$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa File: cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa (raw, json) Hash identifier: zg2AAv5ayTnLKQ9TtRrrZqRL1Sxol0s9AMkfD/NpqeI= Subject key identifier: 09:14:77:EA:3F:41:CA:F4:33:4C:3D:91:3C:11:31:86:5B:09:C6:29 Certificate issuer: /CN=b98f151e-4679-4527-a2b7-2b1bf9c28738 Certificate serial: 010D0C9F43285848F05C9B502E9D81EFCEC8C300 Authority key identifier: 7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa Signing time: Wed 19 Feb 2025 22:27:29 +0000 ROA not before: Wed 19 Feb 2025 22:27:29 +0000 ROA not after: Tue 20 May 2025 21:27:29 +0000 asID: 16509 IP address blocks: 173.240.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:5c:9b:50:2e:9d:81:ef:ce:c8:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98f151e-4679-4527-a2b7-2b1bf9c28738 Validity Not Before: Feb 19 22:27:29 2025 GMT Not After : May 20 21:27:29 2025 GMT Subject: CN=57a3a500-aeaf-474b-94b1-1df6198a7805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:90:bd:dc:62:8d:30:0a:0d:ed:2f:93:1e: 6f:1c:c2:76:4f:75:93:26:54:a0:db:f1:77:d1:f1: ea:65:43:e3:87:ae:ba:df:33:02:53:e8:f6:e9:d0: cb:a5:bc:74:f5:77:23:76:7e:1e:27:db:68:73:82: e9:ee:ef:af:43:e0:92:b1:19:3d:23:51:60:73:e3: cf:66:37:08:6e:9c:cc:f9:35:eb:45:86:ec:aa:6b: 90:a9:65:a6:fe:a5:b0:7a:b7:b6:28:88:0c:4e:df: e1:69:e7:13:59:40:a8:a1:b9:fc:42:71:c7:b8:99: 6a:89:bd:61:4a:d6:28:c6:26:92:39:30:56:73:2d: cc:9c:5d:be:14:d4:91:26:ca:30:7f:9a:4a:91:bb: d7:2d:8b:53:d4:c7:33:f5:af:f3:8e:d0:65:7a:54: 82:78:cf:a2:97:a7:73:87:81:b3:55:6b:62:8d:97: 28:3c:c2:04:ae:f4:54:e9:5e:8b:16:6d:6e:01:2c: 8e:41:3b:d6:ae:96:81:f0:55:ad:61:be:5d:3b:02: 16:d8:c4:ae:ca:b2:4c:04:35:91:b5:70:21:b6:c5: 58:80:72:71:35:9c:ef:3a:bf:7d:9e:f6:e3:ad:b1: 3a:0f:2d:93:8e:d0:77:b9:ac:13:fe:45:3c:c2:48: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:14:77:EA:3F:41:CA:F4:33:4C:3D:91:3C:11:31:86:5B:09:C6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/cbb5f61a-8980-3ead-b1f0-0ab0e50a1d76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738/b98f151e-4679-4527-a2b7-2b1bf9c28738.crl X509v3 Authority Key Identifier: keyid:7E:AD:4B:F8:CB:87:EB:55:CF:15:68:C1:EB:E5:C9:04:3C:2D:F9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f151e-4679-4527-a2b7-2b1bf9c28738.cer sbgp-ipAddrBlock: critical IPv4: 173.240.