$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa File: 3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa (raw, json) Hash identifier: Tj5KmaCNoqR4sqbWREkEHrwpqdkAlwqfC0vmY10bwjQ= Subject key identifier: E1:C6:39:0F:F1:FC:B4:83:19:6A:00:22:19:9F:24:EA:8D:E5:D5:6D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E173EC9E8580A2B6C86B60 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:73:ec:9e:85:80:a2:b6:c8:6b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=54a8857e-35a5-4b48-b113-0f48df133c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:c3:64:d5:6c:5c:21:e0:4f:b9:54:6b:d9: f0:e7:23:a3:a2:9f:a3:a8:8d:c2:e3:36:c3:a7:40: 9e:26:a1:32:6a:76:ee:da:89:3e:0a:9c:41:97:35: cb:66:2c:5c:a2:49:fe:4b:72:7b:9f:7f:72:a6:a8: 01:16:b7:a5:ac:0c:34:60:c9:f9:0f:41:1c:54:5d: f1:af:f6:28:75:38:c4:23:f6:0b:a6:6b:81:b2:f6: 46:e5:a1:67:04:f0:d1:36:4d:c1:8e:98:bf:2c:11: c0:2a:47:87:0a:46:f7:91:b2:ee:68:e2:55:c0:78: f9:7b:a7:b8:91:28:7c:be:00:44:c4:93:2c:f3:a0: c0:5d:d5:6c:58:62:1f:68:14:7a:b1:2c:0b:5b:9e: 4e:46:ef:10:bf:39:5e:e3:b9:f8:9d:91:d0:98:4c: 61:57:0b:b0:c3:fc:17:4b:bf:1b:eb:9f:67:e7:6d: 3c:90:99:f3:93:18:b0:dc:81:96:2d:9d:0c:01:14: fa:58:27:9b:10:ea:b7:65:9b:58:cf:23:24:78:7b: 89:5e:98:22:e7:37:b2:86:24:cb:77:79:7a:36:10: b9:7a:6b:1d:b4:22:7a:3c:1a:6e:f7:bd:31:67:fc: 43:a9:32:6f:9c:da:3e:cd:fe:b2:8b:48:b8:0e:fa: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C6:39:0F:F1:FC:B4:83:19:6A:00:22:19:9F:24:EA:8D:E5:D5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3cfb4327-c1af-38ef-a7bd-3ab254363cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d6:4a:2d:4e:a2:53:f8:1b:19:5a:4f:10:66:db:12:74:f8: ea:ce:a6:44:f3:39:88:c2:af:1f:39:bf:f6:85:57:80:f5:22: 66:a3:f0:65:7a:64:d3:77:87:2c:07:b1:d9:ed:3c:ee:20:6a: 1b:f8:73:22:74:5a:41:65:bf:50:3e:b2:84:84:bb:4d:66:f5: bc:ab:b5:01:d9:7f:66:99:16:69:ca:a4:11:06:65:d9:03:ec: a3:96:51:d4:ab:fe:d5:6f:b7:d6:95:d2:b7:76:a2:c3:c6:e8: 01:b0:96:02:e0:44:49:a2:98:ce:0c:28:21:0a:8d:c5:c0:b7: a4:79:15:6b:9b:e3:cc:07:f1:a2:50:aa:86:e8:70:62:04:cd: 61:54:4c:e8:7c:f7:17:e6:75:e1:b7:64:67:a8:6f:e5:ff:a7: ff:35:b0:2a:81:b0:f2:f8:30:e7:3f:e7:86:ea:7c:fd:a1:d7: 0b:a5:2e:bf:82:0a:0c:90:0a:af:82:12:59:cd:19:ae:eb:ed: 9f:38:79:34:1f:fc:0f:88:75:70:0f:31:ee:89:21:fa:4f:ce: 25:26:4e:0d:37:25:91:a7:42:9b:dc:09:8b:da:18:00:13:04: c6:19:43:f1:17:8e:c7:3d:98:80:57:94:46:17:4b:91:e0:ba: c3:f1:77:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XPsnoWAorbIa2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NTRhODg1N2UtMzVhNS00YjQ4LWIxMTMtMGY0OGRmMTMzYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArILDZNVsXCHgT7lUa9nw5yOjop+jqI3C4zbD p0CeJqEyanbu2ok+CpxBlzXLZixcokn+S3J7n39ypqgBFrelrAw0YMn5D0EcVF3x r/YodTjEI/YLpmuBsvZG5aFnBPDRNk3Bjpi/LBHAKkeHCkb3kbLuaOJVwHj5e6e4 kSh8vgBExJMs86DAXdVsWGIfaBR6sSwLW55ORu8Qvzle47n4nZHQmExhVwuww/wX S78b659n5208kJnzkxiw3IGWLZ0MART6WCebEOq3ZZtYzyMkeHuJXpgi5zeyhiTL d3l6NhC5emsdtCJ6PBpu970xZ/xDqTJvnNo+zf6yi0i4DvqPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHGOQ/x/LSDGWoAIhmfJOqN5dVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2NmYjQzMjctYzFhZi0z OGVmLWE3YmQtM2FiMjU0MzYzY2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnWSi1OolP4GxlaTxBm2xJ0+OrOpkTzOYjCrx85v/aFV4D1Imaj8GV6 ZNN3hywHsdntPO4gahv4cyJ0WkFlv1A+soSEu01m9byrtQHZf2aZFmnKpBEGZdkD 7KOWUdSr/tVvt9aV0rd2osPG6AGwlgLgREmimM4MKCEKjcXAt6R5FWub48wH8aJQ qobocGIEzWFUTOh89xfmdeG3ZGeob+X/p/81sCqBsPL4MOc/54bqfP2h1wulLr+C CgyQCq+CElnNGa7r7Z84eTQf/A+IdXAPMe6JIfpPziUmTg03JZGnQpvcCYvaGAAT BMYZQ/EXjsc9mIBXlEYXS5HgusPxdxk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:26:44 2025 by rpki-client