$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05e775f4-e043-3679-a555-b20b6a536c8a.roa File: 05e775f4-e043-3679-a555-b20b6a536c8a.roa (raw, json) Hash identifier: Vg/Y7KngqFhr5464RIYPfQeaafAJaQmncUJk12aQTaw= Subject key identifier: 52:ED:85:3E:ED:85:9E:C1:55:3E:5A:68:4D:4F:1A:7E:71:3F:54:69 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A8E5CA7C0B4DF423B9940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05e775f4-e043-3679-a555-b20b6a536c8a.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:8e:5c:a7:c0:b4:df:42:3b:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=a451bbd5-f673-4557-afc4-99db58ea65a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:57:7a:3d:67:53:d0:01:e2:8d:41:13:ea: d7:f5:b9:c5:45:a4:c5:8d:12:bd:38:bf:b4:6d:c8: 06:b0:30:79:8d:82:13:c0:6e:e0:96:16:f5:8b:bb: eb:47:a1:2a:d5:0c:73:6f:8b:5c:ce:d0:61:bd:4c: aa:d6:24:64:f3:42:57:d8:a4:66:c0:6d:da:66:f4: 1f:f7:60:cb:0c:ef:57:ab:55:cd:ff:b2:9a:19:4d: dd:7f:99:55:c0:de:8b:a8:0e:a4:f4:d7:1a:7b:40: 9a:f4:cc:2b:4d:cd:92:a7:94:af:05:2e:a3:8c:f5: ae:0b:6f:94:b1:47:b9:90:1b:ca:4a:ad:f4:e6:9d: 13:49:2e:f8:a5:2c:56:35:d1:64:10:82:50:dd:88: 3c:5e:62:70:14:82:de:55:12:20:06:bd:74:74:1b: 5e:e6:24:d0:07:c3:52:87:04:ae:4c:1a:a5:d6:d7: 91:91:88:4e:ca:68:8f:79:36:59:ca:a5:7f:8f:6a: 2b:01:7d:51:fa:71:6d:ba:b7:81:a5:db:0d:5c:cf: c3:8c:e5:c9:63:b4:a8:ff:2b:3a:1b:ea:a5:b9:a8: 0c:93:06:a4:3c:a0:18:49:56:88:0a:4d:70:88:a8: 6e:ac:62:98:fa:a9:2c:e9:69:ad:33:e3:3e:03:ec: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:ED:85:3E:ED:85:9E:C1:55:3E:5A:68:4D:4F:1A:7E:71:3F:54:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05e775f4-e043-3679-a555-b20b6a536c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bb:63:42:34:2a:36:c1:e4:67:68:77:15:38:c6:e2:bc:74: 82:c0:9d:d4:dc:7b:c2:e9:0c:98:f7:a7:2c:74:5c:50:8a:1d: 3a:17:b7:91:7c:a3:5d:f0:aa:e6:a0:5f:98:8f:5c:d8:97:ac: e1:fe:92:2a:98:9b:ee:e0:88:f0:52:eb:09:f0:4f:84:db:f2: ca:37:f8:b6:56:df:11:15:e0:4a:52:5b:b2:af:16:36:84:f0: eb:a8:99:30:0b:97:6e:87:86:43:ba:a0:ce:a7:ca:40:58:c4: c9:b8:0f:46:e5:26:88:01:1b:08:38:b1:da:46:44:64:92:35: fe:5c:b6:d0:fc:d9:6a:55:89:55:5b:14:81:07:a3:52:d8:26: 0e:08:06:da:b6:29:ad:63:61:b6:0b:3d:1c:9b:2d:1d:67:a4: 4d:8a:fa:23:ff:58:e0:40:66:1a:41:5e:19:a2:17:2c:be:61: 6b:9a:86:2a:cd:9c:69:39:1e:3b:e2:3f:f4:56:da:eb:1b:29: 1f:b2:8a:a6:ce:10:9f:a6:ed:8a:9b:4b:00:b8:ff:39:5b:c4: 34:e5:9d:d1:c8:dc:ed:f1:84:3b:c9:56:f4:32:d8:66:d1:aa: bb:d2:31:6e:cf:a2:89:1f:25:c4:a9:0f:5a:96:9f:33:22:f4: ae:c1:50:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGo5cp8C030I7mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk YTQ1MWJiZDUtZjY3My00NTU3LWFmYzQtOTlkYjU4ZWE2NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSZXej1nU9AB4o1BE+rX9bnFRaTFjRK9OL+0 bcgGsDB5jYITwG7glhb1i7vrR6Eq1Qxzb4tcztBhvUyq1iRk80JX2KRmwG3aZvQf 92DLDO9Xq1XN/7KaGU3df5lVwN6LqA6k9Ncae0Ca9MwrTc2Sp5SvBS6jjPWuC2+U sUe5kBvKSq305p0TSS74pSxWNdFkEIJQ3Yg8XmJwFILeVRIgBr10dBte5iTQB8NS hwSuTBql1teRkYhOymiPeTZZyqV/j2orAX1R+nFtureBpdsNXM/DjOXJY7So/ys6 G+qluagMkwakPKAYSVaICk1wiKhurGKY+qks6WmtM+M+A+ytuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLthT7thZ7BVT5aaE1PGn5xP1RpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDVlNzc1ZjQtZTA0My0z Njc5LWE1NTUtYjIwYjZhNTM2YzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC7Y0I0KjbB5GdodxU4xuK8dILAndTce8LpDJj3pyx0XFCKHToXt5F8 o13wquagX5iPXNiXrOH+kiqYm+7giPBS6wnwT4Tb8so3+LZW3xEV4EpSW7KvFjaE 8OuomTALl26HhkO6oM6nykBYxMm4D0blJogBGwg4sdpGRGSSNf5cttD82WpViVVb FIEHo1LYJg4IBtq2Ka1jYbYLPRybLR1npE2K+iP/WOBAZhpBXhmiFyy+YWuahirN nGk5HjviP/RW2usbKR+yiqbOEJ+m7YqbSwC4/zlbxDTlndHI3O3xhDvJVvQy2GbR qrvSMW7PookfJcSpD1qWnzMi9K7BUEk= -----END CERTIFICATE-----Generated at Mon Jun 16 14:51:25 2025 by rpki-client