$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa File: 7796b63e-a3f6-32f5-8eef-d866f8e76131.roa (raw, json) Hash identifier: o/IGrGM9xJ7InGJzGtr1mQqVgFVtHg/rSfoXG6wXdLw= Subject key identifier: 0D:4E:B4:59:BF:A3:5D:DC:F1:FE:C6:9B:9D:F9:C8:D5:0B:18:97:96 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285848D62C2DC1BB6769C23EA48540 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa Signing time: Mon 10 Feb 2025 13:18:53 +0000 ROA not before: Mon 10 Feb 2025 13:18:53 +0000 ROA not after: Sun 11 May 2025 12:18:53 +0000 asID: 212238 IP address blocks: 173.239.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:2c:2d:c1:bb:67:69:c2:3e:a4:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Feb 10 13:18:53 2025 GMT Not After : May 11 12:18:53 2025 GMT Subject: CN=c4ae7d29-a1fd-44cf-aa0d-32d900ab942b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9f:0e:52:25:8d:73:dd:79:6e:33:ea:4f:77: 86:57:f7:8a:36:30:04:26:63:1b:7e:a3:04:b2:17: 85:32:1a:e0:44:b1:c7:b9:2d:45:f3:4f:28:45:33: 88:9a:60:b0:89:87:ab:37:11:d4:2b:70:3a:a9:85: 78:6e:f9:45:61:67:85:77:b4:fa:6e:16:31:d1:ad: 77:ac:76:aa:02:8c:13:1a:cf:91:df:79:9f:55:b9: 04:5d:ed:1f:5a:b6:40:b7:d0:49:37:10:a4:3e:50: 26:4f:54:4e:f0:52:21:f2:44:db:c1:c1:0b:51:b1: 22:e1:d9:63:2b:17:00:7f:0d:a4:50:92:1a:33:c1: 0c:8f:b1:ae:28:f4:37:45:9c:87:2b:f6:56:61:8a: 73:c1:71:c3:d9:9a:3f:8a:fe:43:01:68:e3:c6:0c: ad:dc:49:f8:57:67:86:c7:7f:7b:f5:bb:26:15:ad: 3f:5f:2f:99:f9:1f:fb:52:bb:94:7a:50:30:a2:df: c0:60:27:a2:98:a7:a7:9d:6d:bc:b2:8a:4d:ee:37: 64:cf:e6:3b:3e:a2:9a:21:7d:b6:2c:c6:21:12:f7: 86:34:89:19:59:48:df:ed:9d:c8:f5:91:2b:7b:34: 67:b8:2e:6b:74:e3:e9:bc:28:de:f5:b8:c8:f4:7c: 35:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4E:B4:59:BF:A3:5D:DC:F1:FE:C6:9B:9D:F9:C8:D5:0B:18:97:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7796b63e-a3f6-32f5-8eef-d866f8e76131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:76:0c:03:86:22:9c:50:a6:df:9c:ca:ce:be:37:1e:11:4f: 75:48:0a:52:1c:6c:87:97:d5:9b:23:c4:49:ef:dd:b3:cf:5f: 5f:69:d8:4d:fe:cb:06:9e:0c:fe:93:fb:96:b0:a4:bd:46:b5: 48:07:94:4d:36:d8:c8:12:70:7c:6f:29:17:69:11:06:fb:b0: 4e:42:85:58:38:1e:f0:43:17:d3:96:c1:14:14:89:38:d2:81: 2c:be:8c:97:d4:fe:94:95:3c:a2:29:0c:9b:de:42:22:b2:98: 41:dd:fd:a6:5b:e7:89:26:b3:94:26:fd:69:b5:c5:e7:c5:d7: c2:b6:3a:ab:af:9f:13:ba:e8:bd:7d:03:a3:8d:aa:ae:3a:7f: eb:03:c8:5a:50:4f:85:63:72:ce:a8:a1:8c:e3:2e:08:de:9d: e7:f5:eb:25:30:c7:bc:bb:0a:22:0e:48:ba:67:ed:58:be:ff: 2a:c9:6f:6b:3c:c1:6d:b2:10:72:09:7e:a2:42:04:3e:dc:01: 06:5f:87:3d:ef:4d:ae:4b:4c:fb:a2:8b:45:cf:4f:f5:61:f7: 5f:54:5c:57:5f:8e:d8:a8:f7:e2:5a:ce:a8:48:3b:76:5f:7c: ae:b9:39:bf:ad:1d:8f:43:21:a5:0e:07:a8:d4:1f:35:5b:0a: 6e:98:90:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWLC3Bu2dpwj6khUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDIxMDEzMTg1M1oXDTI1MDUxMTEyMTg1M1owLzEtMCsGA1UEAxMk YzRhZTdkMjktYTFmZC00NGNmLWFhMGQtMzJkOTAwYWI5NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp8OUiWNc915bjPqT3eGV/eKNjAEJmMbfqME sheFMhrgRLHHuS1F808oRTOImmCwiYerNxHUK3A6qYV4bvlFYWeFd7T6bhYx0a13 rHaqAowTGs+R33mfVbkEXe0fWrZAt9BJNxCkPlAmT1RO8FIh8kTbwcELUbEi4dlj KxcAfw2kUJIaM8EMj7GuKPQ3RZyHK/ZWYYpzwXHD2Zo/iv5DAWjjxgyt3En4V2eG x3979bsmFa0/Xy+Z+R/7UruUelAwot/AYCeimKennW28sopN7jdkz+Y7PqKaIX22 LMYhEveGNIkZWUjf7Z3I9ZErezRnuC5rdOPpvCje9bjI9Hw1iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1OtFm/o13c8f7Gm535yNULGJeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNzc5NmI2M2UtYTNmNi0z MmY1LThlZWYtZDg2NmY4ZTc2MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV2DAOGIpxQpt+cys6+Nx4RT3VIClIcbIeX1ZsjxEnv3bPPX19p2E3+ ywaeDP6T+5awpL1GtUgHlE022MgScHxvKRdpEQb7sE5ChVg4HvBDF9OWwRQUiTjS gSy+jJfU/pSVPKIpDJveQiKymEHd/aZb54kms5Qm/Wm1xefF18K2OquvnxO66L19 A6ONqq46f+sDyFpQT4Vjcs6ooYzjLgjenef16yUwx7y7CiIOSLpn7Vi+/yrJb2s8 wW2yEHIJfqJCBD7cAQZfhz3vTa5LTPuii0XPT/Vh919UXFdfjtio9+JazqhIO3Zf fK65Ob+tHY9DIaUOB6jUHzVbCm6YkCk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:44 2025 by rpki-client