$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa File: c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa (raw, json) Hash identifier: XEle1d5uRaSpMrXPTgFG0vXFfLSDd/77TKrCLAS+P4k= Subject key identifier: 2D:A2:A8:82:81:D5:6A:EF:C4:60:DC:0D:2A:AD:83:C4:2C:04:AE:8D Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285848E59BCABC0D96543AB25FF3C0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 206092 IP address blocks: 173.239.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:ca:bc:0d:96:54:3a:b2:5f:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=bf30de21-f984-4cf6-86fb-23276beb3e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:98:1e:c6:2e:60:a3:1d:42:de:8c:e1:09: a6:a5:1b:0b:76:7e:42:08:03:8e:24:86:72:09:e1: 5f:7c:10:6d:4a:f3:ec:f9:78:9e:2b:7f:e7:3c:33: 94:df:e9:f2:b5:b9:0c:9b:50:0d:0e:c2:16:82:f1: 5d:e6:c5:04:c7:9d:08:78:e8:64:40:df:c5:59:40: 64:95:12:74:a7:49:70:0d:c4:5b:f4:9c:b9:d9:c1: e7:30:41:ac:be:36:cc:f3:0d:64:c7:a1:c7:cc:da: ea:f2:d3:29:e4:9d:b8:97:9a:9a:4e:65:64:dc:4a: 9c:07:4a:c9:e6:c0:6b:f4:7f:7e:f2:04:cd:b7:69: d8:dd:59:7e:73:e2:c9:34:94:92:d6:de:0e:d5:e6: ed:18:c7:10:17:b4:92:24:4e:66:cb:d8:71:4b:81: e8:9a:67:40:a8:a0:52:d3:b9:62:b9:d1:69:91:be: af:9e:e4:46:aa:0a:1b:5d:a8:91:7b:4a:ba:6e:75: 00:8c:89:4a:52:47:c9:0b:19:6b:32:f5:ef:54:f7: d0:16:7a:d4:69:9b:24:0d:1f:4c:85:95:29:ba:07: 99:27:fa:6c:ba:50:87:e4:fa:05:ed:9e:f2:be:91: 55:03:84:6a:35:03:76:dc:b5:83:81:2b:68:fc:06: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A2:A8:82:81:D5:6A:EF:C4:60:DC:0D:2A:AD:83:C4:2C:04:AE:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:08:f9:62:fd:30:22:52:7d:61:d8:5e:db:01:1e:37:05:d4: 6b:21:96:aa:8b:d7:c6:27:91:f4:cc:84:f0:fe:d3:8c:4c:a4: 37:08:08:ac:bc:89:3b:98:c1:37:09:9e:46:82:a6:31:31:3f: 0a:ed:1e:8d:36:72:19:89:0c:e9:4d:d5:9f:9d:45:22:9b:db: 33:fa:98:80:41:65:5a:3b:b4:ed:39:1f:d7:2e:a6:df:22:fa: 42:b8:4b:13:30:5e:59:fb:53:3a:94:53:86:7f:83:9e:ca:0e: 99:c7:16:95:b9:cb:1b:98:62:73:a3:75:65:b3:b6:a4:46:a0: d9:58:17:dd:34:9d:f1:bd:26:70:dc:b2:ad:4b:97:90:b4:82: e5:97:6d:04:b8:26:ca:82:0b:c7:89:dd:ae:22:15:44:6d:dd: 78:f6:51:98:ea:49:2b:00:4f:23:34:93:ff:98:2d:c0:b4:41: f7:1b:6b:4d:c8:90:b2:18:a8:e4:e5:a1:b4:de:a3:5a:a1:b3: c7:a8:e8:83:b4:b9:e3:48:20:8a:dd:f3:56:5f:63:cd:28:78: 05:db:32:e6:fc:5b:ef:33:50:b7:f9:39:d9:55:9c:4e:f2:6a: b9:fa:65:ea:3c:74:ba:c4:0b:e9:1c:c1:07:b3:c6:21:dd:96: b0:e2:28:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8q8DZZUOrJf88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YmYzMGRlMjEtZjk4NC00Y2Y2LTg2ZmItMjMyNzZiZWIzZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSCYHsYuYKMdQt6M4QmmpRsLdn5CCAOOJIZy CeFffBBtSvPs+XieK3/nPDOU3+nytbkMm1ANDsIWgvFd5sUEx50IeOhkQN/FWUBk lRJ0p0lwDcRb9Jy52cHnMEGsvjbM8w1kx6HHzNrq8tMp5J24l5qaTmVk3EqcB0rJ 5sBr9H9+8gTNt2nY3Vl+c+LJNJSS1t4O1ebtGMcQF7SSJE5my9hxS4HommdAqKBS 07liudFpkb6vnuRGqgobXaiRe0q6bnUAjIlKUkfJCxlrMvXvVPfQFnrUaZskDR9M hZUpugeZJ/psulCH5PoF7Z7yvpFVA4RqNQN23LWDgSto/AbeqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2iqIKB1WrvxGDcDSqtg8QsBK6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYzZlYmRiODAtODZmOS0z NDJkLTg4ZGItZjBhMTI4NTNlM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8I+WL9MCJSfWHYXtsBHjcF1GshlqqL18YnkfTMhPD+04xMpDcICKy8 iTuYwTcJnkaCpjExPwrtHo02chmJDOlN1Z+dRSKb2zP6mIBBZVo7tO05H9cupt8i +kK4SxMwXln7UzqUU4Z/g57KDpnHFpW5yxuYYnOjdWWztqRGoNlYF900nfG9JnDc sq1Ll5C0guWXbQS4JsqCC8eJ3a4iFURt3Xj2UZjqSSsATyM0k/+YLcC0Qfcba03I kLIYqOTlobTeo1qhs8eo6IO0ueNIIIrd81ZfY80oeAXbMub8W+8zULf5OdlVnE7y arn6Zeo8dLrEC+kcwQezxiHdlrDiKIc= -----END CERTIFICATE-----Generated at Mon Apr 28 18:30:28 2025 by rpki-client