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1a:a0:71:ea:2d:14:2d:c9:2f:a4:46:ed:0d:7c:e7:40:b1: 03:7c:39:64:4b:c9:cd:e3:3b:be:8f:c2:8a:b0:83:09:3d:55: fa:fd:96:ce:19:ca:05:77:f6:8d:42:bd:18:1c:21:e1:32:81: 9b:97:25:11:5f:be:bf:1e:fc:28:57:f6:0b:50:78:1b:3a:fe: 66:ab:49:2a:ff:20:77:2f:a6:a3:8f:9a:41:94:7e:a6:c8:d0: 5b:a5:02:00:c4:5c:7b:64:8a:0f:5a:9f:3c:5d:75:22:21:3a: 56:4a:3d:b1:90:20:ba:b8:95:68:4c:71:a3:b3:0a:13:ee:94: 61:1c:bd:19:9f:69:62:f7:2f:84:20:78:ce:9e:62:76:ed:7d: b4:34:7e:c9:1f:4a:22:91:96:59:2f:f7:9f:43:da:1a:60:6f: 12:18:61:38:b8:36:1d:93:14:b9:83:2b:75:96:25:4d:99:04: a3:5a:a0:84:ca:10:62:2d:9d:8e:4d:91:2e:a2:d1:52:0c:63: 45:37:dc:68:bf:97:67:f5:07:5b:fc:c2:97:cb:95:82:d4:32: b7:6f:95:0e:18:4c:52:27:44:92:5f:9a:de:48:ca:e9:e9:6b: e5:03:22:55:01:3c:f2:32:9f:99:4e:b1:dd:1b:8a:87:1f:15: 9c:b7:31:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwXJtQLp2B787IwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4ZjE1MWUtNDY3OS00NTI3LWEyYjctMmIxYmY5YzI4 NzM4MB4XDTI1MDIxOTIyMjcyOVoXDTI1MDUyMDIxMjcyOVowLzEtMCsGA1UEAxMk NTdhM2E1MDAtYWVhZi00NzRiLTk0YjEtMWRmNjE5OGE3ODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvSQvdxijTAKDe0vkx5vHMJ2T3WTJlSg2/F3 0fHqZUPjh6663zMCU+j26dDLpbx09Xcjdn4eJ9toc4Lp7u+vQ+CSsRk9I1Fgc+PP ZjcIbpzM+TXrRYbsqmuQqWWm/qWwere2KIgMTt/haecTWUCoobn8QnHHuJlqib1h StYoxiaSOTBWcy3MnF2+FNSRJsowf5pKkbvXLYtT1Mcz9a/zjtBlelSCeM+il6dz h4GzVWtijZcoPMIErvRU6V6LFm1uASyOQTvWrpaB8FWtYb5dOwIW2MSuyrJMBDWR tXAhtsVYgHJxNZzvOr99nvbjrbE6Dy2TjtB3uawT/kU8wkgrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkUd+o/Qcr0M0w9kTwRMYZbCcYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOThm MTUxZS00Njc5LTQ1MjctYTJiNy0yYjFiZjljMjg3MzgvY2JiNWY2MWEtODk4MC0z ZWFkLWIxZjAtMGFiMGU1MGExZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4ZjE1MWUtNDY3OS00NTI3LWEy YjctMmIxYmY5YzI4NzM4L2I5OGYxNTFlLTQ2NzktNDUyNy1hMmI3LTJiMWJmOWMy ODczOC5jcmwwHwYDVR0jBBgwFoAUfq1L+MuH61XPFWjB6+XJBDwt+Y8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOThmMTUxZS00Njc5LTQ1MjctYTJiNy0yYjFi ZjljMjg3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUaoHHqLRQtyS+kRu0NfOdAsQN8OWRLyc3jO76Pwoqwgwk9Vfr9ls4Z ygV39o1CvRgcIeEygZuXJRFfvr8e/ChX9gtQeBs6/marSSr/IHcvpqOPmkGUfqbI 0FulAgDEXHtkig9anzxddSIhOlZKPbGQILq4lWhMcaOzChPulGEcvRmfaWL3L4Qg eM6eYnbtfbQ0fskfSiKRllkv959D2hpgbxIYYTi4Nh2TFLmDK3WWJU2ZBKNaoITK EGItnY5NkS6i0VIMY0U33Gi/l2f1B1v8wpfLlYLUMrdvlQ4YTFInRJJfmt5Iyunp a+UDIlUBPPIyn5lOsd0biocfFZy3Mek= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:19 2025 by rpki-client