$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd801531-40d7-350d-bd52-84cad2fe07c4.roa File: dd801531-40d7-350d-bd52-84cad2fe07c4.roa (raw, json) Hash identifier: FDIePt46IwsF+KHdlyCTwTVn1tGkgW8Hlru/KfRNuI0= Subject key identifier: B8:01:8D:E5:CF:DC:5E:8A:88:5B:62:BF:20:99:69:2D:78:AC:BC:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E4EFDAF8AEBFF3267EB58C50 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd801531-40d7-350d-bd52-84cad2fe07c4.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 13335 IP address blocks: 172.71.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:da:f8:ae:bf:f3:26:7e:b5:8c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=b063a068-d33b-4aa3-9e89-daf702420155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:94:f8:1f:3e:ba:d8:8e:1f:dc:fe:ea:aa: 4c:96:c6:46:8d:3f:eb:e2:1c:54:a5:48:e6:07:be: 5e:58:67:1d:79:d3:03:39:b4:34:30:5e:36:23:a7: bb:d3:f1:18:fa:ce:6a:c8:c4:47:c9:c2:9b:35:41: 67:31:28:7d:9b:e4:f4:a8:e1:28:52:2e:09:27:70: 79:17:f2:36:ca:3e:64:c1:c0:e9:cb:48:b0:46:46: d9:5d:7b:40:85:a6:d8:15:c2:af:ac:13:1d:49:bc: e3:f1:34:f2:c9:bb:e6:5a:55:db:60:2a:74:1b:c6: 73:02:1f:51:c2:c0:b9:45:f5:50:7d:88:95:7e:47: ef:81:45:d9:64:c6:e6:ae:68:1b:c9:04:86:45:cb: f5:e6:e4:2b:c8:c7:66:0e:07:1c:91:a6:3a:ec:9f: f3:db:f8:53:f2:1b:50:ae:65:d0:06:bf:5a:e3:ae: ea:3b:5e:86:d8:eb:60:33:45:7c:a7:ef:ac:cf:5a: 92:27:90:17:f4:98:fc:b6:10:d2:3c:4d:7d:ed:3d: 30:a8:37:3a:a0:99:94:1c:83:f4:de:63:d4:d9:a3: 3c:52:fa:00:f2:cd:a4:20:0d:bc:56:a3:22:e3:06: 66:50:9a:11:88:63:00:11:2e:d9:6c:00:df:5b:8b: 6d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:01:8D:E5:CF:DC:5E:8A:88:5B:62:BF:20:99:69:2D:78:AC:BC:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd801531-40d7-350d-bd52-84cad2fe07c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:dc:89:ef:71:5e:c6:82:cb:77:5a:12:a0:91:fc:a0:48:0c: 65:93:ac:eb:92:74:3f:a7:f6:7c:1a:d2:bd:bd:f7:cf:4f:73: 64:37:8e:3d:57:4c:b1:25:18:ce:97:13:e5:f9:f6:a2:a8:89: 4c:88:d6:5f:09:29:a6:89:a8:87:e0:47:58:a9:f3:92:9d:0e: 40:58:84:78:73:cc:bf:32:3b:49:b4:2c:ff:af:a5:90:92:0a: ef:08:2a:dd:59:9a:87:ce:04:b9:47:01:ef:d4:5a:d0:83:1f: b1:7e:97:32:88:a9:27:52:44:9a:42:1f:f1:b2:f8:80:4c:52: 47:fb:4c:c7:37:64:47:d2:79:af:fb:35:39:e6:09:86:7b:0a: 56:ed:1d:e6:17:c4:05:2f:dc:ce:49:4a:60:c8:3d:eb:4c:d7: 33:42:87:6b:ef:e8:3e:f0:a6:f4:ae:65:2b:e5:c9:88:db:80: 17:ea:9a:4c:57:cd:6a:90:28:0f:bc:ff:e9:35:67:32:3f:fa: 7b:62:15:df:53:79:c2:54:9d:6c:5a:b6:36:13:8b:f3:34:e3: 15:c8:dc:1c:db:8a:c4:cb:bd:93:ac:c3:db:ca:79:9e:c6:d4: c2:77:36:c5:14:62:6a:5d:e9:58:5e:22:88:2e:cc:c1:79:d4: 72:21:1a:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk79r4rr/zJn61jFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YjA2M2EwNjgtZDMzYi00YWEzLTllODktZGFmNzAyNDIwMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YKU+B8+utiOH9z+6qpMlsZGjT/r4hxUpUjm B75eWGcdedMDObQ0MF42I6e70/EY+s5qyMRHycKbNUFnMSh9m+T0qOEoUi4JJ3B5 F/I2yj5kwcDpy0iwRkbZXXtAhabYFcKvrBMdSbzj8TTyybvmWlXbYCp0G8ZzAh9R wsC5RfVQfYiVfkfvgUXZZMbmrmgbyQSGRcv15uQryMdmDgcckaY67J/z2/hT8htQ rmXQBr9a467qO16G2OtgM0V8p++sz1qSJ5AX9Jj8thDSPE197T0wqDc6oJmUHIP0 3mPU2aM8UvoA8s2kIA28VqMi4wZmUJoRiGMAES7ZbADfW4ttxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgBjeXP3F6KiFtivyCZaS14rLziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGQ4MDE1MzEtNDBkNy0z NTBkLWJkNTItODRjYWQyZmUwN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEerMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvcie9xXsaCy3daEqCR/KBIDGWTrOuSdD+n9nwa0r29989Pc2Q3jj1X TLElGM6XE+X59qKoiUyI1l8JKaaJqIfgR1ip85KdDkBYhHhzzL8yO0m0LP+vpZCS Cu8IKt1ZmofOBLlHAe/UWtCDH7F+lzKIqSdSRJpCH/Gy+IBMUkf7TMc3ZEfSea/7 NTnmCYZ7ClbtHeYXxAUv3M5JSmDIPetM1zNCh2vv6D7wpvSuZSvlyYjbgBfqmkxX zWqQKA+8/+k1ZzI/+ntiFd9TecJUnWxatjYTi/M04xXI3BzbisTLvZOsw9vKeZ7G 1MJ3NsUUYmpd6VheIoguzMF51HIhGl4= -----END CERTIFICATE-----Generated at Mon Jun 16 09:36:50 2025 by rpki-client