedjL0q9uT8wo4RBJq4eT6j030OWNS/ V4sLNAIgGsmE8bG7wvn4mHB4X37xqDakXyfcGBcgcsJ4Xg1lFiTen9QGi33LKPyc fqW1zwrl6EEUEUz7vm9KI6PYbl6tKhZMKUCBelQTiBQuwR2EITVys+5eY+i9I0UD EAtz6g0IvQVUN1biO92qOZbRRtu+JvsM0au7qek0fXl14gSl+Jt3IvoUJErRdj61 K3VfzG1NDI5Dpf/kluuAuQGOWjJS/o0= -----END CERTIFICATE-----Generated at Sun Jun 8 13:48:01 2025 by rpki-client