$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6d13a83f-cc80-38e9-9d50-98caad7d7886.roa File: 6d13a83f-cc80-38e9-9d50-98caad7d7886.roa (raw, json) Hash identifier: CnFyYqN54K8kGp0tbxle7ArI1IBXxXoiclKvpz+kct4= Subject key identifier: A3:CD:A1:32:D7:B6:A2:26:C5:F8:1A:0B:10:7E:0E:7F:83:9A:C6:26 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A1E2AA44AF37A0D5AC6985D80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6d13a83f-cc80-38e9-9d50-98caad7d7886.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 63018 IP address blocks: 173.239.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a4:4a:f3:7a:0d:5a:c6:98:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=2665da31-766b-42a0-89f5-66558db78624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e9:23:aa:df:b3:79:5b:de:83:53:10:17:e9: a5:a9:91:de:cc:21:18:8f:34:78:35:31:05:f3:af: 5a:20:7b:01:ba:77:8a:2e:2f:d8:80:72:09:9a:0d: b1:6f:7f:2d:3d:96:12:08:0b:be:b8:cc:5e:4e:8b: 3f:38:de:44:5b:ff:7e:a2:6c:89:73:4b:41:ac:75: af:de:8c:0a:ab:40:e7:9c:75:94:12:c8:f5:01:79: 05:8c:29:93:87:db:83:71:45:a9:24:94:0c:8e:bc: 48:7f:e9:fe:9f:7d:24:03:c8:74:34:c0:12:d5:5d: fe:eb:3f:b9:1b:71:5b:51:50:05:04:e9:c2:8a:90: c8:e9:e3:04:1c:6a:af:42:14:3c:4c:93:bd:41:8d: 10:e2:95:54:b5:41:c5:6a:72:e3:ec:3d:b0:5b:41: ed:b3:5d:02:d4:bc:3f:dd:ac:a9:62:a4:4a:54:cc: 86:d5:1a:b2:7a:5c:ac:4e:3c:ac:3c:35:b6:5f:31: 49:6f:55:7d:05:3a:9c:56:db:64:cb:9b:d3:75:93: 4d:8c:8e:f4:d7:b4:1b:a4:b4:78:9b:e0:f5:9c:b0: e0:16:22:ab:16:e5:c9:ce:42:4e:45:6b:10:60:bd: 8e:a0:ed:55:09:56:18:a8:8b:31:49:63:3d:cb:ac: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CD:A1:32:D7:B6:A2:26:C5:F8:1A:0B:10:7E:0E:7F:83:9A:C6:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6d13a83f-cc80-38e9-9d50-98caad7d7886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ed:66:32:f0:e2:8d:a5:bf:18:f1:26:9f:76:c9:2e:5b:1a: 3e:29:e0:24:26:ee:8e:29:08:6f:cf:7d:eb:14:18:8b:0c:4f: da:2d:4c:bc:c6:dd:93:4f:d8:53:6e:e2:f6:55:b0:5e:d6:d7: 19:93:86:20:13:8b:00:6c:5e:e0:f0:9a:38:8b:11:71:da:ea: 51:aa:b7:40:44:97:3f:81:4b:3e:8d:b1:a9:51:7a:26:99:02: 36:39:b7:4d:6c:dd:14:22:5e:ae:fd:13:b5:bb:79:64:04:a1: e0:00:1a:7f:b2:10:3b:2e:de:92:3a:20:5e:b1:61:57:6a:ca: 14:b7:18:3b:eb:10:14:ee:ef:03:87:34:ba:7d:fe:60:9b:0f: 3b:55:32:11:04:4f:3d:f3:7c:95:b6:69:d4:f5:2d:17:9b:34: c7:50:c5:f3:8b:cf:98:63:eb:d3:c6:16:20:52:9a:a5:88:70: 27:26:c1:dd:7f:01:5d:fb:a5:70:a8:dc:d7:4b:26:c0:73:f9: 7e:c0:f2:ed:83:94:73:d0:a0:1e:76:e2:55:87:45:5f:5b:bf: da:0a:8c:00:fa:82:e2:60:f8:2c:90:1b:99:dd:c5:64:30:b3: 1d:ad:3f:6e:ef:66:3c:de:75:c1:8a:ae:a7:44:c5:96:39:a9: 31:fa:84:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqRK83oNWsaYXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk MjY2NWRhMzEtNzY2Yi00MmEwLTg5ZjUtNjY1NThkYjc4NjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOkjqt+zeVveg1MQF+mlqZHezCEYjzR4NTEF 869aIHsBuneKLi/YgHIJmg2xb38tPZYSCAu+uMxeTos/ON5EW/9+omyJc0tBrHWv 3owKq0DnnHWUEsj1AXkFjCmTh9uDcUWpJJQMjrxIf+n+n30kA8h0NMAS1V3+6z+5 G3FbUVAFBOnCipDI6eMEHGqvQhQ8TJO9QY0Q4pVUtUHFanLj7D2wW0Hts10C1Lw/ 3aypYqRKVMyG1RqyelysTjysPDW2XzFJb1V9BTqcVttky5vTdZNNjI7017QbpLR4 m+D1nLDgFiKrFuXJzkJORWsQYL2OoO1VCVYYqIsxSWM9y6zYVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPNoTLXtqImxfgaCxB+Dn+DmsYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNmQxM2E4M2YtY2M4MC0z OGU5LTlkNTAtOThjYWFkN2Q3ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEftZjLw4o2lvxjxJp92yS5bGj4p4CQm7o4pCG/PfesUGIsMT9otTLzG 3ZNP2FNu4vZVsF7W1xmThiATiwBsXuDwmjiLEXHa6lGqt0BElz+BSz6NsalReiaZ AjY5t01s3RQiXq79E7W7eWQEoeAAGn+yEDsu3pI6IF6xYVdqyhS3GDvrEBTu7wOH NLp9/mCbDztVMhEETz3zfJW2adT1LRebNMdQxfOLz5hj69PGFiBSmqWIcCcmwd1/ AV37pXCo3NdLJsBz+X7A8u2DlHPQoB524lWHRV9bv9oKjAD6guJg+CyQG5ndxWQw sx2tP27vZjzedcGKrqdExZY5qTH6hM4= -----END CERTIFICATE-----Generated at Tue Jun 17 14:55:41 2025 by rpki-client