$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa File: cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa (raw, json) Hash identifier: oTnMV8dKSgtkWg8vclq2vhgMQGrCShewacp1+1Pr9RU= Subject key identifier: AF:56:EF:14:4A:40:BC:B8:D3:7D:7B:6F:EB:FC:33:F5:96:39:1E:48 Certificate issuer: /CN=b98f151e-4679-4527-a2b7-2b1bf9c28738 Certificate serial: 010D0C9F43285849CFFF852EB67FC089EC1D2540 Authority key identifier: 7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 173.240.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:85:2e:b6:7f:c0:89:ec:1d:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98f151e-4679-4527-a2b7-2b1bf9c28738 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=046ad575-2265-4c9b-a1ba-453b112aefaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:4a:82:56:0b:6a:a0:fa:98:b1:25:0f:46: 52:2d:7a:b2:d2:cf:9e:6a:2c:e0:4a:57:81:ef:6d: 67:1d:a1:b8:e3:d8:ee:58:8a:93:21:61:8e:f8:1e: 5f:db:d8:80:2b:ad:05:79:8a:2b:27:94:28:6c:f8: 6f:6b:c7:b0:f4:c3:23:b0:77:7b:f1:0a:c8:5f:20: 47:30:ad:7d:3d:81:5c:0f:92:d7:47:2a:ed:94:ca: 1d:c3:31:94:be:41:3b:72:1b:27:a8:73:9e:05:6b: 88:de:04:83:df:b7:f2:3c:7e:a0:0c:12:d8:9e:52: 5e:a3:73:f8:e4:a9:eb:ce:6f:ee:16:28:6a:be:10: 5d:00:a6:7a:7d:d9:ef:61:15:60:1f:93:04:3e:14: 5d:1a:44:bc:56:b4:14:e6:07:12:ca:86:c4:2e:a3: 09:b7:0d:48:30:a3:7f:4e:29:22:0e:85:25:88:08: 53:80:1d:cf:24:51:45:82:7f:79:78:32:f7:24:41: d6:1e:f5:01:46:18:9e:0c:9e:40:6b:d6:b6:39:da: 1c:e8:a9:b2:18:88:8c:99:ed:d2:dc:7a:32:18:16: 67:f1:29:60:c8:92:57:e1:be:86:da:9c:40:77:2f: e1:ea:4e:71:e1:96:25:ed:9f:92:68:25:9f:b7:39: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:56:EF:14:4A:40:BC:B8:D3:7D:7B:6F:EB:FC:33:F5:96:39:1E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl X509v3 Authority Key Identifier: keyid:7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer sbgp-ipAddrBlock: critical IPv4: 173.240.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:79:36:05:11:6e:ad:8b:d6:40:bc:ed:ee:74:e4:70:79:9e: c1:e7:c5:b3:31:ea:56:4b:c6:34:43:6e:d0:b2:fd:aa:f1:66: 95:02:fd:88:e5:d2:84:9b:5e:dc:6f:90:c7:28:28:81:32:89: 72:f2:e3:0d:ed:97:eb:67:d9:97:7f:a8:27:6e:63:dd:89:8c: 19:6b:56:26:d5:22:28:02:19:28:65:a0:7a:f5:bb:00:5d:60: f4:b0:95:8b:de:2a:c4:40:85:41:1c:22:ea:bd:82:43:e3:53: ab:5a:58:fe:e4:b6:02:35:db:6a:23:ed:e3:4d:3b:04:3e:76: 35:f2:d4:44:ca:ae:b5:7a:0a:79:72:9b:3f:e9:ce:24:fd:0c: 69:33:3b:7b:2c:85:56:15:90:f7:51:96:96:b9:42:30:e4:a5: c0:2f:ec:d3:da:43:07:df:69:54:b6:6f:74:03:1d:bf:a7:23: b6:bd:0a:7a:9f:35:5c:df:ec:01:9d:f3:87:cd:1a:53:ad:b2: b6:e7:8d:32:4e:a0:a5:60:25:e8:2c:e6:0e:61:c5:65:04:37: c2:4c:ad:1d:b5:6e:87:9d:28:90:21:e6:dc:e4:ec:f6:85:8a: 2e:bd:2b:eb:62:5d:a7:82:7d:41:e2:51:8b:01:b5:54:75:e8: 9a:92:28:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/4Uutn/AiewdJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4ZjE1MWUtNDY3OS00NTI3LWEyYjctMmIxYmY5YzI4 NzM4MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk MDQ2YWQ1NzUtMjI2NS00YzliLWExYmEtNDUzYjExMmFlZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLNKglYLaqD6mLElD0ZSLXqy0s+eaizgSleB 721nHaG449juWIqTIWGO+B5f29iAK60FeYorJ5QobPhva8ew9MMjsHd78QrIXyBH MK19PYFcD5LXRyrtlModwzGUvkE7chsnqHOeBWuI3gSD37fyPH6gDBLYnlJeo3P4 5Knrzm/uFihqvhBdAKZ6fdnvYRVgH5MEPhRdGkS8VrQU5gcSyobELqMJtw1IMKN/ TikiDoUliAhTgB3PJFFFgn95eDL3JEHWHvUBRhieDJ5Aa9a2Odoc6KmyGIiMme3S 3HoyGBZn8SlgyJJX4b6G2pxAdy/h6k5x4ZYl7Z+SaCWftzmaBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9W7xRKQLy40317b+v8M/WWOR5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOThm MTUxZS00Njc5LTQ1MjctYTJiNy0yYjFiZjljMjg3MzgvY2JiNWY2MWEtODk4MC0z ZWFkLWIxZjAtMGFiMGU1MGExZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4ZjE1MWUtNDY3OS00NTI3LWEy YjctMmIxYmY5YzI4NzM4L2I5OGYxNTFlLTQ2NzktNDUyNy1hMmI3LTJiMWJmOWMy ODczOC5jcmwwHwYDVR0jBBgwFoAUfq1L+MuH61XPFWjB6+XJBDwt+Y8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOThmMTUxZS00Njc5LTQ1MjctYTJiNy0yYjFi ZjljMjg3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF5NgURbq2L1kC87e505HB5nsHnxbMx6lZLxjRDbtCy/arxZpUC/Yjl 0oSbXtxvkMcoKIEyiXLy4w3tl+tn2Zd/qCduY92JjBlrVibVIigCGShloHr1uwBd YPSwlYveKsRAhUEcIuq9gkPjU6taWP7ktgI122oj7eNNOwQ+djXy1ETKrrV6Cnly mz/pziT9DGkzO3sshVYVkPdRlpa5QjDkpcAv7NPaQwffaVS2b3QDHb+nI7a9Cnqf NVzf7AGd84fNGlOtsrbnjTJOoKVgJegs5g5hxWUEN8JMrR21boedKJAh5tzk7PaF ii69K+tiXaeCfUHiUYsBtVR16JqSKKs= -----END CERTIFICATE-----Generated at Sat Jun 14 06:21:12 2025 by rpki-client