$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7644c097-e65a-3ebc-be83-baa3ced8f80b.roa File: 7644c097-e65a-3ebc-be83-baa3ced8f80b.roa (raw, json) Hash identifier: ok7ANitWUCq2OzvwaJZMNU+fqHpHkojL3F0JpRhibw8= Subject key identifier: A8:EE:EA:F5:63:EE:DF:ED:1D:2D:04:0C:FE:6A:F4:67:37:46:FF:92 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E174E09A80F3B4EBE8F200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7644c097-e65a-3ebc-be83-baa3ced8f80b.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:74:e0:9a:80:f3:b4:eb:e8:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=bbae65a9-7f21-49fd-b576-91ace9c21fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ae:93:43:e8:ae:60:55:91:3e:35:94:74:9d: 40:e3:95:e2:49:d0:ca:16:5f:5a:52:19:52:a4:da: 3f:b2:ee:c4:31:e8:2d:4f:5f:ef:aa:03:1f:26:d6: 27:1f:30:12:9f:88:67:fc:49:dc:8f:a3:2b:48:cf: 55:cb:60:60:2c:44:c7:71:f2:69:a0:2a:e6:45:1a: 75:49:a6:f7:1b:75:e3:bb:33:c4:35:76:ba:1e:b7: e0:59:5b:55:85:95:55:5a:c5:40:fa:a9:91:9b:74: be:ea:1e:4f:bf:ee:95:57:e9:c6:95:14:fe:4f:5d: dd:27:b7:8b:85:2b:34:ae:e7:cd:0f:34:ad:55:9d: 8b:fa:41:69:fd:21:e5:77:50:bd:e6:d5:61:b5:16: 01:01:d4:38:08:c5:61:ff:98:73:e5:28:25:55:00: cf:68:11:27:18:eb:1f:b7:c7:4d:ef:0d:61:07:22: 37:55:e4:9b:30:2e:3d:ce:d8:29:48:3a:fc:5b:5f: f8:6a:36:b1:79:c3:0c:c7:92:e9:5e:93:ae:00:53: f2:2f:69:72:65:2f:56:f8:b8:ca:9b:c6:5b:e9:b9: 7e:e9:40:20:4b:32:cf:44:82:25:05:38:67:b4:e2: af:41:11:a5:38:ca:72:4e:be:48:bc:1e:7a:85:d6: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EE:EA:F5:63:EE:DF:ED:1D:2D:04:0C:FE:6A:F4:67:37:46:FF:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7644c097-e65a-3ebc-be83-baa3ced8f80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2c:26:6c:1b:88:45:41:62:0e:b0:b3:7a:d1:fd:21:18:30: 22:52:04:6c:5f:81:65:c7:25:1e:b8:3c:00:52:aa:2f:54:11: 76:2c:f4:3e:e8:d4:ad:f2:93:f8:9d:04:ab:19:1f:43:fe:28: 33:2f:41:26:d8:57:a8:48:53:de:83:67:d7:14:19:18:c7:8b: ed:12:c8:b2:00:39:b8:f2:b5:af:b5:25:32:95:de:fa:a3:ee: d5:d6:bd:1a:3b:d4:9d:1b:60:f3:5c:bf:24:2a:d7:3b:2f:b3: ca:ae:96:5f:8c:9a:fe:ef:9d:c5:4f:d7:55:8e:11:4d:b0:cd: 9e:d0:b8:81:33:7c:d2:97:dc:11:1e:be:cf:dc:ae:30:2a:59: 81:5e:d0:ff:4d:d4:2e:2b:8e:4b:f8:11:41:84:d6:b4:f9:e9: 07:90:2d:0b:3e:50:38:5c:e4:fe:ea:be:0f:94:4c:dc:6a:7e: 31:e2:fe:a8:94:f0:87:25:52:c9:32:19:23:c7:65:50:f3:14: ec:ca:04:26:b4:8d:de:c8:9d:4f:94:68:2c:c5:66:16:03:2e: 58:f0:de:51:0a:af:e6:f4:eb:fd:1e:ca:96:07:f7:61:98:f4: 47:8e:f9:d1:a4:04:bc:e4:9b:c8:ca:c1:e6:30:fb:39:7a:6c: 23:a6:79:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XTgmoDztOvo8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk YmJhZTY1YTktN2YyMS00OWZkLWI1NzYtOTFhY2U5YzIxZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK6TQ+iuYFWRPjWUdJ1A45XiSdDKFl9aUhlS pNo/su7EMegtT1/vqgMfJtYnHzASn4hn/Encj6MrSM9Vy2BgLETHcfJpoCrmRRp1 Sab3G3XjuzPENXa6HrfgWVtVhZVVWsVA+qmRm3S+6h5Pv+6VV+nGlRT+T13dJ7eL hSs0rufNDzStVZ2L+kFp/SHld1C95tVhtRYBAdQ4CMVh/5hz5SglVQDPaBEnGOsf t8dN7w1hByI3VeSbMC49ztgpSDr8W1/4ajaxecMMx5LpXpOuAFPyL2lyZS9W+LjK m8Zb6bl+6UAgSzLPRIIlBThntOKvQRGlOMpyTr5IvB56hdYTTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKju6vVj7t/tHS0EDP5q9Gc3Rv+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzY0NGMwOTctZTY1YS0z ZWJjLWJlODMtYmFhM2NlZDhmODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAsJmwbiEVBYg6ws3rR/SEYMCJSBGxfgWXHJR64PABSqi9UEXYs9D7o 1K3yk/idBKsZH0P+KDMvQSbYV6hIU96DZ9cUGRjHi+0SyLIAObjyta+1JTKV3vqj 7tXWvRo71J0bYPNcvyQq1zsvs8qull+Mmv7vncVP11WOEU2wzZ7QuIEzfNKX3BEe vs/crjAqWYFe0P9N1C4rjkv4EUGE1rT56QeQLQs+UDhc5P7qvg+UTNxqfjHi/qiU 8IclUskyGSPHZVDzFOzKBCa0jd7InU+UaCzFZhYDLljw3lEKr+b06/0eypYH92GY 9EeO+dGkBLzkm8jKweYw+zl6bCOmeW0= -----END CERTIFICATE-----Generated at Wed May 7 21:34:56 2025 by rpki-client