$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe215c2f-7b08-3ec4-83cc-86d420fde465.roa File: fe215c2f-7b08-3ec4-83cc-86d420fde465.roa (raw, json) Hash identifier: YT+dsvcd2/nwN2uscnIk4mU29RuRw/AxqU2ExsD8Ks8= Subject key identifier: 36:94:BF:5A:F8:C1:4A:E9:96:EC:40:D2:11:A7:43:08:C9:83:10:1B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E654FD4AA4D6768BA49B0AC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe215c2f-7b08-3ec4-83cc-86d420fde465.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 172.71.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:fd:4a:a4:d6:76:8b:a4:9b:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=fea5a533-141d-4ad7-8b98-821260f32943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:4e:eb:ba:21:6e:7c:ca:aa:7a:ae:b3:19: eb:d0:b8:e4:26:59:2a:37:cc:ab:00:c2:f1:f9:bc: 72:48:5e:28:0b:4b:4a:04:a1:04:ad:a8:aa:b0:25: e6:f7:ec:20:ed:69:b7:16:fb:b7:55:c4:bb:a1:1f: b1:00:7b:0d:7b:0b:9c:90:d0:71:62:3f:64:fa:a6: bc:ba:08:fe:68:a3:b5:de:12:45:ed:93:5e:29:ff: e7:71:58:ae:62:7d:9b:98:c1:5f:3b:07:e1:2d:2b: 4a:e6:d3:a1:a4:09:86:21:a4:14:69:ff:83:dd:de: ef:48:4d:00:1f:64:ae:4d:55:89:22:f3:bd:46:ac: c2:e5:fa:b3:d6:28:7e:60:d0:b9:d3:97:98:6f:1a: 24:4d:9a:e8:02:0e:f3:48:6c:b6:4b:bc:aa:b6:e8: d2:cf:a8:dc:40:de:70:30:11:88:42:fa:08:ec:c1: 33:21:3c:b5:a7:bc:e8:db:ea:ae:cd:4b:43:21:79: 71:91:57:f0:f1:c3:f3:f4:76:38:bd:21:86:87:cf: 27:c5:ac:e8:a0:28:ab:da:8d:e1:a9:bb:c4:1e:51: b2:53:d5:17:79:43:52:7b:31:32:b5:53:35:1b:37: 8c:76:27:06:da:ab:5f:23:a3:7d:ee:47:46:7e:b7: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:94:BF:5A:F8:C1:4A:E9:96:EC:40:D2:11:A7:43:08:C9:83:10:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe215c2f-7b08-3ec4-83cc-86d420fde465.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:45:7f:b3:6b:4c:fa:d6:75:fd:10:9f:52:0f:de:a2:10:99: dc:02:57:d8:5a:cf:bb:c6:12:3a:8d:e5:b3:2a:59:d5:2d:ee: 18:63:78:7a:32:07:84:5e:ce:59:c0:68:22:dc:57:28:f2:6b: b5:b2:78:20:80:12:66:80:58:5d:f0:ef:e0:37:92:d3:50:5b: b4:ae:6b:6e:ae:25:c8:4b:c3:ee:d1:b3:02:45:ee:92:ac:f0: f9:0a:87:7c:58:c2:7b:43:c6:c3:23:8f:5a:64:da:a5:c4:89: 34:d2:43:56:ff:90:9b:e7:ec:2a:b9:ad:c3:2e:34:c7:0b:c4: 38:e1:f1:91:7f:7e:9d:87:ae:04:7c:38:2f:21:1d:30:0a:56: 9c:3c:b9:e5:d2:c8:fd:1e:fa:ee:a8:49:ef:19:77:55:13:45: 1a:1d:ce:5e:60:e3:c3:e7:cb:f2:4b:12:80:9d:ed:0e:b7:4c: c9:ea:f9:73:13:db:bc:f3:65:ac:84:32:53:bb:53:a4:95:ac: 93:b4:33:cf:86:33:6c:ea:73:57:9c:d5:f4:dc:fd:13:47:53: 5c:75:20:55:cf:34:c9:57:4a:92:47:6a:a1:1f:6f:21:ee:22: 30:dd:0c:d8:ac:7f:69:4a:49:b2:1e:2f:81:af:f4:31:dc:c7: 7c:88:cf:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVP1KpNZ2i6SbCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk ZmVhNWE1MzMtMTQxZC00YWQ3LThiOTgtODIxMjYwZjMyOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDRO67ohbnzKqnqusxnr0LjkJlkqN8yrAMLx +bxySF4oC0tKBKEEraiqsCXm9+wg7Wm3Fvu3VcS7oR+xAHsNewuckNBxYj9k+qa8 ugj+aKO13hJF7ZNeKf/ncViuYn2bmMFfOwfhLStK5tOhpAmGIaQUaf+D3d7vSE0A H2SuTVWJIvO9RqzC5fqz1ih+YNC505eYbxokTZroAg7zSGy2S7yqtujSz6jcQN5w MBGIQvoI7MEzITy1p7zo2+quzUtDIXlxkVfw8cPz9HY4vSGGh88nxazooCir2o3h qbvEHlGyU9UXeUNSezEytVM1GzeMdicG2qtfI6N97kdGfrdnOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaUv1r4wUrpluxA0hGnQwjJgxAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmUyMTVjMmYtN2IwOC0z ZWM0LTgzY2MtODZkNDIwZmRlNDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZFf7NrTPrWdf0Qn1IP3qIQmdwCV9haz7vGEjqN5bMqWdUt7hhjeHoy B4RezlnAaCLcVyjya7WyeCCAEmaAWF3w7+A3ktNQW7Sua26uJchLw+7RswJF7pKs 8PkKh3xYwntDxsMjj1pk2qXEiTTSQ1b/kJvn7Cq5rcMuNMcLxDjh8ZF/fp2HrgR8 OC8hHTAKVpw8ueXSyP0e+u6oSe8Zd1UTRRodzl5g48Pny/JLEoCd7Q63TMnq+XMT 27zzZayEMlO7U6SVrJO0M8+GM2zqc1ec1fTc/RNHU1x1IFXPNMlXSpJHaqEfbyHu IjDdDNisf2lKSbIeL4Gv9DHcx3yIzz0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:08 2025 by rpki-client