$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ad474a6-fb5d-316e-9bf0-ecdff39815cb.roa File: 9ad474a6-fb5d-316e-9bf0-ecdff39815cb.roa (raw, json) Hash identifier: 3woyjWlf5xPH9d1cKK27AJ2F9Xf4xBf2r2DBEROviN4= Subject key identifier: 41:79:7F:9A:56:1F:72:88:45:26:BE:E2:36:AD:D6:64:6D:C9:8A:F0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849F01A99EB776DF090C5FBD200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ad474a6-fb5d-316e-9bf0-ecdff39815cb.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 13335 IP address blocks: 172.71.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:99:eb:77:6d:f0:90:c5:fb:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=30942103-e7fb-4428-aad5-5c6051826671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:8b:48:e6:86:cf:28:fc:9f:d4:e5:e3:32: d1:19:ff:66:48:67:5c:8f:30:21:11:91:8a:e9:2f: e8:eb:03:d9:7d:37:26:3d:d1:2e:f9:f3:58:c5:cc: 0d:29:0f:04:cf:2e:15:71:79:0a:75:d3:27:ab:af: 7a:f3:98:43:ac:42:70:6c:cd:13:25:e5:ce:e6:82: 68:06:79:76:4e:88:b0:c1:c4:f8:23:73:38:28:f0: 4c:51:1d:b9:1f:cf:6a:d5:64:2b:11:63:b4:38:b3: a3:dc:a6:1e:7b:a5:20:20:06:45:c8:36:9e:20:12: 86:14:cd:ea:c3:89:85:49:63:1d:c9:aa:64:e2:1b: 49:04:0c:77:2f:f3:bb:61:7c:e1:0e:9c:47:d2:e7: b5:28:3f:61:cd:cd:8d:d6:44:57:27:13:d3:7e:d7: a3:d5:a1:f1:07:1f:b7:81:d3:29:7b:4f:03:85:85: 14:2a:c0:27:6c:68:19:92:1d:f5:d7:c5:a6:01:48: 01:22:4c:95:b3:5c:04:cf:c3:ad:b9:a4:f7:69:44: d9:37:d2:b1:25:95:0f:ea:c9:90:f9:b6:5e:cc:30: a4:80:29:c6:30:84:0d:b5:7e:e6:07:4c:46:de:b9: ec:e3:ff:89:13:08:33:b2:6f:75:ce:95:6e:d7:f0: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:79:7F:9A:56:1F:72:88:45:26:BE:E2:36:AD:D6:64:6D:C9:8A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ad474a6-fb5d-316e-9bf0-ecdff39815cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9d:c9:44:00:b6:39:75:b7:dc:0d:09:7d:9d:64:cd:5b:b1: bd:93:d7:71:c5:82:b4:da:dd:5e:10:31:41:7e:d0:ff:5f:24: ee:56:50:e0:db:01:ac:88:e1:d6:87:45:03:c5:2b:2e:1e:a1: 5d:f2:f4:c1:31:4b:1e:e0:33:bc:8c:60:98:a3:d7:91:3b:80: 6b:f5:08:57:a6:f9:75:a3:0a:45:81:2d:df:d0:0b:9f:d8:8e: e4:c2:53:4c:98:45:54:aa:00:29:a7:ab:59:cf:d9:17:fa:7b: 35:6b:c8:19:dd:79:35:5b:67:41:e5:27:a7:48:48:26:31:d5: 7e:97:56:50:75:76:ba:fd:39:0f:35:5e:76:ae:42:57:35:37: 40:27:da:51:a2:67:6e:ab:c9:79:1c:6c:1c:e8:31:51:7f:4e: ac:13:74:be:b3:9a:f3:55:d6:57:94:71:49:03:11:33:75:d3: 15:e6:bd:bb:03:bc:51:c5:5d:4a:8b:ff:5a:28:06:a3:72:52: ac:98:a9:5f:35:3d:6d:63:b1:b1:fe:74:27:7c:63:58:57:20: 30:88:0a:5b:a3:74:16:ef:d8:c3:2a:ba:87:09:4c:41:48:c7: 34:31:19:6c:5a:dc:79:74:19:89:47:48:20:10:5b:16:f0:aa: ca:42:52:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGpnrd23wkMX70gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk MzA5NDIxMDMtZTdmYi00NDI4LWFhZDUtNWM2MDUxODI2NjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX6LSOaGzyj8n9Tl4zLRGf9mSGdcjzAhEZGK 6S/o6wPZfTcmPdEu+fNYxcwNKQ8Ezy4VcXkKddMnq69685hDrEJwbM0TJeXO5oJo Bnl2ToiwwcT4I3M4KPBMUR25H89q1WQrEWO0OLOj3KYee6UgIAZFyDaeIBKGFM3q w4mFSWMdyapk4htJBAx3L/O7YXzhDpxH0ue1KD9hzc2N1kRXJxPTftej1aHxBx+3 gdMpe08DhYUUKsAnbGgZkh3118WmAUgBIkyVs1wEz8OtuaT3aUTZN9KxJZUP6smQ +bZezDCkgCnGMIQNtX7mB0xG3rns4/+JEwgzsm91zpVu1/A5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF5f5pWH3KIRSa+4jat1mRtyYrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWFkNDc0YTYtZmI1ZC0z MTZlLTliZjAtZWNkZmYzOTgxNWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABydyUQAtjl1t9wNCX2dZM1bsb2T13HFgrTa3V4QMUF+0P9fJO5WUODb AayI4daHRQPFKy4eoV3y9MExSx7gM7yMYJij15E7gGv1CFem+XWjCkWBLd/QC5/Y juTCU0yYRVSqACmnq1nP2Rf6ezVryBndeTVbZ0HlJ6dISCYx1X6XVlB1drr9OQ81 XnauQlc1N0An2lGiZ26ryXkcbBzoMVF/TqwTdL6zmvNV1leUcUkDETN10xXmvbsD vFHFXUqL/1ooBqNyUqyYqV81PW1jsbH+dCd8Y1hXIDCIClujdBbv2MMquocJTEFI xzQxGWxa3Hl0GYlHSCAQWxbwqspCUko= -----END CERTIFICATE-----Generated at Tue Jun 17 04:41:29 2025 by rpki-client