$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2610cb2e-339b-36b1-afc7-4687cbaecd42.roa File: 2610cb2e-339b-36b1-afc7-4687cbaecd42.roa (raw, json) Hash identifier: 0OboS24O0DFa3HT8xqxSXPtctXIqD3gsZbR5oT2O9Kw= Subject key identifier: 2C:BD:48:A4:08:97:95:CC:BF:C6:B4:70:26:D4:A4:79:4E:89:5A:19 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E170A4EFDC3EE5F9418A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2610cb2e-339b-36b1-afc7-4687cbaecd42.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:70:a4:ef:dc:3e:e5:f9:41:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=ff81a492-3e11-4874-9d51-00e7bbcb0969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:41:9d:92:89:f0:c7:96:b5:3b:f7:97:17: bb:23:f3:6b:0f:c1:57:0d:97:03:e0:70:2b:0e:c7: 36:4f:95:67:5e:8b:b0:18:f6:cf:72:59:f2:67:72: 67:68:e4:8d:25:9f:12:a7:0a:2e:24:c0:53:f4:9d: 45:17:80:84:68:bc:3e:5b:89:64:c5:bf:dd:3e:30: fd:51:3b:de:7d:bc:68:b0:19:b1:76:74:cc:f2:eb: a6:58:78:5c:8f:eb:a7:e6:c8:25:24:4d:d6:36:6b: 2a:20:bd:33:c0:45:9e:28:cf:75:70:ab:44:52:17: 6c:ba:52:a6:e5:c7:23:ae:7e:c0:07:1a:2d:b2:0a: 08:66:31:c9:91:b7:12:5e:c5:0f:e1:40:62:00:a8: 29:9d:ff:7d:e4:58:42:a0:9e:f3:1c:6e:8b:b9:c9: b2:4c:ac:46:68:b4:23:a9:d8:85:d0:8c:f4:2c:64: 31:6a:7c:36:44:12:cb:96:0e:a5:5e:06:24:7d:b5: 9d:da:eb:d8:1a:96:a3:60:80:f9:67:1e:35:91:69: 65:76:04:c9:2a:7f:59:cc:5c:66:cd:b2:b7:e7:af: f3:84:1f:7d:43:a2:7d:1f:91:fc:f1:07:b2:b2:49: 86:48:ed:3e:5c:da:b8:01:4d:7a:27:99:b9:e3:15: 8c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BD:48:A4:08:97:95:CC:BF:C6:B4:70:26:D4:A4:79:4E:89:5A:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2610cb2e-339b-36b1-afc7-4687cbaecd42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e3:04:e9:35:f8:e2:f9:73:58:e9:a1:7d:83:cc:42:91:55: 9e:c1:c8:bd:5b:a0:2e:24:0e:6e:11:72:39:5c:17:ca:2b:45: ca:87:f8:22:6b:d5:c6:02:ea:90:0c:b5:c9:19:f3:11:2f:ad: c0:a0:46:ce:36:60:5e:80:08:58:64:22:78:5f:7a:35:4b:43: ef:0a:83:f4:a6:d0:b3:f4:c5:84:8b:42:e6:bb:c8:43:64:7a: 92:ef:de:3f:70:b0:ff:a8:33:2c:99:37:89:4d:81:3b:d4:3e: 5a:1e:f8:5b:b7:b4:e0:71:9e:c3:79:0a:29:55:d7:c0:59:46: 6e:a2:f0:49:cf:66:3c:35:92:e0:65:c2:a7:5b:46:cc:c3:f7: c9:d2:8c:d9:d7:19:9a:96:87:90:6f:4f:5a:50:4b:eb:a3:ff: 66:c3:d0:e9:56:95:26:75:cd:5e:59:90:85:6d:87:c2:9d:05: d7:58:05:fb:96:61:56:e7:7f:13:15:b5:e6:45:ad:28:01:59: 9e:b9:9f:3e:f2:77:8a:c0:c0:4b:37:da:ec:9f:78:6e:38:01: b9:94:da:96:2f:aa:f9:e9:ab:ae:24:50:33:6c:c3:5a:14:af: 9a:9b:02:7f:a5:d7:86:da:8b:05:75:c2:92:f3:1e:3a:07:86: b9:f4:d6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XCk79w+5flBioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmY4MWE0OTItM2UxMS00ODc0LTlkNTEtMDBlN2JiY2IwOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA679BnZKJ8MeWtTv3lxe7I/NrD8FXDZcD4HAr Dsc2T5VnXouwGPbPclnyZ3JnaOSNJZ8SpwouJMBT9J1FF4CEaLw+W4lkxb/dPjD9 UTvefbxosBmxdnTM8uumWHhcj+un5sglJE3WNmsqIL0zwEWeKM91cKtEUhdsulKm 5ccjrn7ABxotsgoIZjHJkbcSXsUP4UBiAKgpnf995FhCoJ7zHG6LucmyTKxGaLQj qdiF0Iz0LGQxanw2RBLLlg6lXgYkfbWd2uvYGpajYID5Zx41kWlldgTJKn9ZzFxm zbK356/zhB99Q6J9H5H88QeyskmGSO0+XNq4AU16J5m54xWMcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy9SKQIl5XMv8a0cCbUpHlOiVoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjYxMGNiMmUtMzM5Yi0z NmIxLWFmYzctNDY4N2NiYWVjZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDjBOk1+OL5c1jpoX2DzEKRVZ7ByL1boC4kDm4RcjlcF8orRcqH+CJr 1cYC6pAMtckZ8xEvrcCgRs42YF6ACFhkInhfejVLQ+8Kg/Sm0LP0xYSLQua7yENk epLv3j9wsP+oMyyZN4lNgTvUPloe+Fu3tOBxnsN5CilV18BZRm6i8EnPZjw1kuBl wqdbRszD98nSjNnXGZqWh5BvT1pQS+uj/2bD0OlWlSZ1zV5ZkIVth8KdBddYBfuW YVbnfxMVteZFrSgBWZ65nz7yd4rAwEs32uyfeG44AbmU2pYvqvnpq64kUDNsw1oU r5qbAn+l14baiwV1wpLzHjoHhrn01jo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:26:44 2025 by rpki-client