$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87705ffc-7d04-3726-8c38-dc34a1468f6a.roa File: 87705ffc-7d04-3726-8c38-dc34a1468f6a.roa (raw, json) Hash identifier: FDaLnys0xi9pMI+W5LrsDe3l3+gS3NB8Gx6qf7bolkI= Subject key identifier: C7:5E:35:B3:94:A7:F8:D3:99:BC:80:D1:F4:3F:A9:FB:45:38:3C:5F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E1768F8C6C4570BE9B0440 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87705ffc-7d04-3726-8c38-dc34a1468f6a.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:76:8f:8c:6c:45:70:be:9b:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=8559b2ae-bf4b-448b-b525-20de770384ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:92:8e:42:0c:e9:f2:85:ac:07:ba:44:76: 9b:e3:68:99:62:44:77:f7:d2:38:38:bb:f2:ed:77: 02:6d:c2:f6:93:94:7d:9a:e2:c0:57:fe:dc:26:e0: 68:79:3e:73:0d:3a:87:33:4d:c2:07:04:c2:41:82: 6f:21:fc:a7:a8:20:ca:e5:d2:5e:90:26:ae:f2:b0: a1:ad:76:04:c9:c1:d0:ec:01:98:37:97:be:21:1b: b8:1a:26:4c:d2:08:da:56:08:f9:25:8e:70:8f:d2: 45:cb:a7:3e:17:c7:43:d9:38:30:7b:50:18:a6:1e: 94:50:28:51:96:8b:69:fe:7b:1a:26:bb:9a:e5:51: 92:74:cc:24:dc:41:54:59:0b:91:8e:dd:06:85:f9: 75:b6:71:34:ff:0c:bb:c9:8f:ec:b3:10:7e:ca:c3: 4c:4d:64:b7:36:72:47:3f:9a:6c:ee:ca:46:da:23: 22:33:ac:6e:90:28:a6:c2:9c:64:ef:30:d7:c0:a7: 44:ab:10:ba:97:95:3f:d0:ee:29:05:f1:8d:18:d3: a6:3a:47:d5:da:76:ca:e4:63:d3:7b:8d:2e:7d:5d: 60:fe:14:9d:f8:be:b0:5a:66:aa:63:3e:bc:b9:65: 27:74:a3:2c:d6:61:80:7c:3d:59:62:bf:8c:77:1c: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:35:B3:94:A7:F8:D3:99:BC:80:D1:F4:3F:A9:FB:45:38:3C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/87705ffc-7d04-3726-8c38-dc34a1468f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0f:20:b6:75:e3:b1:6c:79:46:3c:a7:6e:55:3e:9c:c9:f5: 50:79:a3:0a:27:e1:37:1b:f9:bc:08:b0:48:25:9f:71:18:c0: e0:3c:ea:f7:9f:4f:0c:35:a1:72:63:6d:f7:9b:11:84:d5:b2: 26:1d:d2:3d:72:36:4c:50:57:fd:6c:b5:a7:dd:72:4d:13:ae: a3:e7:2b:5f:12:f8:3e:a0:97:7c:3b:5e:74:a4:b5:2e:9b:88: b0:5f:87:0d:42:56:b6:90:a6:88:9c:29:de:9d:2e:2e:6d:f6: 19:50:9d:c5:b6:d7:bb:ca:c0:3d:63:1d:c3:e1:d6:cb:69:fd: 1f:a3:e9:0e:7a:8f:7c:76:2c:34:bd:7a:e7:93:f1:c5:2d:71: 31:00:67:62:ce:d4:66:55:a3:54:66:5b:d7:03:0c:09:04:e7: 1e:aa:14:2f:bb:10:af:c1:1c:d5:c3:bc:cf:97:5a:53:13:23: 47:ed:70:05:1c:10:da:3f:e8:ed:d3:4c:14:c6:53:13:ca:68: 02:a7:a3:f9:86:5b:89:b6:15:2a:60:9a:59:05:59:f7:0a:65: a0:fb:67:7d:35:b6:70:b8:67:69:ce:87:15:26:16:cd:58:4f: cc:69:16:10:66:07:77:59:b8:f1:92:a6:c8:12:d9:9c:be:ee: 7e:1c:66:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XaPjGxFcL6bBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk ODU1OWIyYWUtYmY0Yi00NDhiLWI1MjUtMjBkZTc3MDM4NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPCSjkIM6fKFrAe6RHab42iZYkR399I4OLvy 7XcCbcL2k5R9muLAV/7cJuBoeT5zDTqHM03CBwTCQYJvIfynqCDK5dJekCau8rCh rXYEycHQ7AGYN5e+IRu4GiZM0gjaVgj5JY5wj9JFy6c+F8dD2Tgwe1AYph6UUChR lotp/nsaJrua5VGSdMwk3EFUWQuRjt0Ghfl1tnE0/wy7yY/ssxB+ysNMTWS3NnJH P5ps7spG2iMiM6xukCimwpxk7zDXwKdEqxC6l5U/0O4pBfGNGNOmOkfV2nbK5GPT e40ufV1g/hSd+L6wWmaqYz68uWUndKMs1mGAfD1ZYr+MdxymjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdeNbOUp/jTmbyA0fQ/qftFODxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODc3MDVmZmMtN2QwNC0z NzI2LThjMzgtZGMzNGExNDY4ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEPILZ147FseUY8p25VPpzJ9VB5owon4Tcb+bwIsEgln3EYwOA86vef Tww1oXJjbfebEYTVsiYd0j1yNkxQV/1stafdck0TrqPnK18S+D6gl3w7XnSktS6b iLBfhw1CVraQpoicKd6dLi5t9hlQncW217vKwD1jHcPh1stp/R+j6Q56j3x2LDS9 eueT8cUtcTEAZ2LO1GZVo1RmW9cDDAkE5x6qFC+7EK/BHNXDvM+XWlMTI0ftcAUc ENo/6O3TTBTGUxPKaAKno/mGW4m2FSpgmlkFWfcKZaD7Z301tnC4Z2nOhxUmFs1Y T8xpFhBmB3dZuPGSpsgS2Zy+7n4cZqI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:03 2025 by rpki-client