$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be2aeea-d732-35da-97e8-2d320af6755c.roa File: 5be2aeea-d732-35da-97e8-2d320af6755c.roa (raw, json) Hash identifier: IfKuQcMRyKTApDcfT7vEqkIhLl5cvi9q6kddRnIu6Ds= Subject key identifier: 58:BF:76:0B:45:D2:7E:A4:06:A4:F3:F1:55:D9:62:6E:AB:2A:A4:BF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A99DBB8C32E097C991200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be2aeea-d732-35da-97e8-2d320af6755c.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:99:db:b8:c3:2e:09:7c:99:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=fc426612-41f9-40aa-8fa0-bb955e103083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:8d:cc:53:64:a3:98:e9:5e:99:1d:2b:bb: 86:ac:e1:ba:6c:97:ed:e2:e4:76:91:64:d7:1f:c8: 42:55:03:a2:e7:87:dd:f9:c9:c6:12:e8:01:27:58: ec:e5:18:83:a5:82:5e:4f:88:29:8a:f3:96:37:ce: 4f:1a:ed:30:2e:21:a2:41:50:7b:7a:24:66:9b:66: 95:a8:34:59:5d:c1:a9:84:69:44:3b:67:ee:7a:d2: e3:8f:0d:6b:98:93:4c:f9:4b:6d:01:b0:27:9b:1a: ae:e3:ac:ff:0f:e5:5e:6a:1f:c8:d5:de:7d:99:f9: 46:05:cf:b1:26:a9:33:bb:a9:aa:4c:ec:2d:a0:9f: 04:cb:c0:6f:94:8c:b5:0f:b1:68:f1:cd:6e:d4:30: 85:fc:13:cd:bf:86:6a:fe:36:8b:7f:39:f2:f0:22: f4:b5:c9:f0:ed:34:d1:ac:7c:91:ca:d2:35:0e:4a: d1:3b:a9:d3:fe:e2:7b:5d:d1:29:c2:cd:ce:de:cc: 4c:cb:5c:a2:63:7b:27:91:c5:e5:d7:a6:20:76:a0: 15:2f:ea:fd:24:29:e9:63:d7:a6:f5:49:80:69:0d: 2f:6f:d0:39:e5:fd:16:be:e7:b8:c7:46:40:3f:df: c0:df:97:29:6f:ed:ae:6e:3c:9c:ad:75:2d:02:ef: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BF:76:0B:45:D2:7E:A4:06:A4:F3:F1:55:D9:62:6E:AB:2A:A4:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5be2aeea-d732-35da-97e8-2d320af6755c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b0:21:40:1d:96:25:d8:70:43:df:55:39:33:fe:6b:85:0e: 5f:b3:32:ec:9e:8a:60:9f:80:94:94:28:74:db:87:ce:63:7f: 78:57:b3:d8:7f:dd:7d:fc:51:9d:03:df:00:44:a2:f5:80:65: 3d:45:62:aa:0f:76:40:c6:cd:2e:16:cd:47:52:ba:76:7a:84: 77:93:72:3e:f9:9a:a2:27:da:4f:cd:ce:fd:4d:bd:51:bf:50: f1:a5:5d:5c:2e:7d:64:f6:bf:7b:7b:74:78:e9:96:7b:d5:76: 55:b9:03:97:41:a9:4f:96:f6:13:c2:eb:3c:30:9d:62:59:c6: e3:c3:75:32:91:f7:10:0e:07:4b:67:68:af:96:94:5e:70:8a: ee:fe:e5:28:36:33:02:43:6c:34:cb:88:55:21:73:eb:56:4e: ba:32:66:cf:87:43:85:e0:30:3b:83:06:d3:a2:49:74:e0:eb: 1d:6e:98:58:6c:b0:e9:9c:0a:de:f7:f8:f9:be:96:3b:dc:b8: 52:07:9c:d9:de:c8:b7:1a:fc:36:1a:2f:fc:e2:42:27:6c:01: a6:97:c1:34:6c:10:8d:65:41:b7:b6:88:e1:54:66:75:46:cc: 40:63:ae:aa:9a:90:ee:18:58:18:88:a5:db:da:88:fd:ad:0c: 5f:31:f4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpnbuMMuCXyZEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk ZmM0MjY2MTItNDFmOS00MGFhLThmYTAtYmI5NTVlMTAzMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EmNzFNko5jpXpkdK7uGrOG6bJft4uR2kWTX H8hCVQOi54fd+cnGEugBJ1js5RiDpYJeT4gpivOWN85PGu0wLiGiQVB7eiRmm2aV qDRZXcGphGlEO2fuetLjjw1rmJNM+UttAbAnmxqu46z/D+Veah/I1d59mflGBc+x Jqkzu6mqTOwtoJ8Ey8BvlIy1D7Fo8c1u1DCF/BPNv4Zq/jaLfzny8CL0tcnw7TTR rHyRytI1DkrRO6nT/uJ7XdEpws3O3sxMy1yiY3snkcXl16YgdqAVL+r9JCnpY9em 9UmAaQ0vb9A55f0Wvue4x0ZAP9/A35cpb+2ubjycrXUtAu+A0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi/dgtF0n6kBqTz8VXZYm6rKqS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJlMmFlZWEtZDczMi0z NWRhLTk3ZTgtMmQzMjBhZjY3NTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiwIUAdliXYcEPfVTkz/muFDl+zMuyeimCfgJSUKHTbh85jf3hXs9h/ 3X38UZ0D3wBEovWAZT1FYqoPdkDGzS4WzUdSunZ6hHeTcj75mqIn2k/Nzv1NvVG/ UPGlXVwufWT2v3t7dHjplnvVdlW5A5dBqU+W9hPC6zwwnWJZxuPDdTKR9xAOB0tn aK+WlF5wiu7+5Sg2MwJDbDTLiFUhc+tWTroyZs+HQ4XgMDuDBtOiSXTg6x1umFhs sOmcCt73+Pm+ljvcuFIHnNneyLca/DYaL/ziQidsAaaXwTRsEI1lQbe2iOFUZnVG zEBjrqqakO4YWBiIpdvaiP2tDF8x9NA= -----END CERTIFICATE-----Generated at Sun Jun 15 13:21:51 2025 by rpki-client