$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa File: 848bc911-8d84-34e0-adf4-211d260c3143.roa (raw, json) Hash identifier: lZjvKXJCqcGmK9kTEjBhRYsy7jClc8Y0JnO/RM3UQGE= Subject key identifier: 44:92:19:67:B1:98:1B:12:FD:92:2E:99:AC:41:B6:20:56:6F:35:8F Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285849780F0A1BDFAFE0A9E70F6D80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 206092 IP address blocks: 173.239.211.0/24 maxlen: 24 173.239.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0a:1b:df:af:e0:a9:e7:0f:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=d471dcd9-fd1a-4a60-b4a5-19f0f17613e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:9a:18:37:1f:14:0b:50:0b:e8:f6:fe:aa: e7:e5:b4:0d:38:70:1b:56:6a:26:cf:6e:1d:83:77: f0:47:5d:61:99:29:aa:b3:35:be:85:17:0f:87:b5: eb:98:df:29:59:f0:1a:70:59:04:1c:32:f0:f3:d7: 27:ed:30:a3:d9:35:33:db:03:34:af:eb:0c:90:df: 0a:b3:b9:ea:26:07:0d:a1:e1:4f:d0:a7:4f:e0:31: d1:5e:b7:c3:4f:6d:b5:ed:5f:de:b0:1d:a5:3b:f3: 89:dc:7e:f8:a4:72:f4:82:73:7c:e5:1d:7e:45:78: 76:ec:42:52:f1:83:a0:18:a0:9d:eb:46:38:57:63: 1d:4c:f6:5b:36:0e:41:5f:c3:c7:59:44:31:b3:4b: c2:9d:b7:a7:13:71:53:5a:94:84:79:9b:f6:84:2c: 41:55:3a:88:24:f5:81:6d:ee:80:8f:03:9d:73:1a: c1:c0:c6:72:4e:d6:4d:79:c7:8b:54:99:17:0e:17: 28:ab:03:90:5f:e6:5b:c8:58:2d:e4:66:70:42:fc: f9:48:58:f3:b0:93:b4:02:39:6d:c2:d8:0b:70:c8: 79:7b:7d:0a:19:1d:5f:8f:1b:ca:3e:a7:70:5e:84: 9c:9a:cf:80:2a:23:40:47:2e:f2:42:6d:6c:c3:34: ca:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:92:19:67:B1:98:1B:12:FD:92:2E:99:AC:41:B6:20:56:6F:35:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/848bc911-8d84-34e0-adf4-211d260c3143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.211.0/24 173.239.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:74:46:db:13:ac:26:04:70:f2:ed:f1:50:44:a9:e1:9b:ef: c7:cc:8d:3e:46:db:8e:10:a2:30:3b:dc:96:67:97:14:56:49: ed:fc:7e:89:bb:8c:0b:f8:0f:4c:47:3d:40:c6:5f:b0:d6:80: cb:80:d3:4d:55:70:4c:ba:2b:ba:30:f4:bd:c6:6c:37:97:1a: 69:3e:1f:09:1e:6b:a5:14:66:f5:29:40:99:5f:10:b4:37:df: 15:4b:24:3e:f1:0c:1c:44:1f:d6:05:e3:b6:fd:fe:ac:d2:f2: 26:28:83:30:18:9c:17:fb:38:63:6d:4a:94:19:bb:72:a7:f6: ed:27:27:0c:e3:32:92:38:44:a0:71:d4:24:e1:61:b9:8f:53: f1:ba:8a:5f:82:4f:43:0c:fb:f5:3a:44:40:f5:50:4d:47:9c: 31:d6:80:93:4e:c9:1c:47:5c:09:80:43:ae:94:43:97:d7:7d: 0d:bb:c0:0c:71:80:c4:76:7b:36:21:ea:ec:72:f6:16:eb:62: 9d:7b:fc:32:1f:d4:f6:69:fb:df:ce:40:b2:8a:6b:03:83:ee: 3e:d1:c4:4d:2f:3f:c4:a7:5b:c4:c3:91:89:5b:64:32:fc:99: 2b:b6:3c:3b:79:e1:e2:67:c2:79:34:e5:b8:23:b3:f4:ec:58: 69:ab:26:55 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEl4Dwob36/gqecPbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk ZDQ3MWRjZDktZmQxYS00YTYwLWI0YTUtMTlmMGYxNzYxM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6GaGDcfFAtQC+j2/qrn5bQNOHAbVmomz24d g3fwR11hmSmqszW+hRcPh7XrmN8pWfAacFkEHDLw89cn7TCj2TUz2wM0r+sMkN8K s7nqJgcNoeFP0KdP4DHRXrfDT2217V/esB2lO/OJ3H74pHL0gnN85R1+RXh27EJS 8YOgGKCd60Y4V2MdTPZbNg5BX8PHWUQxs0vCnbenE3FTWpSEeZv2hCxBVTqIJPWB be6AjwOdcxrBwMZyTtZNeceLVJkXDhcoqwOQX+ZbyFgt5GZwQvz5SFjzsJO0Ajlt wtgLcMh5e30KGR1fjxvKPqdwXoScms+AKiNARy7yQm1swzTKNQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFESSGWexmBsS/ZIumaxBtiBWbzWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvODQ4YmM5MTEtOGQ4NC0z NGUwLWFkZjQtMjExZDI2MGMzMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAre/TAwQA re/+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALl0RtsTrCYEcPLt8VBEqeGb78fMjT5G244QojA73JZnlxRW Se38fom7jAv4D0xHPUDGX7DWgMuA001VcEy6K7ow9L3GbDeXGmk+Hwkea6UUZvUp QJlfELQ33xVLJD7xDBxEH9YF47b9/qzS8iYogzAYnBf7OGNtSpQZu3Kn9u0nJwzj MpI4RKBx1CThYbmPU/G6il+CT0MM+/U6RED1UE1HnDHWgJNOyRxHXAmAQ66UQ5fX fQ27wAxxgMR2ezYh6uxy9hbrYp17/DIf1PZp+9/OQLKKawOD7j7RxE0vP8SnW8TD kYlbZDL8mSu2PDt54eJnwnk05bgjs/TsWGmrJlU= -----END CERTIFICATE-----Generated at Sat Apr 26 23:09:40 2025 by rpki-client