$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7171b1a1-b47a-3900-865e-4cfb068b19be.roa File: 7171b1a1-b47a-3900-865e-4cfb068b19be.roa (raw, json) Hash identifier: n0IsV05L0NAWNNA5dbCDTYQdScuO+j1L7bXI6XnRYh8= Subject key identifier: 85:D6:92:FE:28:7A:9A:BF:69:06:AF:48:91:1C:C5:C2:33:71:21:8F Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F432858497AD9BCDFC3A8F5E712C9F0C0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7171b1a1-b47a-3900-865e-4cfb068b19be.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 137409 IP address blocks: 173.244.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:bc:df:c3:a8:f5:e7:12:c9:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=94e65d87-7ae2-4811-88a9-13d033fb1067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:9e:19:a8:87:96:1f:c4:dc:5b:13:5c:cf: 1c:c3:1a:ef:12:7b:ad:57:4b:18:2d:e7:71:f3:72: f4:6c:4b:d8:86:b2:4c:ad:a9:23:97:f1:9a:3d:df: 2b:ea:51:af:3d:9c:9b:96:4b:b5:aa:15:4b:ae:3e: f5:d8:44:a3:4e:e4:b5:90:59:d1:bb:fc:b7:39:95: 63:fc:4e:c8:cf:4f:ab:bf:06:15:a9:fe:7c:f5:81: 00:79:c2:20:c5:25:67:3e:d7:ea:4c:2d:16:20:ee: 8a:96:4e:1a:7f:cd:b2:b7:4e:e3:cf:a8:8f:42:a0: 10:84:7b:6c:c7:53:a3:79:3b:84:71:f0:bc:1e:7e: a5:2b:14:21:90:74:6e:c5:cd:2c:aa:d1:1f:50:9e: 0c:a5:02:a6:d5:4e:68:23:e2:10:19:68:e5:57:9d: 14:13:e9:04:1e:ac:04:f3:2c:37:10:c2:67:8c:c8: 34:e7:60:26:c3:0f:e7:a7:ca:61:3c:2e:df:e0:4e: ae:2f:4b:b4:9b:a9:80:14:af:92:df:6b:07:c6:b0: 31:75:79:e5:24:98:c5:b6:0a:92:98:74:9f:25:17: 82:fe:25:32:e5:c5:51:30:c0:3e:ad:f6:6c:07:66: 03:7f:dc:7b:dd:63:48:78:a5:b8:a3:8e:00:26:6f: 5b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:92:FE:28:7A:9A:BF:69:06:AF:48:91:1C:C5:C2:33:71:21:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7171b1a1-b47a-3900-865e-4cfb068b19be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.244.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:75:4d:b7:b2:b5:a3:93:8d:6c:b4:58:92:25:47:4a:bd:13: 3c:15:fe:90:e9:3f:97:c7:f5:c4:c2:5d:ba:3f:35:de:ae:18: d0:83:bf:87:66:d9:bb:bd:a5:a6:ec:16:87:b7:c5:db:0e:58: 97:15:63:35:33:92:d4:ac:39:71:9a:1d:de:6c:91:ae:4d:ef: 50:65:d5:7b:82:ce:a7:f2:3d:8f:3c:3c:1f:7d:f0:76:d0:72: 99:21:8e:81:cb:68:76:fd:13:ca:4f:4d:e4:3e:6b:d1:06:a2: e0:a0:7d:e9:0c:51:fa:17:35:af:07:e7:63:a4:64:89:91:65: a1:55:6a:3d:d7:0b:ca:35:3e:85:a0:4f:2f:1b:48:bd:c2:e7: 7d:d5:84:1e:ba:bb:79:67:51:be:4a:29:88:54:05:aa:95:3e: 2d:75:bd:82:14:5a:50:2d:f7:a5:5c:00:a8:3c:e5:d8:cc:99: 7d:f3:43:d3:8c:5b:97:ca:6d:9a:a9:79:8d:50:6d:82:1e:b4: 96:0d:16:bb:6e:2d:3a:04:cf:f9:29:e0:61:78:7f:22:d9:47: 0b:b3:fb:eb:e0:78:1a:94:67:b5:16:b4:c0:1e:44:1d:d6:2a: 1f:f4:8b:8b:99:ba:71:c4:f9:a3:24:00:fd:ff:ba:25:ee:ce: db:6b:7b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62bzfw6j15xLJ8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk OTRlNjVkODctN2FlMi00ODExLTg4YTktMTNkMDMzZmIxMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjCeGaiHlh/E3FsTXM8cwxrvEnutV0sYLedx 83L0bEvYhrJMrakjl/GaPd8r6lGvPZyblku1qhVLrj712ESjTuS1kFnRu/y3OZVj /E7Iz0+rvwYVqf589YEAecIgxSVnPtfqTC0WIO6Klk4af82yt07jz6iPQqAQhHts x1OjeTuEcfC8Hn6lKxQhkHRuxc0sqtEfUJ4MpQKm1U5oI+IQGWjlV50UE+kEHqwE 8yw3EMJnjMg052Amww/np8phPC7f4E6uL0u0m6mAFK+S32sHxrAxdXnlJJjFtgqS mHSfJReC/iUy5cVRMMA+rfZsB2YDf9x73WNIeKW4o44AJm9bJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXWkv4oepq/aQavSJEcxcIzcSGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNzE3MWIxYTEtYjQ3YS0z OTAwLTg2NWUtNGNmYjA2OGIxOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ51TbeytaOTjWy0WJIlR0q9EzwV/pDpP5fH9cTCXbo/Nd6uGNCDv4dm 2bu9pabsFoe3xdsOWJcVYzUzktSsOXGaHd5ska5N71Bl1XuCzqfyPY88PB998HbQ cpkhjoHLaHb9E8pPTeQ+a9EGouCgfekMUfoXNa8H52OkZImRZaFVaj3XC8o1PoWg Ty8bSL3C533VhB66u3lnUb5KKYhUBaqVPi11vYIUWlAt96VcAKg85djMmX3zQ9OM W5fKbZqpeY1QbYIetJYNFrtuLToEz/kp4GF4fyLZRwuz++vgeBqUZ7UWtMAeRB3W Kh/0i4uZunHE+aMkAP3/uiXuzttrexg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:20 2025 by rpki-client