$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa File: 7471f609-4e4f-3a7a-984d-a655e565f544.roa (raw, json) Hash identifier: GgKgXlL1GmSF1+Z8k0qVsStwbq0lT0dvfNSP3Nc5po0= Subject key identifier: 13:01:7F:55:17:C4:9A:5C:C6:2E:DD:78:7D:C5:91:C6:AD:A2:52:FE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849A089E88B1D5640A30E8FC100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 13335 IP address blocks: 172.71.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e8:8b:1d:56:40:a3:0e:8f:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=b2a7ef1c-f8ea-4b32-8e0c-c6d12b31cd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:43:e3:46:48:2d:6a:af:45:96:67:8d:1a: 18:b2:0b:33:c6:65:0b:5c:c6:d9:4c:61:f2:00:fc: 60:59:3e:a2:35:19:80:5a:ab:74:34:10:f3:4a:25: 45:2f:3f:e4:83:66:e8:c0:3d:d9:dd:68:c9:19:a6: c6:2b:9c:0b:98:44:ad:cc:51:93:43:44:4f:4a:a3: d2:e0:bf:13:08:0a:97:0d:d0:d9:aa:4a:2f:4b:8c: ca:4c:6a:78:f1:4e:f8:75:95:4e:8c:a4:fd:2b:a7: 2a:00:a6:e5:e5:06:49:3a:db:7b:cb:ca:6d:88:4e: 16:1f:99:9a:c8:5e:7a:91:52:f3:81:8d:94:c7:1d: 47:b5:26:1c:32:0e:5c:64:1d:9f:ce:16:e4:a5:78: e7:e9:fb:61:8f:84:59:7a:9b:9e:2d:9c:04:2e:d0: d1:c6:77:a6:aa:14:de:e6:52:47:a7:ad:99:24:41: 90:10:d7:a6:90:5b:92:ef:bb:00:89:cd:35:e3:5b: 4a:bb:00:84:aa:2c:72:c7:ac:f6:db:f1:1f:96:92: 47:f6:0c:0d:a5:c1:8a:e5:61:df:0b:c8:13:99:1a: f5:5d:fe:cc:69:28:af:3c:48:96:74:a0:2d:14:10: 92:39:6c:57:88:0d:80:45:c4:a8:29:03:4a:88:e3: 98:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:01:7F:55:17:C4:9A:5C:C6:2E:DD:78:7D:C5:91:C6:AD:A2:52:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7471f609-4e4f-3a7a-984d-a655e565f544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:31:29:a9:6a:01:30:b9:c8:a4:b9:19:9c:7b:a4:11:28:7b: 2a:25:d9:ae:84:02:c0:f7:5a:b5:e2:db:d2:37:91:70:87:8c: f1:ac:a5:81:76:aa:d6:a1:db:80:33:30:ab:1a:2a:60:fc:34: 9d:e7:06:54:34:32:59:91:66:28:35:6c:58:e2:18:19:dc:d4: 75:b3:81:c9:40:53:2c:e0:fe:3b:d6:07:60:5d:5a:f4:84:77: e9:3d:56:25:be:9d:bd:16:15:e5:48:40:cc:63:2c:76:e5:67: ef:52:c3:b9:e1:16:a5:c5:07:be:07:ae:12:9c:67:0f:8b:0f: 58:6a:57:1c:fc:98:60:5e:1d:c1:4f:16:48:a3:94:5a:72:6e: 7a:31:12:f3:c2:06:2f:0d:19:d0:79:34:5d:b1:21:30:75:e7: b7:12:93:07:5e:44:4b:61:09:1d:21:cc:0c:9b:66:4c:6a:a1: 41:46:54:14:d4:75:95:cf:a5:a8:e7:9b:e6:df:58:de:49:99: 33:c7:9a:56:d7:06:2c:56:63:94:7f:a8:56:6e:1a:ea:51:29: b1:b8:e8:8a:3f:13:fa:43:da:8b:8f:7c:ea:1a:3a:27:a1:ee: 3d:11:1f:5b:a5:7e:a1:88:78:8d:4d:56:1c:c2:85:a2:4f:7b: 15:78:45:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieiLHVZAow6PwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk YjJhN2VmMWMtZjhlYS00YjMyLThlMGMtYzZkMTJiMzFjZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5xD40ZILWqvRZZnjRoYsgszxmULXMbZTGHy APxgWT6iNRmAWqt0NBDzSiVFLz/kg2bowD3Z3WjJGabGK5wLmEStzFGTQ0RPSqPS 4L8TCAqXDdDZqkovS4zKTGp48U74dZVOjKT9K6cqAKbl5QZJOtt7y8ptiE4WH5ma yF56kVLzgY2Uxx1HtSYcMg5cZB2fzhbkpXjn6fthj4RZepueLZwELtDRxnemqhTe 5lJHp62ZJEGQENemkFuS77sAic0141tKuwCEqixyx6z22/EflpJH9gwNpcGK5WHf C8gTmRr1Xf7MaSivPEiWdKAtFBCSOWxXiA2ARcSoKQNKiOOYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMBf1UXxJpcxi7deH3FkcatolL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzQ3MWY2MDktNGU0Zi0z YTdhLTk4NGQtYTY1NWU1NjVmNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUxKalqATC5yKS5GZx7pBEoeyol2a6EAsD3WrXi29I3kXCHjPGspYF2 qtah24AzMKsaKmD8NJ3nBlQ0MlmRZig1bFjiGBnc1HWzgclAUyzg/jvWB2BdWvSE d+k9ViW+nb0WFeVIQMxjLHblZ+9Sw7nhFqXFB74HrhKcZw+LD1hqVxz8mGBeHcFP FkijlFpybnoxEvPCBi8NGdB5NF2xITB157cSkwdeREthCR0hzAybZkxqoUFGVBTU dZXPpajnm+bfWN5JmTPHmlbXBixWY5R/qFZuGupRKbG46Io/E/pD2ouPfOoaOieh 7j0RH1ulfqGIeI1NVhzChaJPexV4RfI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:26:08 2025 by rpki-client