$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa File: b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa (raw, json) Hash identifier: DYgYr/b5Unv/xXN8DbzKM1/4EcfuN2DNUZu1nlVF/u0= Subject key identifier: 8E:72:4C:B5:F3:F8:54:33:B6:EC:8C:F5:DA:D9:62:29:56:25:6B:55 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F432858496FAF106CD7424937F2EF0A00 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 197555 IP address blocks: 173.239.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:10:6c:d7:42:49:37:f2:ef:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=3c746d7b-d6b8-4aa6-b67d-21729307d7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:9f:4b:6e:7b:dc:c8:11:f7:33:db:cc:c9: 6f:5a:89:13:2a:6b:7b:f6:91:75:9d:3e:b0:f6:20: f2:d0:6f:62:35:15:47:3a:3f:9b:e8:22:63:78:fc: 74:87:0e:bf:47:c7:a4:0d:01:8f:f3:e4:41:95:68: 4d:34:b8:1c:47:c7:3e:a6:70:a1:58:9b:a8:4f:d3: 82:da:ca:69:b3:76:62:dd:3c:14:82:66:ae:3b:64: 51:59:6b:06:0b:66:81:d4:ae:82:35:ed:b6:db:20: ff:3e:ce:68:d1:c0:30:41:ef:6b:9b:02:86:aa:9f: d2:ee:5e:07:24:f2:99:0b:54:25:32:25:1c:4c:30: 7f:4f:92:b8:5e:04:66:98:6f:10:50:c2:35:cf:56: ed:4f:4c:b2:05:3c:d8:b9:43:d8:2e:39:dc:81:4b: f1:0c:39:e1:7e:83:49:5b:a5:df:a1:fb:16:05:d5: 17:5d:f0:8b:0c:91:04:52:ae:37:e9:b9:c2:80:90: 3a:9c:c7:f4:17:88:c2:49:d0:10:3f:5d:78:ab:f0: 41:2e:e7:bc:9a:c3:42:c5:d2:1b:02:ae:9d:a3:e0: 42:ca:5f:d5:54:37:0a:6c:60:0b:b9:82:99:42:dd: 6e:58:f0:29:03:23:88:0f:81:01:c8:f4:73:24:fd: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:72:4C:B5:F3:F8:54:33:B6:EC:8C:F5:DA:D9:62:29:56:25:6B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5f0d1a0-4f9c-3a39-9d71-db504244a74d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3b:ee:aa:84:07:ad:2e:28:10:c4:61:75:3e:84:90:80:a0: 26:35:9c:4f:8a:68:08:d7:ae:5b:e6:1f:8b:97:8b:e8:7f:d5: 3d:09:a8:1c:3a:08:3b:50:bb:8b:86:c8:f5:08:87:1f:30:c3: 0f:be:b9:79:40:b1:6f:10:5f:69:59:e8:d6:b3:de:b5:e7:23: 9e:f1:cc:10:9c:21:70:e5:c9:2a:8e:79:5b:cb:85:68:b7:25: 1d:5a:df:12:10:5f:4f:4d:c0:6d:52:90:b8:39:a2:ba:95:b6: 90:d8:90:51:0e:3f:b0:65:93:53:f9:4e:4c:1f:c1:71:25:92: 5a:1a:84:a5:eb:a1:96:c4:3e:75:86:56:10:4a:7d:7e:0a:bb: e2:75:17:cb:26:2c:cd:91:fe:b1:66:65:d1:d0:4d:09:06:fe: e1:e4:d9:07:30:f2:84:6f:94:b6:cd:9e:74:5b:90:27:82:ca: ed:e8:7e:c9:f3:3f:dd:92:31:f9:20:d0:04:1d:5a:d8:31:d2: a6:07:36:4c:e6:49:db:b6:a9:d7:74:3d:0c:48:3e:e1:c8:50: ea:e7:b4:80:56:71:9e:f0:4a:90:31:78:df:bc:27:b1:24:81: 56:c7:72:8e:b5:5a:34:db:1f:7b:18:ed:f5:21:33:77:14:21: e4:13:84:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxBs10JJN/LvCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk M2M3NDZkN2ItZDZiOC00YWE2LWI2N2QtMjE3MjkzMDdkN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2KfS2573MgR9zPbzMlvWokTKmt79pF1nT6w 9iDy0G9iNRVHOj+b6CJjePx0hw6/R8ekDQGP8+RBlWhNNLgcR8c+pnChWJuoT9OC 2spps3Zi3TwUgmauO2RRWWsGC2aB1K6CNe222yD/Ps5o0cAwQe9rmwKGqp/S7l4H JPKZC1QlMiUcTDB/T5K4XgRmmG8QUMI1z1btT0yyBTzYuUPYLjncgUvxDDnhfoNJ W6XfofsWBdUXXfCLDJEEUq436bnCgJA6nMf0F4jCSdAQP114q/BBLue8msNCxdIb Aq6do+BCyl/VVDcKbGALuYKZQt1uWPApAyOID4EByPRzJP2TfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5yTLXz+FQztuyM9drZYilWJWtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYjVmMGQxYTAtNGY5Yy0z YTM5LTlkNzEtZGI1MDQyNDRhNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ77qqEB60uKBDEYXU+hJCAoCY1nE+KaAjXrlvmH4uXi+h/1T0JqBw6 CDtQu4uGyPUIhx8www++uXlAsW8QX2lZ6Naz3rXnI57xzBCcIXDlySqOeVvLhWi3 JR1a3xIQX09NwG1SkLg5orqVtpDYkFEOP7Blk1P5TkwfwXElkloahKXroZbEPnWG VhBKfX4Ku+J1F8smLM2R/rFmZdHQTQkG/uHk2Qcw8oRvlLbNnnRbkCeCyu3ofsnz P92SMfkg0AQdWtgx0qYHNkzmSdu2qdd0PQxIPuHIUOrntIBWcZ7wSpAxeN+8J7Ek gVbHco61WjTbH3sY7fUhM3cUIeQThLc= -----END CERTIFICATE-----Generated at Sun Apr 27 12:48:28 2025 by rpki-client