$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa File: 0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa (raw, json) Hash identifier: XhwytWtOY10+8lvN2H3sCcRPvmfiBaJ9hbNkZrGKUwA= Subject key identifier: 1A:9C:B7:AF:0B:CD:7F:F0:28:F2:43:BC:F2:40:7C:06:D6:E9:CD:98 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584960541B020C50713979F47570 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 212238 IP address blocks: 173.239.200.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:1b:02:0c:50:71:39:79:f4:75:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=2b0bc66a-4490-4cbe-8f73-25ac10b09290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:77:55:a7:50:09:cd:be:22:2d:a7:da:5e: 39:b6:84:49:73:3d:d8:f1:06:d2:a4:08:ed:f1:ba: 34:30:cd:2b:b1:00:04:fd:7a:10:a5:6d:44:fb:aa: a9:e7:86:39:42:cc:35:f3:37:70:3e:e2:91:5f:08: 01:bd:44:b0:f1:08:ca:1c:92:73:af:ab:4b:48:f3: 27:a3:01:2d:c1:db:87:ed:b7:9f:bd:9b:69:98:5c: 22:95:1b:27:69:63:3a:9c:7a:59:78:99:46:80:72: 19:86:63:85:1d:e9:42:c2:7b:73:79:4d:83:9b:94: 6d:7a:11:7b:e4:bd:01:05:de:6a:a3:d0:ea:9b:07: 00:f5:7b:70:1a:f7:09:b0:e1:9b:f7:67:c3:f3:01: 4e:58:08:0c:da:e4:28:5a:d2:c6:99:ec:be:85:26: 6b:f4:a1:fd:ae:9f:bf:fd:2d:70:e9:eb:21:31:9e: 44:0c:53:a7:4b:54:f3:c8:9f:5b:fc:53:0b:be:ed: 05:30:23:c1:8f:68:f5:a2:da:79:5a:63:ce:02:d2: 40:89:b5:07:83:29:5f:e9:9d:36:34:21:44:d1:cb: b4:73:58:85:92:33:77:41:c6:89:fe:5d:cd:90:25: e5:6f:b1:e8:25:2c:9d:62:93:6c:39:5a:58:8e:69: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9C:B7:AF:0B:CD:7F:F0:28:F2:43:BC:F2:40:7C:06:D6:E9:CD:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0963904b-9fc5-3eff-8743-3c2bd1b1cd57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.200.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8b:aa:45:65:59:60:22:f5:e8:f4:21:78:87:20:77:5c:df: 01:28:4e:ad:02:90:e6:6b:8c:e0:21:8a:9b:88:32:fd:91:bc: a4:ba:89:31:75:0f:9f:76:7a:20:30:b9:d2:2d:7c:eb:7a:3d: 5a:ba:39:54:72:c1:a8:2c:4b:70:81:14:0d:3b:fd:89:c9:32: 47:97:d1:8b:34:26:46:b7:7f:f7:2d:1a:27:4c:56:19:1f:43: ce:fb:91:32:5e:95:a9:c8:00:9b:76:52:57:48:dc:07:e3:0a: 8f:d1:0d:15:a0:f1:4a:16:86:ee:6c:a8:fb:35:21:a6:03:e5: ea:be:e7:76:88:b2:2a:71:16:a7:7d:f1:b7:ad:20:53:16:2b: 5e:12:04:f4:ca:86:e9:ab:3a:25:8e:06:81:34:02:34:33:ed: de:8c:98:f5:1f:f9:7d:9f:97:f2:c0:bc:f3:da:22:6c:36:94: 4a:11:f9:91:68:3d:f6:23:16:47:10:f5:49:cb:d7:9b:a7:13: f8:54:6d:e7:be:1f:2d:7e:61:a1:8c:90:b2:98:5f:6e:14:1c: dc:e4:67:dc:61:43:fa:04:07:b8:ff:0d:8a:dd:24:ac:78:fb: 13:c8:cb:06:aa:90:ec:fa:24:c7:a1:57:80:a9:e3:2a:27:cb: 25:ea:60:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElgVBsCDFBxOXn0dXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk MmIwYmM2NmEtNDQ5MC00Y2JlLThmNzMtMjVhYzEwYjA5MjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLx3VadQCc2+Ii2n2l45toRJcz3Y8QbSpAjt 8bo0MM0rsQAE/XoQpW1E+6qp54Y5Qsw18zdwPuKRXwgBvUSw8QjKHJJzr6tLSPMn owEtwduH7befvZtpmFwilRsnaWM6nHpZeJlGgHIZhmOFHelCwntzeU2Dm5RtehF7 5L0BBd5qo9DqmwcA9XtwGvcJsOGb92fD8wFOWAgM2uQoWtLGmey+hSZr9KH9rp+/ /S1w6eshMZ5EDFOnS1TzyJ9b/FMLvu0FMCPBj2j1otp5WmPOAtJAibUHgylf6Z02 NCFE0cu0c1iFkjN3QcaJ/l3NkCXlb7HoJSydYpNsOVpYjmnxNwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBqct68LzX/wKPJDvPJAfAbW6c2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMDk2MzkwNGItOWZjNS0z ZWZmLTg3NDMtM2MyYmQxYjFjZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHre/IADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRi6pFZVlgIvXo9CF4hyB3XN8BKE6tApDma4zgIYqbiDL9kbykuokx dQ+fdnogMLnSLXzrej1aujlUcsGoLEtwgRQNO/2JyTJHl9GLNCZGt3/3LRonTFYZ H0PO+5EyXpWpyACbdlJXSNwH4wqP0Q0VoPFKFobubKj7NSGmA+Xqvud2iLIqcRan ffG3rSBTFiteEgT0yobpqzoljgaBNAI0M+3ejJj1H/l9n5fywLzz2iJsNpRKEfmR aD32IxZHEPVJy9ebpxP4VG3nvh8tfmGhjJCymF9uFBzc5GfcYUP6BAe4/w2K3SSs ePsTyMsGqpDs+iTHoVeAqeMqJ8sl6mBF -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:01 2025 by rpki-client