$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa File: f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa (raw, json) Hash identifier: U/AQfs9pbu/KVNqvIfsL9/Jgk4G2QQCROKUFH/F0JCk= Subject key identifier: 2B:48:D6:7C:B9:2E:02:D4:51:F8:03:F4:68:E6:24:E5:CB:0F:2B:29 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584A0C054BF7FDA1D2931B24CB32 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 62240 IP address blocks: 173.239.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:4b:f7:fd:a1:d2:93:1b:24:cb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8cb3a90b-82be-4631-bd94-631dfae1091b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:33:de:33:3a:9a:2f:35:63:b5:4c:1e:c7: 3b:d9:7a:13:42:fd:44:89:f5:fc:35:fe:d9:54:c0: d3:cf:9d:1a:ae:69:59:b0:61:60:f3:bb:0b:71:48: 63:61:4e:d4:f8:32:66:a1:00:23:3c:a4:e3:18:91: 3b:b3:dc:46:1d:9c:59:39:46:c4:3a:c2:71:7f:9c: 84:e7:50:ce:87:18:e6:91:a6:68:9f:27:8d:db:f2: e0:41:01:6b:d4:3c:62:3d:ab:ea:c3:5f:b5:fb:f6: c6:55:2d:0c:90:de:cc:4d:d2:c7:8d:dd:d6:6d:d0: 2c:1b:ed:4f:4f:d8:3f:e9:8e:9b:6b:0f:4e:5d:dc: 11:39:b2:47:b5:62:21:bd:c6:59:4e:ef:04:04:76: 5c:10:20:32:75:3b:47:0c:ee:17:c8:05:33:d8:47: f7:52:b5:03:ae:1d:92:93:ba:fc:15:fa:19:00:87: 0e:6e:be:da:f0:65:9b:c9:4c:04:a1:b4:65:2e:f2: d8:f8:16:56:61:2a:ff:21:9e:82:b9:77:be:24:8c: 9c:ca:c4:46:28:1e:6e:85:d2:0f:ae:a1:77:67:0e: 6a:07:8d:3b:3a:14:7a:83:a3:bf:64:e9:67:ba:f8: 42:41:63:74:3b:ae:c8:51:1b:21:ed:67:80:be:9d: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:48:D6:7C:B9:2E:02:D4:51:F8:03:F4:68:E6:24:E5:CB:0F:2B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:97:7f:41:4f:ee:2c:24:66:89:df:ea:a7:8c:41:12:29:be: 00:bd:5a:a2:6f:99:f1:0f:c3:ce:30:4e:39:61:4f:18:dc:fd: 3b:be:84:13:5b:8f:9c:9e:a9:3b:3a:20:ae:2a:6e:05:50:20: e0:ff:68:6a:92:8d:ee:56:83:e0:f6:cc:07:04:92:c8:b5:d4: 14:b4:03:1e:f0:18:b8:a8:0b:02:20:fe:62:ab:45:f5:59:22: 8e:00:e6:69:6c:57:9c:19:b8:ea:dc:21:aa:8e:a8:5e:e2:f6: 30:f3:44:7b:ce:c0:c0:9d:6e:bd:91:1a:31:b3:d5:5d:80:38: b2:eb:04:68:03:f8:3c:b4:0f:fe:3d:34:d6:08:9b:d2:45:87: df:4a:11:d4:72:75:05:b7:0c:09:e8:b9:04:a7:2a:36:3d:6a: ae:43:a0:d4:03:94:df:68:a0:4d:fc:18:d8:21:8f:9e:85:cc: 22:ae:f2:0e:a3:8f:9e:12:ea:11:28:2e:ef:26:ec:72:26:69: 18:91:18:da:69:05:f0:7f:a6:fb:56:47:46:fa:92:3f:2f:72: b8:22:72:38:9e:1f:21:ff:f3:d8:4e:a3:75:c9:a7:4c:a5:c1: b9:a8:65:6e:63:71:e4:db:9e:a1:5a:5b:bc:57:1f:54:5a:a9: b6:cc:61:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUv3/aHSkxskyzIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGNiM2E5MGItODJiZS00NjMxLWJkOTQtNjMxZGZhZTEwOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvIz3jM6mi81Y7VMHsc72XoTQv1EifX8Nf7Z VMDTz50armlZsGFg87sLcUhjYU7U+DJmoQAjPKTjGJE7s9xGHZxZOUbEOsJxf5yE 51DOhxjmkaZonyeN2/LgQQFr1DxiPavqw1+1+/bGVS0MkN7MTdLHjd3WbdAsG+1P T9g/6Y6baw9OXdwRObJHtWIhvcZZTu8EBHZcECAydTtHDO4XyAUz2Ef3UrUDrh2S k7r8FfoZAIcObr7a8GWbyUwEobRlLvLY+BZWYSr/IZ6CuXe+JIycysRGKB5uhdIP rqF3Zw5qB407OhR6g6O/ZOlnuvhCQWN0O67IURsh7WeAvp21JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtI1ny5LgLUUfgD9GjmJOXLDyspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZjhlOWRkMGMtNmRjMy0z NTNjLWI5ODYtM2RhZGU1YTdkMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiXf0FP7iwkZonf6qeMQRIpvgC9WqJvmfEPw84wTjlhTxjc/Tu+hBNb j5yeqTs6IK4qbgVQIOD/aGqSje5Wg+D2zAcEksi11BS0Ax7wGLioCwIg/mKrRfVZ Io4A5mlsV5wZuOrcIaqOqF7i9jDzRHvOwMCdbr2RGjGz1V2AOLLrBGgD+Dy0D/49 NNYIm9JFh99KEdRydQW3DAnouQSnKjY9aq5DoNQDlN9ooE38GNghj56FzCKu8g6j j54S6hEoLu8m7HImaRiRGNppBfB/pvtWR0b6kj8vcrgicjieHyH/89hOo3XJp0yl wbmoZW5jceTbnqFaW7xXH1RaqbbMYYY= -----END CERTIFICATE-----Generated at Sun Jun 15 18:02:02 2025 by rpki-client