$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4a230db-031d-3490-b152-d40b5424ae7e.roa File: f4a230db-031d-3490-b152-d40b5424ae7e.roa (raw, json) Hash identifier: DKu77dlAL7bEvPOcK2ocPFXgRB4DVomBL4nia+Lj1x0= Subject key identifier: 6B:51:F9:5A:49:98:33:11:3F:02:AF:16:A5:1B:80:CF:50:5A:F5:42 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E170CA4EF1991C1FE25D80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4a230db-031d-3490-b152-d40b5424ae7e.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 172.71.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:70:ca:4e:f1:99:1c:1f:e2:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=3eafd30f-4cb1-4796-a4f4-85f06a22282c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:44:3f:2f:52:a2:b9:e8:b8:41:61:ce:a7: 12:dd:88:5e:13:6a:d9:e9:0b:03:b5:5b:38:e0:06: 63:76:e0:81:a0:59:ca:bb:e4:b0:25:b2:03:be:62: 27:bd:fc:b8:06:13:e5:06:ad:fb:16:0f:ad:a4:ec: 45:48:fd:dd:24:11:7a:23:bf:f3:e7:ea:fe:4b:7d: 45:81:25:30:ac:dd:7b:dd:c8:65:b5:9d:d8:41:dd: 4a:b0:db:e7:14:e8:2b:02:fd:37:53:62:51:f1:c4: 56:38:c1:7f:41:18:2a:76:6d:5a:07:0f:b4:35:5e: 17:3e:da:9b:ba:e0:25:10:c4:86:d3:6b:ad:45:90: 0c:b2:73:bb:bc:2b:65:a5:c5:94:da:28:9e:fe:bb: 60:20:e2:60:6c:b5:41:32:f7:d3:43:84:3b:fa:b5: ed:a3:53:76:b6:53:cc:b2:54:b2:23:5e:65:96:af: 9d:b9:d3:70:05:3c:62:a4:90:73:8e:78:38:b4:36: 7f:20:65:2a:ba:90:fd:d4:42:fb:62:8a:53:f4:ec: 51:a8:30:2b:d3:dc:60:da:af:49:00:d1:8a:01:d6: 2c:2c:6c:03:aa:51:3b:c9:ae:f1:53:c6:6b:db:2f: 41:1a:c1:eb:2a:0c:67:41:a4:00:25:20:d2:53:90: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:51:F9:5A:49:98:33:11:3F:02:AF:16:A5:1B:80:CF:50:5A:F5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4a230db-031d-3490-b152-d40b5424ae7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d5:29:1b:5e:df:cc:fc:d5:b4:d7:68:7e:36:f1:bf:a2:5d: c4:f5:e3:a9:47:20:3f:7e:9e:cd:3e:40:35:b1:38:c8:d1:49: 09:b1:fa:b7:c1:bc:a5:63:c9:e1:62:2d:9c:0a:e4:60:fa:4b: a4:aa:f0:44:a2:02:5a:fb:fa:98:bb:17:67:c3:9a:db:44:1f: 15:eb:70:97:df:62:3b:1f:43:19:5a:e9:d4:0f:e3:db:87:74: 8c:1d:0b:1d:8a:2e:b4:bc:27:64:13:18:18:65:2c:e7:19:83: b8:f9:02:e0:f9:f8:22:80:e5:a7:fe:de:5a:d7:53:8e:35:b2: 58:03:eb:eb:24:a0:23:ff:d0:6d:2f:6d:b7:c3:05:f9:06:6b: 85:df:63:a6:ac:86:2e:23:c8:af:21:b3:e4:2c:51:22:49:0a: 17:46:be:42:e0:39:d4:fa:7e:46:70:0d:04:b9:00:4a:81:91: 2b:4a:b5:ef:ad:17:df:c5:ff:21:d8:2c:e3:82:41:d6:24:62: bc:73:7c:7e:b5:ed:6f:19:de:a9:13:61:4a:3d:77:77:51:3f: 8f:c6:e1:c0:9a:c0:4e:73:71:0c:2b:c5:fe:25:b1:7d:16:9f: 35:b7:8d:99:c2:53:63:37:01:5b:1d:67:d6:70:4c:5d:19:dd: 2a:f0:a9:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4XDKTvGZHB/iXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk M2VhZmQzMGYtNGNiMS00Nzk2LWE0ZjQtODVmMDZhMjIyODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPBEPy9SornouEFhzqcS3YheE2rZ6QsDtVs4 4AZjduCBoFnKu+SwJbIDvmInvfy4BhPlBq37Fg+tpOxFSP3dJBF6I7/z5+r+S31F gSUwrN173chltZ3YQd1KsNvnFOgrAv03U2JR8cRWOMF/QRgqdm1aBw+0NV4XPtqb uuAlEMSG02utRZAMsnO7vCtlpcWU2iie/rtgIOJgbLVBMvfTQ4Q7+rXto1N2tlPM slSyI15llq+dudNwBTxipJBzjng4tDZ/IGUqupD91EL7YopT9OxRqDAr09xg2q9J ANGKAdYsLGwDqlE7ya7xU8Zr2y9BGsHrKgxnQaQAJSDSU5AVbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtR+VpJmDMRPwKvFqUbgM9QWvVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjRhMjMwZGItMDMxZC0z NDkwLWIxNTItZDQwYjU0MjRhZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfVKRte38z81bTXaH428b+iXcT146lHID9+ns0+QDWxOMjRSQmx+rfB vKVjyeFiLZwK5GD6S6Sq8ESiAlr7+pi7F2fDmttEHxXrcJffYjsfQxla6dQP49uH dIwdCx2KLrS8J2QTGBhlLOcZg7j5AuD5+CKA5af+3lrXU441slgD6+skoCP/0G0v bbfDBfkGa4XfY6ashi4jyK8hs+QsUSJJChdGvkLgOdT6fkZwDQS5AEqBkStKte+t F9/F/yHYLOOCQdYkYrxzfH617W8Z3qkTYUo9d3dRP4/G4cCawE5zcQwrxf4lsX0W nzW3jZnCU2M3AVsdZ9ZwTF0Z3Srwqd4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:21:27 2025 by rpki-client